Report - hextraprimeasia.com/wp-admin/user/del-il/?pwd=del

Report Overview

Submitted URL
hextraprimeasia.com/wp-admin/user/del-il/?pwd=del
IP
104.26.0.78
ASN
#13335 CLOUDFLARENET
Submitted
2023-01-17 07:27:36
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	368 B	1.9 kB	104.18.20.226
hextraprimeasia.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.6 kB	123 kB	172.67.72.99
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	4.9 kB	142.250.74.131
www4.0zz0.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	415 B	18 kB	188.114.97.1
aww.moe	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	371 B	115 B	216.66.77.170
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	46 kB	34.120.237.76
www.fugusau.edu.ng	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	438 B	180 kB	109.70.148.31
cdn.jsdelivr.net	439	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	407 B	23 kB	151.101.65.229
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	483 B	24 kB	216.58.207.227
maxcdn.bootstrapcdn.com	724	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	880 B	1.9 kB	104.18.11.207
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	338 B	728 B	23.36.76.226
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350 B	1.0 kB	143.204.42.165
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.10.36.158
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	815 B	367 kB	104.17.25.14
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	374 B	32 kB	69.16.175.42
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	1.9 kB	93.184.220.29
s3-eu-west-1.amazonaws.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	431 B	507 B	52.218.90.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-17 07:27:26	medium	Client IP	216.66.77.170	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	37 kB	2023-03-07	2024-04-19
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-04-19 12:41:53 Times Seen54347 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-18
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.65.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-18 21:39:19 Times Seen26345 Hash 0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe Loading...

	unknown	0 B	2023-03-07	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-19 12:55:25 Times Seen36959974 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.payment/3.0.0/jquery.payment.min.js	8.5 kB	2023-03-07	2024-04-14
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.payment/3.0.0/jquery.payment.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-04-14 17:49:16 Times Seen2921 Hash ae3f52c2166f5c09f5f3ceeda2c15f01 7d5b0613ee02bc0f39f546443f338c806634c5f6 6c4ba1c662b440b3aefe5e5147ea2df72f80e510e4979c65485a7b0fff894e37 Loading...

	code.jquery.com/jquery-3.5.1.min.js	90 kB	2023-03-07	2024-04-19
Pretty URL code.jquery.com/jquery-3.5.1.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-19 12:45:50 Times Seen138280 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	hextraprimeasia.com/wp-admin/js/pp/assets/js/jquery.mask.js	23 kB	2023-03-07	2024-04-18
Pretty URL hextraprimeasia.com/wp-admin/js/pp/assets/js/jquery.mask.js IP 172.67.72.99 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:34 Last Seen2024-04-18 06:24:48 Times Seen2644 Hash 24992f1ed62baf9393609f3c6c2ad20e 34716cf70f7f7a9cd072e7796c34ce987f85d18c a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8 Loading...

	hextraprimeasia.com/wp-admin/js/pp/assets/js/script.js	887 B	2023-03-07	2023-09-18
Pretty URL hextraprimeasia.com/wp-admin/js/pp/assets/js/script.js IP 172.67.72.99 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:33 Last Seen2023-09-18 07:01:20 Times Seen32 Hash 1ada3adc57e5c7118f2d875ee7767d8f 37bcb45743e168e36e03d73d3b7f86c584b911b0 68e5a37f84444a38352352da18b46f711f0afacae6139af6d265856a9cadfac9 Loading...

HTTP Transactions (53)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash bb0c8d0984a1f09a012961a54cda03c6 1a8ad450a0241554ee4fc7d02fac7b83529e60f6 eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A" Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13379 Expires: Tue, 17 Jan 2023 11:10:24 GMT Date: Tue, 17 Jan 2023 07:27:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 2258cd6b877a3aca8f4c84074e65ac4b 4e46c70941f8e497e8afc8d078644e7f81761a1c faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF" Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5664 Expires: Tue, 17 Jan 2023 09:01:49 GMT Date: Tue, 17 Jan 2023 07:27:25 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 17 Jan 2023 06:42:16 GMT content-type: application/json age: 2709 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash d38f4bb41e1264b8a1e11ff0b1499d20 21c3e36bd908df43e0d49b747e270ec75cb882b0 3ff822eb56d2218ad6244fd013a82e0d27450ae21d47e08f1e3fdf4c82a8aad7 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7" Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11658 Expires: Tue, 17 Jan 2023 10:41:43 GMT Date: Tue, 17 Jan 2023 07:27:25 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: BM034PIJP8YN+DwxgcPhcH5/aawc0HCId3cimKrE3BD6oQ/ppxSDEv2OjfxTVWT7Mk6WoBp44hY= x-amz-request-id: H026T9AA4PD7YM41 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 17 Jan 2023 06:56:08 GMT age: 1877 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	e1.o.lencr.org/	23.36.76.226	200 OK	344 B
URL HTTP/1.1 e1.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 344 B (344 bytes) Hash adade9641927fbb130fe40795fb32689 ac5415f580fdd96c598e913d69cf30cac7405725 06436638e7c457eb6a138fdcbd7aa202927c3778fdc210c2508a713faec1f9ae HTTP Headers `POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 344 ETag: "06436638E7C457EB6A138FDCBD7AA202927C3778FDC210C2508A713FAEC1F9AE" Last-Modified: Mon, 16 Jan 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21576 Expires: Tue, 17 Jan 2023 13:27:01 GMT Date: Tue, 17 Jan 2023 07:27:25 GMT Connection: keep-alive`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Tue, 17 Jan 2023 07:27:25 GMT content-type: application/json content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 17 Jan 2023 07:17:25 GMT age: 601 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	www4.0zz0.com/2023/01/17/03/313530589.gif	188.114.97.1	200 OK	18 kB
URL HTTP/2 www4.0zz0.com/2023/01/17/03/313530589.gif IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type GIF image data, version 89a, 200 x 103\012- data Size 18 kB (17585 bytes) Hash f3ffb13cf88b13ec557e6149371b361d 3c72f0855b4bd6e3b45675a5e8b08c8fb7a98f49 ce6a239fde88d8fb01c7a10d6f7b27d1bc23f5462d02f5ebb4927479fa32a302 HTTP Headers `GET /2023/01/17/03/313530589.gif HTTP/1.1 Host: www4.0zz0.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:26 GMT content-type: image/gif content-length: 17585 last-modified: Tue, 17 Jan 2023 03:00:54 GMT etag: "44b1-5f26ce87a0140" cache-control: max-age=28800 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XGwDeAOkDlc1LUq6tmG3pGhKT7ppg9u4Ifdy1bqv%2BIjlAfoSCi8PWrCLVgOReOGxpvOACxTbfMd4RPnLMRg%2FpVVAwMbPDQDvhxf%2BE5YRWF2ZgWF7py%2Fx8h5rBY50QfD3"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding strict-transport-security: max-age=15552000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 78ad5e4bae85b50c-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash d03545e1fc5a8876441094039811aac5 99fcc840f3516298625c528e9b408132f7fcbb9c 166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 175 Cache-Control: max-age=92542 Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:26 GMT Etag: "63c513ad-1d7" Expires: Wed, 18 Jan 2023 09:09:48 GMT Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT Server: ECS (ska/F71C) X-Cache: HIT Content-Length: 471`

	aww.moe/jyowta.css	216.66.77.170	502 Bad Gateway	0 B
URL HTTP/2 aww.moe/jyowta.css IP 216.66.77.170:0 ASN #6939 HURRICANE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /jyowta.css HTTP/1.1 Host: aww.moe User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 502 Bad Gateway server: Caddy content-length: 0 date: Tue, 17 Jan 2023 07:27:26 GMT X-Firefox-Spdy: h2`

	ocsp.sca1b.amazontrust.com/	143.204.42.165	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 143.204.42.165:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 67ff8230ca79de712b4fc2b70eebcc1d c83218da71e8c8a47d524cdd54ab559e5b21a1c1 4fd26a41526e36672f13bfd79d3c7c63e744f21f8beda4f132ef5b7e7c59ca35 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=97446 Date: Tue, 17 Jan 2023 07:27:26 GMT Etag: "63c510cc-1d7" Expires: Wed, 18 Jan 2023 10:31:32 GMT Last-Modified: Mon, 16 Jan 2023 08:54:36 GMT Server: ECS (nyb/1D15) X-Cache: Miss from cloudfront Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: EJhzqCqeXH7-8_0fUYhjpFP8CEt_2Q9z8t6Wn4iLW6jFTGRwaLSAOQ== Age: 5816

	www.fugusau.edu.ng/wp-content/uploads/2021/01/loading-icon-animated-gif-19.gif	109.70.148.31	200 OK	180 kB
URL HTTP/2 www.fugusau.edu.ng/wp-content/uploads/2021/01/loading-icon-animated-gif-19.gif IP 109.70.148.31:0 ASN #25369 Hydra Communications Ltd File type GIF image data, version 89a, 800 x 600\012- data Size 180 kB (179559 bytes) Hash f16c75345da3e1e00c8fd1693280e886 614eb4d9eaae80f1edb18814aba3b33c8ad31315 e2fc06d292afc261b58e770cb46645833624cb8659f9f9735740761cdd4b87af HTTP Headers `GET /wp-content/uploads/2021/01/loading-icon-animated-gif-19.gif HTTP/1.1 Host: www.fugusau.edu.ng User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Tue, 24 Jan 2023 07:27:26 GMT content-type: image/gif last-modified: Wed, 20 Jan 2021 13:43:04 GMT accept-ranges: bytes content-length: 179559 date: Tue, 17 Jan 2023 07:27:26 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	s3-eu-west-1.amazonaws.com/dhl-parcel-cdn/images/dhl-parcel-logo-hd.png	52.218.90.35	403 Forbidden	243 B
URL HTTP/1.1 s3-eu-west-1.amazonaws.com/dhl-parcel-cdn/images/dhl-parcel-logo-hd.png IP 52.218.90.35:0 ASN #16509 AMAZON-02 File type XML 1.0 document text\012- XML document, ASCII text Size 243 B (243 bytes) Hash 79241682e0b6a2654f508a48e11beb10 526862b305241151bcc14fe5121d4c8f31405fa4 72262cd7d892f40ac723068c2638e1c2e1ff991b0a902cff203343f58bfc701b HTTP Headers `GET /dhl-parcel-cdn/images/dhl-parcel-logo-hd.png HTTP/1.1 Host: s3-eu-west-1.amazonaws.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/1.1 403 Forbidden x-amz-request-id: HEZ3H45PW85AVYQF x-amz-id-2: bP3WCQXVtto67JnpVUY938T382Sj8jhG//8bCOm2Hnrf/3H2GHE3sOi6XN8e6yvDCDeoVbYjJPQ= Content-Type: application/xml Transfer-Encoding: chunked Date: Tue, 17 Jan 2023 07:27:25 GMT Server: AmazonS3`

	push.services.mozilla.com/	52.10.36.158	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.10.36.158:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: daG1yokAdHpVpfeGL4db2g== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: ugtamsXtU6zQn/hptiVTX7PM8qw=`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17208 Expires: Tue, 17 Jan 2023 12:14:15 GMT Date: Tue, 17 Jan 2023 07:27:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17208 Expires: Tue, 17 Jan 2023 12:14:15 GMT Date: Tue, 17 Jan 2023 07:27:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17208 Expires: Tue, 17 Jan 2023 12:14:15 GMT Date: Tue, 17 Jan 2023 07:27:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17208 Expires: Tue, 17 Jan 2023 12:14:15 GMT Date: Tue, 17 Jan 2023 07:27:27 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg	34.120.237.76	200 OK	4.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.7 kB (4736 bytes) Hash c8077a04cfa8a88823a83c3481fe33eb 534966ca691706e724af5a9891859e1ee3c10b78 b8df497111b6e7876f53bd2433d9a0c5153f8b84b1ccd91dc5eb9bfdbe4579aa HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4736 x-amzn-requestid: 4f03413a-fd17-4b48-ba36-e1580ee5c19a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e2tm-HLroAMFTMg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c5c2f9-08fc93b860c346db68f4a83c;Sampled=0 x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: o5RDE78dy_8WnKnE3Mof3y7XIERvuO4VI2r6paywDMzjE8LdFqksfA== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 21:56:26 GMT age: 34261 etag: "534966ca691706e724af5a9891859e1ee3c10b78" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg	34.120.237.76	200 OK	4.3 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.3 kB (4272 bytes) Hash 304bb1b20c55a224a8aa28c2af0a0d0e 590f9978d35d8bff19b665505b9761f87c66b915 74a5930f8ccc54b5618892ace303d163066656b02c942273e8d6debcf2ab3614 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4272 x-amzn-requestid: e53617f5-3c7b-4a81-a9bb-79667a1ef7c3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ej0BwETpIAMFdcw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63be33a4-328c82663ce8bb024b0181d9;Sampled=0 x-amzn-remapped-date: Wed, 11 Jan 2023 03:57:24 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: RPQ9yl2wbB4u7VZlCLdCGijWsLz2489wJHIf1iVKNlBCNZLG168X3Q== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 21:59:37 GMT age: 34070 etag: "590f9978d35d8bff19b665505b9761f87c66b915" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg	34.120.237.76	200 OK	7.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.9 kB (7873 bytes) Hash a5d0a29e6fe3ce0fb4a9237dd5917778 6919dcbbcdcc241672358cc5733ef064180c928a 6d0d71c35e1ca331ee5f4794bc74747f7c38f2d46863d983377bef526f7ca356 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7873 x-amzn-requestid: 8a2a267d-8062-4755-8b1d-1e715ee9c413 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: exco-GL0oAMF-uQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c3a7d2-567e30c7063b71217f8175fc;Sampled=0 x-amzn-remapped-date: Sun, 15 Jan 2023 07:14:26 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: aoUE55XskHX9ihSEFJY9vIOTN6xuMDsTer_pUNRMRBE-r-3r34ozfQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 22:05:01 GMT age: 33746 etag: "6919dcbbcdcc241672358cc5733ef064180c928a" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg	34.120.237.76	200 OK	3.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 3.2 kB (3172 bytes) Hash 1d877fea13674783b11ec5f6c3e93810 6691f478a758386f8c7a0f714fbfe8d36b1bf257 b64d0343ca935e1618a3cedfa7fa837467917daf09bf667cf7709f52341e8015 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 3172 x-amzn-requestid: eb8ff1a2-7d00-4a79-a826-ccad6837e0ab x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e2tm-HSNIAMFo0A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c5c2f9-55f2241b08e4756f1399447a;Sampled=0 x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: lewJYOho6ZhbztLXUHN23ulfSnnOfhWX38vJjsR-c9TPc_owyt19yA== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 22:03:00 GMT age: 33867 etag: "6691f478a758386f8c7a0f714fbfe8d36b1bf257" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (10592 bytes) Hash 7558650f7e974b34a7b3cb0c3c3a310c 7adb15e8c38cb18b57a696f8c1f08c523e1137e4 3179a4c545337e9a32d4f1ab851a3ec30ee16b44014c127630e1efcbf77e0c29 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10592 x-amzn-requestid: 7cb5c56a-324a-4eef-b2d0-63e151ae2920 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: etlLyEhToAMF34Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c21be4-7b48a8de0c2957dc329af0e0;Sampled=0 x-amzn-remapped-date: Sat, 14 Jan 2023 03:05:08 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: KCDUOpQql1yt1G1lUcx8RWsNPq4xot4R_8ddIZwvL-igHXTkEtdXAQ== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 07:45:13 GMT age: 85334 etag: "7adb15e8c38cb18b57a696f8c1f08c523e1137e4" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20129690-ba2c-4d31-9d15-963cf6e4f66e.jpeg	34.120.237.76	200 OK	8.6 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20129690-ba2c-4d31-9d15-963cf6e4f66e.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.6 kB (8610 bytes) Hash fbadbf308733e10efcf26a97bd5f86c7 a51e7e889bfdab10c59624a0fb1c301054e2d3d8 e87c014b465f1deed4316d7e7581ab63329523e68f9ca3e47c180cf14f43d9aa HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20129690-ba2c-4d31-9d15-963cf6e4f66e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8610 x-amzn-requestid: 14c3776b-05ba-4367-93f1-b887b7e1bd10 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e2tm7FlGoAMFuKw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c5c2f8-125017a12c4b83130a70b836;Sampled=0 x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: mqgt51FSXFokAtn5znzBQsaXsbqHbLHuJQvqhFlRxFFDFy36peimeg== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Mon, 16 Jan 2023 21:46:15 GMT age: 34872 etag: "a51e7e889bfdab10c59624a0fb1c301054e2d3d8" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	280 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 280 B (280 bytes) Hash ee56f3aa7ddc9c39f856f7e68544229f 8ee161b8f318838a73b90b4d4192577876fa38a1 fef46b83b3fe02c6d67e2a3c8a533c0bb2506bee0bf021b81b3c5f192179aa9b HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3380 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Last-Modified: Tue, 17 Jan 2023 06:31:13 GMT Server: ECS (ska/F71C) X-Cache: HIT Content-Length: 280`

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	151.101.65.229	200 OK	22 kB
URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.65.229:0 ASN #54113 FASTLY File type ASCII text, with very long lines (65299) Size 22 kB (22442 bytes) Hash 84e585e508257b149cf52b5ba65dafba 141cd4a3560a4dd2b4fdf9e961079c300f494030 1a00d92371bb1b61d8fdce1473af8c69798eaa34ee7941f58babd75c8283d56d HTTP Headers `GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 5.0.2 x-jsd-version-type: version etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0" content-encoding: gzip accept-ranges: bytes date: Tue, 17 Jan 2023 07:27:33 GMT age: 7191729 x-served-by: cache-fra-eddf8230092-FRA, cache-bma1646-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 22442 X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	280 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 280 B (280 bytes) Hash ee56f3aa7ddc9c39f856f7e68544229f 8ee161b8f318838a73b90b4d4192577876fa38a1 fef46b83b3fe02c6d67e2a3c8a533c0bb2506bee0bf021b81b3c5f192179aa9b HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3380 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Last-Modified: Tue, 17 Jan 2023 06:31:13 GMT Server: ECS (ska/F71C) X-Cache: HIT Content-Length: 280`

	cdnjs.cloudflare.com/ajax/libs/jquery.payment/3.0.0/jquery.payment.min.js	104.17.25.14	200 OK	2.4 kB
URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.payment/3.0.0/jquery.payment.min.js IP 104.17.25.14:0 ASN #13335 CLOUDFLARENET File type Unicode text, UTF-8 text, with very long lines (8392) Size 2.4 kB (2420 bytes) Hash 5fa1a60087fef53b1c0c4f4d6014f684 361a5d6829ec17ebf82571f3b20bd472ab4b0141 43c8409c5dc3b3b21b12068ca0089744c14770ba7f316dfb704b4104cb951bef HTTP Headers `GET /ajax/libs/jquery.payment/3.0.0/jquery.payment.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: application/javascript; charset=utf-8 content-length: 2420 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03ec3-210b" last-modified: Mon, 04 May 2020 16:11:47 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 1002027 expires: Sun, 07 Jan 2024 07:27:33 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d1SUQTabi%2Bl2txsTNOtSB27qCrpwwHezscK7WQ0L1y9aO%2FiIfxmNEe4X6Hu80sKGnjNw8cvK4IxpmnpwvsgZ6mVo5dGHnubL%2BODRzuPQUUCUMaG5M1oH52tw8dWKUhqvX7goHI2O"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 78ad5e7878a4b511-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js	104.17.25.14	200 OK	362 kB
URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js IP 104.17.25.14:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (65350) Size 362 kB (362308 bytes) Hash 62bb7903fab88f2eb3e614bd662f4c72 7e404419744e5b1a842e50a344c6ac6f24753118 2fcdd5f98d838b1440e4101dc63a2a77881e9474fa52577f54f9407b61e418b6 HTTP Headers `GET /ajax/libs/font-awesome/5.15.1/js/all.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: application/javascript; charset=utf-8 content-length: 362308 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5f7b5b5f-123bd0" last-modified: Mon, 05 Oct 2020 17:43:59 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 2807342 expires: Sun, 07 Jan 2024 07:27:33 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WEJO2LbiHfzUDZwSDCRRr4OZCtOev1nxSjbvS3Jkz4fbAica27ssAAtJ75e0viaIwzy%2Fd%2B1NMOq3ZEs%2BgPyBkhB0iAKg68DJTzCfOStKghUUDuuAfkyMO0kOFW25qlfRXakNKxu2"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 78ad5e78689ab511-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	code.jquery.com/jquery-3.5.1.min.js	69.16.175.42	200 OK	31 kB
URL HTTP/2 code.jquery.com/jquery-3.5.1.min.js IP 69.16.175.42:0 ASN #20446 STACKPATH-CDN File type ASCII text, with very long lines (65451) Size 31 kB (30879 bytes) Hash 3700d0b271343804b9b9aa1c13efa521 3d6b03dbd74872ca3dfbb0529f6c80943788f918 fda7541f8e4cf921d20bcd0dc1d0efe69644c79bd18a0be4ce2f34246c83603e HTTP Headers `GET /jquery-3.5.1.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-encoding: gzip content-length: 30879 content-type: application/javascript; charset=utf-8 last-modified: Fri, 20 Aug 2021 17:47:53 GMT accept-ranges: bytes server: nginx etag: W/"611feac9-15d84" cache-control: max-age=315360000, public access-control-allow-origin: * vary: Accept-Encoding x-sp-metadata: HS256.CPW3mZ4GEoYBCiQyYjFmNWQxZi00NTVmLTQwODItYWY1Ni1jODMyY2E3NDQzMWQQ+OiCoKvU+wIaBgjlm5meBiIMOTEuOTAuNDIuMTU0KJNjMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiRmMDJmYzI1MS02YjVmLTRmZWMtOTRlOC1kZDhjMTVhYWQ1ZGUYn/EBIhgIAhIUY2RzMjA4LnNrMS5od2Nkbi5uZXQ=.493RylchKqREBSj0lQAylWfdJi1PBggPnmow3lFfIkc= x-hw: 1673940453.dop001.sk1.t,1673940453.cds261.sk1.hn,1673940453.cds208.sk1.c X-Firefox-Spdy: h2

	ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4	104.18.20.226	200 OK	1.5 kB
URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 IP 104.18.20.226:0 ASN #13335 CLOUDFLARENET File type data Size 1.5 kB (1462 bytes) Hash 424c3f3c16897f91d5e9ef97b8a22a8c b933881b64eefd21fa951b6f2f552f39597f4f59 ab6edb656db0f843d035ab84870052e408661bad1fe17cf4a01270de24cb4648 HTTP Headers `POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 17 Jan 2023 07:27:33 GMT Content-Type: application/ocsp-response Transfer-Encoding: chunked Connection: keep-alive Etag: "BED26939E008101ACC0A0964199B7119B84F851E" Expires: Tue, 17 Jan 2023 18:00:00 GMT Last-Modified: Tue, 17 Jan 2023 06:00:00 UTC Cache-Control: s-maxage=3600, public, no-transform, must-revalidate CF-Cache-Status: HIT Age: 1694 Vary: Accept-Encoding Server: cloudflare CF-RAY: 78ad5e78aec5b51d-OSL`

	hextraprimeasia.com/wp-admin/js/pp/assets/imgs/media.png	172.67.72.99	200 OK	2.4 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/imgs/media.png IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type PNG image data, 137 x 61, 8-bit/color RGBA, non-interlaced\012- data Size 2.4 kB (2448 bytes) Hash 366713b5412a254b23753e3e7cb048f6 bdf1c8f8fe9b2cdc1174f5f000c69c1a84a57901 ff8335bb6018fd59498c2a87865d484257d08cb7dbbaa88dda7964c3b799abf1 HTTP Headers GET /wp-admin/js/pp/assets/imgs/media.png HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: image/png content-length: 2448 cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SnzgCD7eODiCdWmbwm0ZIE5oAXBeIUyKCezwWhQ0J1cpqYkUI%2F5bXfcQbdmEaarEpstQoHwzyLYD0A7Ag7tm2GKXM9WgKMFsdtzN%2BsMjRKbtJ27XSrx9W5j%2BryGRGDjYf3RNJWw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 78ad5e781c100af6-OSL X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/assets/css/style.css	172.67.72.99	200 OK	1.6 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/css/style.css IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type ASCII text, with CRLF line terminators Size 1.6 kB (1568 bytes) Hash f1a83913959132effeb1b9c15e661654 d01abaaa8137cb1750bb1b969ffcf00a496f740e 3e8a64d33c8acc8bf3ef3d1ba82476af2eaa58e976944f281b6878b53e5ea8ae HTTP Headers GET /wp-admin/js/pp/assets/css/style.css HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: text/css cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TFs6DX5GhGCuIDrLEshNjQk%2BnvapLN5BT81KzyZVCb5yXIhQa7iVWsOne9iJu9JBvDOuACBs%2Btqf4uB75o4F4NLnRWVRm2lambf5ldIBBb2W4Pds%2BHpRYPSCpbj%2Fs0uD9U5WUsA%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e781c090af6-OSL content-encoding: br X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 1b2e51abfd12507b00ebd8b7afda6308 4d3d5fa49e007714dd37da7da25d9d490d05bd0a 85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	hextraprimeasia.com/wp-admin/js/pp/assets/css/bootstrap.css	172.67.72.99	200 OK	50 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/css/bootstrap.css IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Unicode text, UTF-8 text, with very long lines (560) Size 50 kB (49555 bytes) Hash 029a978046bde8a984b5899bf5f1eb74 901f7dcba580d2f0df77f8a0b322da02545e3539 ede12be43a3cd7f48634b8da3dff539cb1edc6030d15b8a9185ea72659e96516 HTTP Headers GET /wp-admin/js/pp/assets/css/bootstrap.css HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: text/css cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pr3m9WutWT4kDB0VKocfIUDVNgre2kETKuegwr8E0%2Fm8tSDN0m5sQR7haDRE78YpoKmswwYG1VPXwVPWFtvTW2ezkUUUlD2%2FY2FhTPUBKAcT7QamDg9xHie4sGNJSeU4fyQ7CLc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e780c060af6-OSL content-encoding: br X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	hextraprimeasia.com/wp-admin/js/pp?pwd=del	172.67.72.99	301 Moved Permanently	24 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp?pwd=del IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type data Size 24 kB (24341 bytes) Hash f1cef28ac5fa814f523af7434c4ccd7e abc1f5a55ae766432af7c37467610ecce944e7fd cde1dafd4836a434df46a04678b2de610cf2d7ab3142dd7b8325c7c120e85d96 HTTP Headers `GET /wp-admin/js/pp?pwd=del HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers` HTTP/2 301 Moved Permanently date: Tue, 17 Jan 2023 07:27:31 GMT content-type: text/html location: https://hextraprimeasia.com/wp-admin/js/pp/?pwd=del x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xEBjI4lDp1hsYR3XgTmD90SuMh%2BQNwdA9xjdo2ulYqTFGrHW6ul0zcWbfjoQ0nVEkTTOvdOJeULJvbP%2BDVljr0fz5t0rbNtaicKCOCC081SO40JQumit9esOBLzmzFDMGCc3Cl0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e6ebcd10af6-OSL X-Firefox-Spdy: h2

	fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2	216.58.207.227	200 OK	23 kB
URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP 216.58.207.227:0 ASN #15169 GOOGLE File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Size 23 kB (23040 bytes) Hash de69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49 HTTP Headers `GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://hextraprimeasia.com Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 23040 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 15 Jan 2023 10:25:03 GMT expires: Mon, 15 Jan 2024 10:25:03 GMT cache-control: public, max-age=31536000 last-modified: Tue, 26 Apr 2022 15:56:42 GMT content-type: font/woff2 age: 162150 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/assets/js/script.js	172.67.72.99	200 OK	24 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/js/script.js IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Algol 68 source text\012- Pascal source, ASCII text, with CRLF line terminators Size 24 kB (23627 bytes) Hash bd9e7a46069dca4b0eb27082a093f94e 03497cba7ef44a2af5ede8650be73c5a10d9bde8 3a776655e639a5fe472202ad3472943eebda8b5241764f248d3d57edff1902c7 HTTP Headers `GET /wp-admin/js/pp/assets/js/script.js HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: application/javascript cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YvYLP0%2F%2BU2tM%2BRE9rRG4DOF451Us%2FQWBlieL%2BH6I5mZE8UVxYlhx9eP8AU7vU1Rxnh0dgGr1mZ6GiFzt1yE5UlfwTtyLp%2FEQNowTwpUUlW30ihqgl1JALCgWsr9ftH41yl9XLQY%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e781c170af6-OSL content-encoding: br X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/assets/js/jquery.mask.js	172.67.72.99	200 OK	12 kB
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/js/jquery.mask.js IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type ASCII text Size 12 kB (11508 bytes) Hash 3d40655f4ef2ea8a15c79c6010faf41a 362a778e22c34463df7f546b4246b58d2f97366b b160b96e124bbed2a5ca9c99105f33bbad1633ec651eb18363a0271b6052c286 HTTP Headers `GET /wp-admin/js/pp/assets/js/jquery.mask.js HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: application/javascript cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hEZ1%2B7sxdJB5F%2B0JIjJcwX758F4h04UIV0CfuSraVGmh2ww%2FVy35DSpfXif5yeezx7RPlEyGoXkkBtkWXBfSzBDKnrycw0S%2F9Mtvy%2BhpuxMiOu4zfE6B2ejSQJxEVM21vpgYu9c%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e781c140af6-OSL content-encoding: br X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 17 Jan 2023 07:27:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	hextraprimeasia.com/wp-admin/js/pp/?pwd=del	172.67.72.99	302 Found	0 B
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/?pwd=del IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /wp-admin/js/pp/?pwd=del HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers` HTTP/2 302 Found date: Tue, 17 Jan 2023 07:27:32 GMT content-type: text/html; charset=UTF-8 location: clients/juylXT.php?verification#_ x-powered-by: PHP/7.2.34 set-cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D2BKldqnsdon0ESIcOXDdQKpBIbpqOWLrY5g6Y25%2Bky8Nvm%2F%2BhB9oufSq79H1co4SwGDLi%2FN44YcLGMlGe48FXCslyy1tpMglKSfhpOTTK4z8UJVWh6c8o5IWa1asmgI%2BYaB3M0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e6f1d180af6-OSL X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/assets/imgs/fot-l.svg	172.67.72.99	200 OK	0 B
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/imgs/fot-l.svg IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /wp-admin/js/pp/assets/imgs/fot-l.svg HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: image/svg+xml cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jcsz4tlNXi4gjR47sniSnO88n3%2FIg4I%2FlCLpjsPCAMbqWSDbkiJE0YiHgTnJwH%2FvIlQcBAIniYhvM4s9hfq8J7%2FFB%2BiX3WbobAe4bRz6i9dQ%2BO9nsJcVkm%2BlhVm99mrzAGWnoMs%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e781c0e0af6-OSL content-encoding: br X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/user/del-il/?pwd=del	172.67.72.99	200 OK	0 B
URL HTTP/2 hextraprimeasia.com/wp-admin/user/del-il/?pwd=del IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /wp-admin/user/del-il/?pwd=del HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:25 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/7.2.34 vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nFmdCUJ7R0JRidLIAaFmejwywPOZW0olzLH3SCgvY2r0m6zVVp0JG3BMddHLvR1qW5zVa7IdVKRSSvX8QIcaRD5EL8vglSzpq0fV%2BKykRQvHj6%2Beb%2BLIcLgDppF%2FcY%2FYNCwqGkc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e4a1eea0af6-OSL content-encoding: br X-Firefox-Spdy: h2

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	104.18.11.207	200 OK	0 B
URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.11.207:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hextraprimeasia.com Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:26 GMT content-type: application/javascript; charset=utf-8 vary: Accept-Encoding cdn-pullzone: 252412 cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74 cdn-requestcountrycode: DE access-control-allow-origin: * cache-control: public, max-age=31919000 etag: W/"5869c96cc8f19086aee625d670d741f9" last-modified: Mon, 25 Jan 2021 22:04:00 GMT cdn-cachedat: 11/15/2022 10:30:01 cdn-proxyver: 1.03 cdn-requestpullcode: 200 cdn-requestpullsuccess: True cdn-edgestorageid: 1053 cdn-status: 200 timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff cdn-requestid: c1f551ef466d632dc4089fd5d5c86f42 cdn-cache: HIT cf-cache-status: HIT strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 78ad5e4b7814fac4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/assets/imgs/favicon.ico	172.67.72.99	200 OK	0 B
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/assets/imgs/favicon.ico IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /wp-admin/js/pp/assets/imgs/favicon.ico HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: image/x-icon cache-control: public, max-age=31557600 expires: Wed, 17 Jan 2024 13:27:33 GMT last-modified: Tue, 17 Jan 2023 02:55:56 GMT x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DdaM2%2FstVruqt3nq5LysXKIF0NYeslzCDaKLCsYIyAqeLJKqXxl5uIK2%2BbrFf8ifzsIKm9Svi4zvN0VLXq0fhvHYnJ%2BfznRMJv%2BYQNfbpsUd35svLnVqsdp5ZrZdU1pPnd7z8j8%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 78ad5e7a5dd40af6-OSL content-encoding: br X-Firefox-Spdy: h2

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	104.18.11.207	200 OK	0 B
URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.11.207:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hextraprimeasia.com Connection: keep-alive Referer: https://hextraprimeasia.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:26 GMT content-type: text/css; charset=utf-8 vary: Accept-Encoding cdn-pullzone: 252412 cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74 cdn-requestcountrycode: DE access-control-allow-origin: * cache-control: public, max-age=31919000 etag: W/"ec3bb52a00e176a7181d454dffaea219" last-modified: Mon, 25 Jan 2021 22:03:59 GMT cdn-cachedat: 01/05/2023 13:19:14 cdn-proxyver: 1.03 cdn-requestpullcode: 200 cdn-requestpullsuccess: True cdn-edgestorageid: 1082 timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff cdn-status: 200 cdn-requestid: d2eec8a9a7051766d22d99f715efab3a cdn-cache: HIT cf-cache-status: HIT strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 78ad5e4b680ffac4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification	172.67.72.99	200 OK	0 B
URL HTTP/2 hextraprimeasia.com/wp-admin/js/pp/clients/juylXT.php?verification IP 172.67.72.99:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /wp-admin/js/pp/clients/juylXT.php?verification HTTP/1.1 Host: hextraprimeasia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: PHPSESSID=ef659e76030d028875c090d28cfa4a16 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Tue, 17 Jan 2023 07:27:33 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/7.2.34 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload; referrer-policy: no-referrer-when-downgrade cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CYGKzpT9KuEaVdBPljOnHGiZcYjRfiLOyS0c8Bxi2Wo8BK6AiVPJPSLWrdP3j4n4OsV17SOTe78LhDZ%2BOPLpXK1vTPRK1tCgxTh6NE8EZWKmKO7jj5WF4tXURMRy0X7JyK7%2BeuQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 78ad5e73c8e90af6-OSL content-encoding: br X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (53)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers