r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Sat, 26 Nov 2022 05:22:21 GMT
Date: Sat, 26 Nov 2022 03:15:56 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4420
Cache-Control: max-age=116938
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:56 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:44:54 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sat, 26 Nov 2022 05:59:29 GMT
Date: Sat, 26 Nov 2022 03:15:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 02:19:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3406
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lydBzdTYQRxbSHpDw1uQBntJJ4bXqLngrUBl9wUkq1PWLrX2qSFD3bNE/hYGC7yIHs0oBU9vmbI=
x-amz-request-id: 82HMY578VK0QZNSJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 02:41:02 GMT
age: 2094
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 03:15:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
301 Moved Permanently 0 B URL HTTP/1.1 tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/nfx/ma-en/success HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 03:15:54 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2
Connection: Upgrade, Keep-Alive
Location: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Content-Length: 0
Keep-Alive: timeout=1, max=32
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 03:11:11 GMT
cache-control: public,max-age=3600
age: 285
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5091
Cache-Control: max-age=112546
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:56 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 10:31:42 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lmbDZt9H4yhndSsO5wB5PA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UNINBhM+zvU6YiOY/ixi9+vFztg=
ocsp.digicert.com/
200 OK 279 B IP
Hash 3a88d4276fb8f28401fe60075759ecc4
e1b4b435cb04254346702d4ac6e668e792fd0af9
46a1baa67d23be2ae003bb4acb33f7ed8ddf753297d596e6dcb6f6b7f52b99d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5552
Cache-Control: max-age=133895
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:57 GMT
Etag: "6380d744-117"
Expires: Sun, 27 Nov 2022 16:27:32 GMT
Last-Modified: Fri, 25 Nov 2022 14:55:00 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 3a88d4276fb8f28401fe60075759ecc4
e1b4b435cb04254346702d4ac6e668e792fd0af9
46a1baa67d23be2ae003bb4acb33f7ed8ddf753297d596e6dcb6f6b7f52b99d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5552
Cache-Control: max-age=133895
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:57 GMT
Etag: "6380d744-117"
Expires: Sun, 27 Nov 2022 16:27:32 GMT
Last-Modified: Fri, 25 Nov 2022 14:55:00 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
code.jquery.com/ui/1.12.1/jquery-ui.min.js?ver=1.12.1
200 OK 68 kB URL HTTP/2 code.jquery.com/ui/1.12.1/jquery-ui.min.js?ver=1.12.1
IP
File type ASCII text, with very long lines (32073)
Hash f0bace743f1df1ed27e2fe6611e39946
e5f42b8d964a6bf9962b8a5e68a2b7cdeb9e59e2
ff0566efdda39b480ab9871deddb3358906449518c2db3c105aa0b461c3c742d
GET /ui/1.12.1/jquery-ui.min.js?ver=1.12.1 HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 03:15:57 GMT
content-encoding: gzip
content-length: 67751
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:54 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feaca-3dee4"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669432557.dop016.sk1.t,1669432557.cds066.sk1.hn,1669432557.cds227.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit&ver=3.6.5
200 OK 554 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&ver=3.6.5
IP
File type ASCII text, with very long lines (852), with no line terminators
Hash 0a628b8a14a877262721824930709597
31bbb380c04a4229a099a1fb6dea09cf717bcb5f
6c63432c24b1f8eed67f792c68214710fd6444ede5c28f56202e966770d20121
GET /recaptcha/api.js?render=explicit&ver=3.6.5 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 26 Nov 2022 03:15:57 GMT
date: Sat, 26 Nov 2022 03:15:57 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tuassouthdormitory.com.sg/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
200 OK 83 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (39791)
Hash 7e7a1a9e3712cd16dade7c6e811ba28b
45e216af145ea7c3f30099c869482785ad921bc2
cdbdaa122823601390c7dcbdd1afde33c2f1a432b8c5ff025c6137ee99ba541a
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:59 GMT
accept-ranges: bytes
content-length: 83419
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/assets/css/main.css?ver=1.4263774
200 OK 1.0 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/assets/css/main.css?ver=1.4263774
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash df690b70b0e76e65138472a5e72c3e78
e0d7434bcd5d27c47cc43cde14ec0bd6952b34c1
c3c0f4a8dea69ad9d3b06aa467cf1144b96bbbf66e091fc3208f8b89546c5b97
GET /wp-content/themes/hello-elementor-child/assets/css/main.css?ver=1.4263774 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1017
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/style.min.css?ver=2.4.1
200 OK 2.5 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/style.min.css?ver=2.4.1
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (5856)
Hash 91c0621386a95d7384e8f42f765fc01b
e55148fbbeb448394a10640dfae5c2e17eb91f15
5b0cbeec9edd756015de2a9053985b0a874c310e2cea675bd8c22fb14a1e1a51
GET /wp-content/themes/hello-elementor/style.min.css?ver=2.4.1 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2517
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/theme.min.css?ver=2.4.1
200 OK 3.1 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/theme.min.css?ver=2.4.1
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (15164), with no line terminators
Hash 2d8fc6967f76da4ea57c7910a200dacb
e38658115c80f6ccea88cdb47b6a8b17132f6217
5588407ee440038283621d74f1ecb5a3f5a70b564de0a2dfcc79fa7eb05bf954
GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.4.1 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3113
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4
200 OK 18 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (65497)
Hash 495abb9a400d0729b66329bdb89c9081
43c6df47f1111fc29b290632300e657e504c873b
ce8a377b52483708c2f0d198d363039bc19ce68875fa820f00376b125a8e2014
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17936
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-5.css?ver=1650359622
200 OK 702 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-5.css?ver=1650359622
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (1272)
Hash dd72b9b14382e40129878776c3560797
97a1b0bcac92b3f173b8730141c959722f8d9b2b
8705ff14ca608fec0a7ea98a3be7fd9093fdb9934fef5486883f9d2beb2ab4c5
GET /wp-content/uploads/elementor/css/post-5.css?ver=1650359622 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:13:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 702
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.4.8
200 OK 733 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.4.8
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with CRLF line terminators
Hash 0785bf7d4ead90a3dc6d35acd3b3aef7
f615069b73400a9cd05fafcc4e272adbf9521669
dffbee57fc47644675b766adf9dcc4d5cc110f18e03d3ac858f4601a9807d86e
GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.4.8 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:10:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 733
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.6.5
200 OK 1.9 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.6.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (11362)
Hash 3617b6fc0a041d55e2b8cfe8d4246063
d26d9beb83ca629d68d57314d8a8be7bd2f18c61
437526a16fb619556a192a6b11402aa8228a03a6908410971850f1e317f07c8e
GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.6.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1936
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
200 OK 19 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (19082)
Hash 50be31853049e4b4a10c277d5f95eb75
ac2dffc0c65ad6b209fedf2169d0c50eb4119a3e
b651d87ef113cba0c8ec8a33bfdb694171effeba56b20be12e3c77fc15f6ae9f
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:04 GMT
accept-ranges: bytes
content-length: 19128
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/global.css?ver=1650359836
200 OK 3.8 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/global.css?ver=1650359836
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (14692)
Hash 6af9474a08aca811e18d80bba5606bd1
f9e6eebcb71d863347580d4ad58a39449b75aa90
c525587c4ccf3e65effd7c79b1a51e90bb2b18722e9709f81395ad55ce6d9656
GET /wp-content/uploads/elementor/css/global.css?ver=1650359836 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:17:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3827
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/assets/js/myscripts.js?ver=1.56264676
200 OK 476 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/assets/js/myscripts.js?ver=1.56264676
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash 544e71f1eeae168e27599d28c6aa8b2e
41a611ebc74bc9eaa56b0bb7ed2ad0638fb03042
e43ecbc6bb2a9ee8895eb3917cbe8ca1996f0d3dc604ea83721e2b2d21a3e022
GET /wp-content/themes/hello-elementor-child/assets/js/myscripts.js?ver=1.56264676 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 476
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-65.css?ver=1650359774
200 OK 623 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-65.css?ver=1650359774
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (1132)
Hash bff5dbd2afaffe52b6849a95024b025d
3b47b4e5f86265949b8af30f7d1d4b798f8982fb
68a1b32f715823d5191be3f1232446c1c65f3ac3993102b4ac4f47e2a86c82f9
GET /wp-content/uploads/elementor/css/post-65.css?ver=1650359774 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:16:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 623
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/style.css?ver=1.0.0
200 OK 257 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor-child/style.css?ver=1.0.0
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash 8b1fe871044c7f8f86f6a920075ac548
d828e7fcfcbab5d7e2a4df104a7bb72e2335ed22
11e4afda6999b7220f6429544df02367bf42cc9e37a954e8a9d7e193115dbb4e
GET /wp-content/themes/hello-elementor-child/style.css?ver=1.0.0 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 257
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-675.css?ver=1650360025
200 OK 1.2 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-675.css?ver=1650360025
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (5456)
Hash a30479bf237e1caf7c0a900fe4e41ee5
ed79fd70793c2ac9d49ab99e92d39962ad58fc3d
5c08e85b9c6aff7ce02a001b7134e4bb0191bdec2b37c1a5b106e00e9537482e
GET /wp-content/uploads/elementor/css/post-675.css?ver=1650360025 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:20:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1166
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 316 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (483)
Hash fd3a45718e33ca1591aa9933244c8924
4536d4512acf9e7477fc191c3ad8b345312e86de
3ac96dec409838069d77a6e9d4f6bac167f5db030a8ae2bbc4f4ec09f0fb4f77
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 316
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1650359622&ver=1.16.7
200 OK 70 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1650359622&ver=1.16.7
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type Unicode text, UTF-8 text, with very long lines (65398)
Hash 07872a267d6b7d8d6bc9084c23366a0b
a972232f3d6b3864c510bbdb86ddeda971bbc900
5d33ed3ea94b9700e14d84d847c041f2f05f603919a220ef14640097ed75d620
GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1650359622&ver=1.16.7 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:13:42 GMT
accept-ranges: bytes
content-length: 69659
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.4.8
200 OK 1.9 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.4.8
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash 8790cefb672394710fd5240b5e84fdea
172ab68bcec263a4de88fdedaa8e266a5a16caf7
cb8c65acae9811c3fafcfb7cc89d965d5cc43608fe428423f33f0d49add6b9d9
GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.4.8 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:10:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1895
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
200 OK 5.7 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (15224)
Hash 8e1603efdf03f83878251ba46a482621
1a14526e1195c7f2f5a4500c5016241f6fb7a67e
9e2aa190e5261249d30899caf5c19959a4f5815e0411e8ceb89cd57a3164ace2
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5698
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
200 OK 1.1 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (3113), with no line terminators
Hash 4588584c84856c034f36ebc4e875cf72
c6496b86741017f10529b0d3b67f5b7fb24ad5b2
d273592afb03f7cf4df6e2cb5d6d00e7ef931df3af5599dafba602548e7dc3f3
GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1072
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
200 OK 8.6 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (25115)
Hash 09f004d8ee081b0f619c32b025573213
e096a252518fe6e2171741fe79b925bf36b06443
322b5ff8e98c1dbd6147b8ce082189c91346b6fdd3e096a46ab011fa2bbd294f
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8614
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css
200 OK 4.3 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (29127)
Hash d627d467ece6806b0301a012848eca19
47331be81a037005a7a26a4c8ab41ce56e0ccb3d
101787363af7812ed32bb8fc1af5200410e47bc806c7f55c6ae3f7ea50ae5b31
GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4317
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-32.css?ver=1650359623
200 OK 800 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/elementor/css/post-32.css?ver=1650359623
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (1614)
Hash c8cbe92562b6663ea66b72110fa8b4d9
9dcbc064599b533d075728a6105ec91cbe7a63b2
354841c7a2f679769876318a526b584e149809938ef89fffe7959c325e14441c
GET /wp-content/uploads/elementor/css/post-32.css?ver=1650359623 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:13:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 800
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (11126)
Hash 7cec71a53f4e94ce6da66a0fd94b9e5c
ac8f00b06df2956b97202b24ce8d818934283b5b
9bdd49aa215000ec53e722aa93cbe0e30f509bd1430ac5b5b509bf9b78a78d31
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4563
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/pum/pum-site-styles.css?generated=1650359622&ver=1.16.7
200 OK 18 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/pum/pum-site-styles.css?generated=1650359622&ver=1.16.7
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (7444), with CRLF, LF line terminators
Hash 1d84dd82131ee1144e117925ed63d984
779ebfd88f6fbc6fa9c346b1714cbd351bea48d7
0b473831b1b9a954afeb0962cce1c89456ab698fa9d22a7dce769b2fe24e775b
GET /wp-content/uploads/pum/pum-site-styles.css?generated=1650359622&ver=1.16.7 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:13:42 GMT
accept-ranges: bytes
content-length: 17547
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.3
200 OK 380 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.3
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (754), with no line terminators
Hash 3b6c4f265d66f0d4d9075dfcacae5be3
7447a09603361f34db9ac61bd0bd701492cefc53
505870d1a7bd8ca07bbd80c68290dd554f3b469fb3469e7ccc5481de6d3f5e94
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.3 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:10:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 380
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4
200 OK 2.3 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (4921)
Hash 30acf1d4673b0166fe5765ba74fcdb22
73685cb6e9ebd68595643d5c6e0f891326bb9be5
593bba89038e9525018d8e91e9e6cd6a070aa9d17561d9119a9ab6badefa805b
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2279
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.6 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (6494), with no line terminators
Hash 1714fa345717ddda6eddbd7a02d3823b
911fe064be7995a354d0fe4d2a22a9f2560a5dab
c584f0461079102e6312608def4d9ed64a7198439835ce548d8d654e8c81c3b8
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2628
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/dist/hooks.min.js?ver=1e58c8c5a32b2e97491080c5b10dc71c
200 OK 2.0 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/dist/hooks.min.js?ver=1e58c8c5a32b2e97491080c5b10dc71c
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (5655)
Hash ca4cd6c51bdcd5b3561f7b4bdec9e753
8a5563fc379fb1276c735520368ce2c982f98db4
0aeb4046f13d0fc3f01fd1f74d13abb9d957fcc60662e38ab042a6db43bfb981
GET /wp-includes/js/dist/hooks.min.js?ver=1e58c8c5a32b2e97491080c5b10dc71c HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1998
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.5
200 OK 1.4 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (3235)
Hash f56b730e6e3b1d39fafc891d8e8613be
d66cfd58d6f200badb7d657beb002d4f71416fe5
d679b36be27616c809f3ccdc3e4d61b2b269dc612e4b7116492be12a9fb754d9
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1436
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/dist/i18n.min.js?ver=30fcecb428a0e8383d3776bcdd3a7834
200 OK 4.2 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/dist/i18n.min.js?ver=30fcecb428a0e8383d3776bcdd3a7834
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
Hash 434c416a16ccdf789707b2be1766878d
ed5cd83baf8874778ac46bc8999e3b2d8a1b4891
f8eb0bce10a908d325818286d9c9415020542afdb2c00dc928ee90654dfe78ea
GET /wp-includes/js/dist/i18n.min.js?ver=30fcecb428a0e8383d3776bcdd3a7834 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4242
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.5 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (12198), with no line terminators
Hash 6f155dc666714e28eb90da96ff088203
00ff2b5b5a55bdb73cfe3b996f7984b174fb5574
e3875a3bd7fd1640b9c54041e067727db50f87cc8f8326d628d366baa12327ca
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3501
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/underscore.min.js?ver=1.13.1
200 OK 8.1 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/underscore.min.js?ver=1.13.1
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (19034)
Hash a4ba9404d68e5ce322561fcd4d003df2
443cbc8afc844789cff9ff884eb4af4f4d729e8d
7cb7cc3b3c00f0ee43c82d5f94116740789e150c93f92c7b5f6d19bacfb99d2e
GET /wp-includes/js/underscore.min.js?ver=1.13.1 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8118
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 36 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (65447)
Hash 19794544ea8a95a7f373243810e83876
ddc367f688e43f1fb864933be9ba4a425d98b146
e02d14430d46b20d28fa1a666b5b31996c2afe85f58e933d8d6acd473cc4957e
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 36108
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 7.7 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a50fae5a8652570dc18e1803e659eb3c
ff8e4286d8f8230fd17eed284d07097f73aeab24
1d595e63037faa5177beaf835fda18fc6a6a80b35263397d38dccbf6eb123d7a
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:09:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7698
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4
200 OK 5.2 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (14238)
Hash 0c128823056a5ff0351936c0d130af7d
eb35be16a81fc941ba44fb06b841e28a0a0a83f4
c4af909dc37f3bd8fcbdb158e25fcbeafc8fc8dc30720627842943da953ba29a
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5185
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
404 Not Found 28 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047)
Hash ee60224850d74f02d4b8154298341a45
8c69efe53a208c1dccb8fbb17c45a3b6c5012cd8
2158fb50c22385645b8ea56edfb45644bc7883e76d4b0ee254e614c9827b5d1e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/nfx/ma-en/success HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://tuassouthdormitory.com.sg/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
unpkg.com/swiper@8/swiper-bundle.min.js?ver=1.12.1
302 Found 8.0 kB URL HTTP/2 unpkg.com/swiper@8/swiper-bundle.min.js?ver=1.12.1
IP
Hash ee4bbae974836cb045459a443c834e38
da61032119b412df2e3ac5578b7d98d4525423ee
9809aefd592c18b0798d996978901d0767b01fdda1d2d5a1487505a7c8ffd42c
GET /swiper@8/swiper-bundle.min.js?ver=1.12.1 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 26 Nov 2022 03:15:57 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /swiper@8/swiper-bundle.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJRYYFMZPYDT62A3VFX8XRQX-ams
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ff766a78bb0b4d-OSL
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.5
200 OK 6.4 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (20670)
Hash c17d7dbeb26511e8dab4e931334d5b9c
906debcfd8eb44052e217bdc1b024b7e9e757ef6
265fa148f8e3136445b0bb8efccaaceb4f66a92dacc5e08ee1f9d74ff8b5b00b
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6411
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.5
200 OK 6.3 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (24256)
Hash 87a9f9d5bfc9c98c65d19183d7bfb4f5
1e3cdb14475e16e0d7d0858e5cea5b4c76132680
f9dd35b6ed3880756431a2c76dc56176ad06012bc713c6debc233233db9da128
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6326
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
unpkg.com/swiper@8/swiper-bundle.min.css?ver=1.80144189
302 Found 2.5 kB URL HTTP/2 unpkg.com/swiper@8/swiper-bundle.min.css?ver=1.80144189
IP
Hash adc3276b1e1e9111c75360371d337570
a45b80f0942508ada592e151c2c8a7ce41f708ad
4caf318e269b7e60ff1e0ebe02935e30edd5f161cc14e1a9012861f5d2eb1bcd
GET /swiper@8/swiper-bundle.min.css?ver=1.80144189 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 26 Nov 2022 03:15:57 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /swiper@8/swiper-bundle.min.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJRYYFMQ30ZG9QGV2AYXG8FD-ams
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ff766a68b60b4d-OSL
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-includes/js/wp-util.min.js?ver=5.9.5
200 OK 719 B URL HTTP/2 tuassouthdormitory.com.sg/wp-includes/js/wp-util.min.js?ver=5.9.5
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (1305)
Hash b785b4e8f1a5fb7cef27866806492528
1b4e38eef7555128f7d3bf8314ff696712257c40
88adb190b642bf3ccdc2be19ea9ef684e90b98bdf7d28f300413ecce2862ff1b
GET /wp-includes/js/wp-util.min.js?ver=5.9.5 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 719
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 14 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (57726)
Hash 6b557eaac231699087019d81a01d0563
835d0532472effbb948efcde4bace4809833fb40
17c2750e3631359446bf4bc40641dd92d12dd26be40f6f225ee16a2dd1f6818c
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14492
content-type: text/css
date: Sat, 26 Nov 2022 03:15:55 GMT
server: Apache
X-Firefox-Spdy: h2
unpkg.com/swiper@8.4.5/swiper-bundle.min.js
200 OK 41 kB URL HTTP/2 unpkg.com/swiper@8.4.5/swiper-bundle.min.js
IP
File type ASCII text, with very long lines (65279)
Hash 87cd0f7fb61c392c26ce203305a814cb
8207a1f2280bc4cdb335fdea386835f385c45cca
40b03d97d36d1023b3b5cd9eaca7cda8aea77d15c55844270656fbfbf4a270a2
GET /swiper@8.4.5/swiper-bundle.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tuassouthdormitory.com.sg/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 03:15:57 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"2315b-t5sVkS+OMbzdHrTZGoTsEiXqNM4"
via: 1.1 fly.io
fly-request-id: 01GJD2P4Z73ST362R86714BCZY-fra
cf-cache-status: HIT
age: 398732
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ff766b48ec0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:15:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 926df9839ec3d924b563b55d8bccace8
c47a3884465fc02b5c57faa5ffbd986ba29c64c2
a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -6kE-HDfLIQMtzuaOuArCjtxgpQUgxMrpjcT7pDIdY7CDlJNK1GZWA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
content-type: image/jpeg
age: 19774
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 19013
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 05:04:28 GMT
age: 79890
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bfe2d23-9843-4fb7-b46a-fd8ffd7bce9a.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bfe2d23-9843-4fb7-b46a-fd8ffd7bce9a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d30923b7d20eeb37527255c3ee1da34f
bed54bd4f659fbf29834b262e9179df7e7bc56a6
3110f22342b17a7b1d30bd53350e6a11fd6032d97bccf4206e4a27d6e332c79b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bfe2d23-9843-4fb7-b46a-fd8ffd7bce9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9011
x-amzn-requestid: f0e83373-0f65-4358-a902-45f2e9c24c24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUfPHzAoAMF4ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813461-19e037da49c44e4363bbe8f0;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BhDa2CHAFtN7I8edeVOkRMzIRzmRPgHHnk1W_W5oZnRjaFN2vqze2g==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:49 GMT
age: 19629
etag: "bed54bd4f659fbf29834b262e9179df7e7bc56a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LDrq5UcFhG63XFZhmeS5Z_mEkwrvuQ2bLfT8hV9I3E1s1lJLZF5Dww==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
age: 19774
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:20:28 GMT
age: 68130
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/2022/03/cropped-NPI-Logo-1.png
200 OK 26 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/2022/03/cropped-NPI-Logo-1.png
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type PNG image data, 300 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e233fd18a2e5c6a64bf6a45bf63c5dc
ccdea862c4f5276e448d268594574244ffc41c5f
7043ed8d7c829cab925eb0695dc8702d7fc09b3df964710dc6ebddd2396d77b8
GET /wp-content/uploads/2022/03/cropped-NPI-Logo-1.png HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
content-length: 25838
content-type: image/png
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/uploads/2022/01/icon-mail.png
200 OK 1.5 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/2022/01/icon-mail.png
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash cce55b7ada62566930ac7308bb595700
d3986580d1e6cb1e0405a8b330fb06c583e474de
4717c96a934221af6b0fe9cb74fa4c2ef52586b2657372ac8bce7bab364b75cd
GET /wp-content/uploads/2022/01/icon-mail.png HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:01:25 GMT
accept-ranges: bytes
content-length: 1521
content-type: image/png
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tuassouthdormitory.com.sg
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 08:12:22 GMT
expires: Sat, 25 Nov 2023 08:12:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 68616
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tuassouthdormitory.com.sg/wp-content/uploads/2022/02/favicon.jpeg
200 OK 5.6 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/uploads/2022/02/favicon.jpeg
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 58x58, components 3\012- data
Hash 219b9345b4392ff4a759fad778d51c5d
9beb5e3e462d009b8e0123c301484edefa85bdd7
d92980c73bdada83b7969104a14c36f223f79c7d7d57d455fe047f071a70669c
GET /wp-content/uploads/2022/02/favicon.jpeg HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 18 Apr 2022 09:42:10 GMT
accept-ranges: bytes
content-length: 5598
content-type: image/jpeg
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js
200 OK 1.4 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (3262)
Hash 2d67adb63c4eec42293dfc31125ff55f
cbbbe870e105e6ef775a5196a9a0c058325fdbfd
b7d2469562a6a5041f338674ec55c410632435813ace337b79746a43b3ff3eb2
GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1372
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/text-editor.289ae80d76f0c5abea44.bundle.min.js
200 OK 681 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/js/text-editor.289ae80d76f0c5abea44.bundle.min.js
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (1316)
Hash e86da36233686d12030c58e40996bf8f
98bc97231d81007431cf0dd5e1e0f23f3cf48ce7
f9de4d83fd3e297a643cfdd28e7c1bbd905c181d436f5c765b42c0200fe9ef8a
GET /wp-content/plugins/elementor/assets/js/text-editor.289ae80d76f0c5abea44.bundle.min.js HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 681
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/form.358793a6bb3724ab5f99.bundle.min.js
200 OK 5.9 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/form.358793a6bb3724ab5f99.bundle.min.js
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (19201)
Hash 4b2a14268c1e24a5b829bfec37069b4d
5d2ef630b0c0165f7ee72487c53153750db6a304
90d179f595a19bc1c13b434f1d9cf11f1330d84b004e01ca81753a8e86e52e20
GET /wp-content/plugins/elementor-pro/assets/js/form.358793a6bb3724ab5f99.bundle.min.js HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5866
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js
200 OK 458 B URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type ASCII text, with very long lines (715)
Hash f12abc7ce6496f3f18874f81ac1aa033
54fc7c421a9eb0e863c81a5c53f0dd01d1c47990
046b8253168b9e9dc85e58d9c148ab5867758fc6f365298ffc4905e15739892d
GET /wp-content/plugins/elementor-pro/assets/js/popup.483b906ddaa1af17ff14.bundle.min.js HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-includes/css/nfx/ma-en/success
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 458
content-type: application/javascript
date: Sat, 26 Nov 2022 03:15:56 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:05 GMT
accept-ranges: bytes
content-length: 78196
vary: Accept-Encoding
content-type: font/woff2
date: Sat, 26 Nov 2022 03:15:57 GMT
server: Apache
X-Firefox-Spdy: h2
tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0
200 OK 92 kB URL HTTP/2 tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0
IP
ASN #58621 Vodien Internet Solutions Pte Ltd
File type Web Open Font Format (Version 2), TrueType, length 92444, version 1.0\012- data
Hash e5d9164498f1649084fe6fb95d3ad593
29e71123f8ef22f20f8d50bc4caac9db6e04a824
1525cd3ea05d1c00e4b385e781749c3bac5c01570b5800198bec0a252bb6c715
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0 HTTP/1.1
Host: tuassouthdormitory.com.sg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Apr 2022 09:11:04 GMT
accept-ranges: bytes
content-length: 92444
content-type: font/woff2
date: Sat, 26 Nov 2022 03:15:57 GMT
server: Apache
X-Firefox-Spdy: h2
unpkg.com/swiper@8/swiper-bundle.min.js
302 Found 0 B URL HTTP/2 unpkg.com/swiper@8/swiper-bundle.min.js
IP
GET /swiper@8/swiper-bundle.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tuassouthdormitory.com.sg/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 26 Nov 2022 03:15:57 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /swiper@8.4.5/swiper-bundle.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJRYVFHAPEN50VBNWWBWZJJ8-ams
cf-cache-status: HIT
age: 99
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ff766b18df0b4d-OSL
X-Firefox-Spdy: h2
unpkg.com/swiper@8/swiper-bundle.min.css
302 Found 0 B URL HTTP/2 unpkg.com/swiper@8/swiper-bundle.min.css
IP
GET /swiper@8/swiper-bundle.min.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tuassouthdormitory.com.sg/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 26 Nov 2022 03:15:57 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /swiper@8.4.5/swiper-bundle.min.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJRYG6EMQ4SB603EJ5WC89DX-ams
cf-cache-status: HIT
age: 468
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ff766b18de0b4d-OSL
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:100
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:100
IP
GET /css?family=Montserrat:100 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tuassouthdormitory.com.sg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 03:15:57 GMT
date: Sat, 26 Nov 2022 03:15:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
101.100.248.207
93.184.220.29
142.250.74.164
23.36.76.226
104.16.125.175