1xl.com/
301 Moved Permanently 224 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash db45cd32b94a77fe07472248e029df27
16b496a3a70c54987674f6375fba8a82b84143ee
d3b27ceb901672a846119c9f7f71a2a9ff93984873e322405c6f7dce367ecf7e
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 05:45:16 GMT
Server: Apache
Location: https://1xl.com/
Content-Length: 224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8018
Expires: Sat, 26 Nov 2022 07:58:54 GMT
Date: Sat, 26 Nov 2022 05:45:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Sat, 26 Nov 2022 10:05:43 GMT
Date: Sat, 26 Nov 2022 05:45:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6369
Cache-Control: max-age=109926
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:17 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 12:17:23 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N3+5zTJz6aReveLYiwojCW7/mcD/pL8wtP4+Q/GDS08Tx2zmkOHn0nIcjbjPiU85wRLs13XPgalGgyCD0QNVpQ==
x-amz-request-id: 6DZZ8DABVRTY4S50
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 05:41:05 GMT
age: 252
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 05:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1564
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 05:45:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 05:08:54 GMT
cache-control: public,max-age=3600
age: 2183
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3536
Cache-Control: max-age=102030
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:17 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 10:05:47 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FiE5IlybFtu7MAdS3fjvWw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kjKiQL6bj5H+konDs3bB0Dmccos=
1xl.com/
200 OK 121 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (22132)
Size 121 kB (120819 bytes)
Hash 1a17a92988b1429afd279936804053ba
dddfa1d535d318072d75fcd135feb3e4c5f877d4
be82e92da549298b627a8ea94d9da68d387b1b3b9e52430281c232c36c8c36bf
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:17 GMT
Server: Apache
Link: <https://1xl.com/index.php/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1xl.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.6.2
200 OK 4.9 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.6.2
IP
File type ASCII text, with very long lines (4933), with no line terminators
Hash e372df47bd19e1563b557d7bdb817188
4efdf4050a78bdbd88aa255955b7423105895dd0
4b7693154069c53a16468d09d89c9eba5da6c0dfc69cf4d7eb675e32ba663361
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.6.2 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 4933
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6
200 OK 2.7 kB URL HTTP/1.1 1xl.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6
IP
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:33 GMT
Accept-Ranges: bytes
Content-Length: 2731
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/plugins/radiantthemes-mega-menu/assets/css/rt-megamenu.css?ver=6.0
200 OK 3.8 kB URL HTTP/1.1 1xl.com/wp-content/plugins/radiantthemes-mega-menu/assets/css/rt-megamenu.css?ver=6.0
IP
Hash aaa514b40e4de017ef65db72aebdd49e
f268d21ebe5e5b8588b13b717c7d996fef4553bb
560ebd581f83778ca2378dc7e91eebefcbdda2f05516a28e7e8d601bc3f706e9
GET /wp-content/plugins/radiantthemes-mega-menu/assets/css/rt-megamenu.css?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:39 GMT
Accept-Ranges: bytes
Content-Length: 3790
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0
200 OK 19 kB URL HTTP/1.1 1xl.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0
IP
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 05:56:23 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.6.1
200 OK 18 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.6.1
IP
File type ASCII text, with very long lines (17809), with no line terminators
Hash 1ddf23fcfd1b2941c456ce01da8180a6
156ef5cc77061010e3f4123a47fa415c6391e5ff
dd18a408a35aa5d393458657eb24fb56ab754ece3f88bd78a038e5793d3f6991
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 17809
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-gutenberg-blocks.css?ver=1669441517
200 OK 20 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-gutenberg-blocks.css?ver=1669441517
IP
Hash dabe36207554227046be502a103dffa4
623cc95998673513bfcba226daab50f56223e222
85aa4750c17c904974a5a411aeff97845066821036fc83c22b4bf7a7355063b9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/radiantthemes-gutenberg-blocks.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 19556
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1xl.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0
200 OK 89 kB URL HTTP/1.1 1xl.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0
IP
File type ASCII text, with very long lines (43771)
Hash d534fc4463d84fecc2a0b4e847bec46e
a553b04e1476190984e01192467df79f9645ab70
d678ab3b4e7dddf5615012cc1a930e50dfbc967181b8fbeb1b98d61549f5ed08
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Tue, 17 May 2022 15:43:41 GMT
Accept-Ranges: bytes
Content-Length: 88870
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/font-awesome.min.css?ver=1669441517
200 OK 31 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/font-awesome.min.css?ver=1669441517
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/font-awesome.min.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/elusive-icons.min.css?ver=1669441517
200 OK 14 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/elusive-icons.min.css?ver=1669441517
IP
File type ASCII text, with very long lines (13926)
Hash 085d080d0b0445ea1a2ef3aa742d8816
23a3d18508dd99154c582ff8246fa13eee043f33
0f48655999a70bc8797ff87c331fbc2c9111eb0f49869a0d6065222b98ce7ed3
GET /wp-content/themes/unbound/css/elusive-icons.min.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 14102
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/animate.min.css?ver=1669441517
200 OK 18 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/animate.min.css?ver=1669441517
IP
File type ASCII text, with very long lines (17291)
Hash 2095fc171ff689bc346ae5f5a7c34f8c
29ae6fb1adbf60ee9d494d2c8ffc614346678f2f
9f23784b95acf9f9deaf9d302c4baf26d22018118f79d78e1970a15ddceb1bf8
GET /wp-content/themes/unbound/css/animate.min.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 17468
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-responsive.css?ver=1669441517
200 OK 10 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-responsive.css?ver=1669441517
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash daab06284554cfe83934db427b53da7a
d4946a786fa9872aa4ad4757dd99d7030ff8bc23
62605811cc3307a1e4edfa6bfacc49ee377a23fcdd186981bee4e00e911457ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/radiantthemes-responsive.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 10337
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-header-style-one.css
200 OK 23 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-header-style-one.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 743116c40fcffc628fab2494cee97805
cadae9cef47aabfa0e1f8a486e3564b5049b8792
6d94e0d5f30f63396b5f9ad445bc2e88d967ad72a577e01244697be938641785
GET /wp-content/themes/unbound/css/radiantthemes-header-style-one.css HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 23342
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/bootstrap.min.css?ver=1669441517
200 OK 120 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/bootstrap.min.css?ver=1669441517
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65329)
Size 120 kB (119983 bytes)
Hash fe7d05311157bfd142783dcdae588dfb
9aaff1c529cee2ad84976fbb48fe3ba9a88cb5c8
53ad49c2e132f8bb46333070941b562fe37c34b170671436c8dc8ba269e2fd75
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/bootstrap.min.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 119983
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.6.1
200 OK 63 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.6.1
IP
File type Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Hash 979b8b56e801469d95453055366ef54c
cb8a0bb5f00fee130a289ea4dfafc00fa53e1c04
d3322ccb3912f7a9485eb1d75971fd5e1eb49c6575ff5ad985fb5496333e8c8b
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 62755
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.6.2
200 OK 212 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.6.2
IP
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size 212 kB (211622 bytes)
Hash 5bdd1e3d788393b1f2cf734e75f6e122
6ee0ea4efdc115aa943a1e5a79b5481c37aaf9e7
bab414cb30e397d6805654f58e3e139e5a5283eb8c0c02cc16a4dca0053d6b11
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.6.2 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 211622
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-custom.css?ver=1669441517
200 OK 164 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-custom.css?ver=1669441517
IP
File type ASCII text, with very long lines (844), with CRLF line terminators
Size 164 kB (163887 bytes)
Hash e02e893f2554780d7c976ddbd4cd9c2e
8e0f4b214dc45d160a379af7ab6b2781f6152bae
811fc3655ac18430136689206b7ffe9507c005dc585f0c209b014ea80a9b3b48
GET /wp-content/themes/unbound/css/radiantthemes-custom.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 163887
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-footer-style-one.css
200 OK 12 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-footer-style-one.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 871eb3731659ca2922a92409bccf5124
57a096e1ac6fb90710e351439124dc31b8235111
d5c72ad74b0dc9c97e6768fe8dc59f3d3ce43b2002c7b6630e45c31be397dea7
GET /wp-content/themes/unbound/css/radiantthemes-footer-style-one.css HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 12419
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/style.css?ver=6.0
200 OK 1.5 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/style.css?ver=6.0
IP
File type ASCII text, with very long lines (587)
Hash ca0e65da0036de1f352c3847af3d375d
7ebedab5a81bb279150e5427afa209db5566dffa
108506825138092680bd267c4b8bf6e86ba00618a2b14163e106e60c9ee5fdc9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/style.css?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 1460
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-user-custom.css?ver=1669441517
200 OK 24 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-user-custom.css?ver=1669441517
IP
File type ASCII text, with very long lines (305)
Hash bfbee9a40abc06859e823509330f103a
9ac452bc78ac2ebae3ad7fddda51ad24b539ae83
c647750fa6c049092b5d8f9dc6443c26cc5f9d61ce5398c00c32580937bf1f2b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/radiantthemes-user-custom.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 24502
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/css/radiantthemes-dynamic.css?ver=1669441517
200 OK 23 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/css/radiantthemes-dynamic.css?ver=1669441517
IP
File type ASCII text, with very long lines (1094)
Hash 37ef5c3a0f874823c701f0233320e490
d61f803f92a15167703c65ad4ad177547ccb35ea
95d4b85442858290124e3278d214466a393f838bac660024d976891c8ea9274f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/css/radiantthemes-dynamic.css?ver=1669441517 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Sat, 26 Nov 2022 05:45:18 GMT
Accept-Ranges: bytes
Content-Length: 22841
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/plugins/radiantthemes-addons/button/css/radiantthemes-button-element-one.css?ver=6.0
200 OK 3.8 kB URL HTTP/1.1 1xl.com/wp-content/plugins/radiantthemes-addons/button/css/radiantthemes-button-element-one.css?ver=6.0
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 26ad02e680a5866ba67d641977b020cb
933f74a128b9618ae1681c5334877d85262b9d16
364f4f4a454e38e36a7e237b982a5596265cdbe2d9c2c2c98bc1c8b13c0d5476
GET /wp-content/plugins/radiantthemes-addons/button/css/radiantthemes-button-element-one.css?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:37 GMT
Accept-Ranges: bytes
Content-Length: 3759
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 1xl.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Wed, 18 Nov 2020 09:06:06 GMT
Accept-Ranges: bytes
Content-Length: 11224
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 90 kB URL HTTP/1.1 1xl.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 15:07:24 GMT
Accept-Ranges: bytes
Content-Length: 89521
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.6.1
200 OK 9.5 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.6.1
IP
File type ASCII text, with very long lines (9139)
Hash 87c54edf7dad7dfdfde015f6eee45ff1
96ec1a06ea3093c47e1e2fc4444ada7f4456135d
ef22199864042b8ceeee3729f3254c140df7217364045737ca3aadf8434fb3da
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 9533
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.6.1
200 OK 3.0 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.6.1
IP
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash 8bc2109ef48cabf7a26b73d7c3536c5f
0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b
8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 3037
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/retina.min.js?ver=1
200 OK 2.6 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/retina.min.js?ver=1
IP
File type ASCII text, with very long lines (2352)
Hash d6d3252daec57ca544ccd11bdbff701f
4534879a052d14dcbab3347220fc707fd9406503
772aed2cf700b617330eaacbdbd55ae8e1ef89a8747d2880f095c65d843ee02e
GET /wp-content/themes/unbound/js/retina.min.js?ver=1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 2575
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.9.0
200 OK 992 B URL HTTP/1.1 1xl.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.9.0
IP
Hash 787fe4f547a6cb7f4ce4934641085910
c2dee88d5bdfef214ce9c56f71a1df51cda0f328
654aaebdea944313257827be97eb196a8218a2cdfc9ba399db23e2cd4c02bd79
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.9.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:59 GMT
Accept-Ranges: bytes
Content-Length: 992
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/jquery.countdown.min.js?ver=1
200 OK 5.3 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/jquery.countdown.min.js?ver=1
IP
File type ASCII text, with very long lines (4136)
Hash 5d3ff3c3fbaa67cc639501f44eeb07be
bd66e4cd58de09c198e7abc77fa4c883955d189e
2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/js/jquery.countdown.min.js?ver=1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 5339
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/radiantthemes-comingsoon.js?ver=1
200 OK 506 B URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/radiantthemes-comingsoon.js?ver=1
IP
File type ASCII text, with CRLF line terminators
Hash 99aa49ca801cb749400523011d4603c5
954ab91c72fd88b09d8cf99d71f54df866a1c4d0
5c61baabb8ac5d4570d9490b64816379f1f36b99b0f284f14a990dc8a86a358c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/js/radiantthemes-comingsoon.js?ver=1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 506
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.24
200 OK 58 kB URL HTTP/1.1 1xl.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.24
IP
File type Unicode text, UTF-8 text, with very long lines (12602)
Hash 7d4cdc18b95171f8dadb5d4fa0de7cf2
a960abb1c3844715ec9565e3b2b73a9b1faa32b0
8527577417ba8bd5dbaaad96e47d57c5e94b9e17094ffd9c0a2b5ad56a324347
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.24 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:44 GMT
Accept-Ranges: bytes
Content-Length: 57925
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 6.5 kB URL HTTP/1.1 1xl.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:18 GMT
Server: Apache
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
Accept-Ranges: bytes
Content-Length: 6475
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xl.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 209471
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xl.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:52 GMT
expires: Wed, 22 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 313287
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1xl.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 19 kB URL HTTP/1.1 1xl.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 57459b58fd7665a5e20b2345463df9c9
71c3b177ad1412d5e0b56d99f18bc345148df88b
6fecb89a29ee2bd397bb1bf58ecaa530a76f0654db71fadefd3cc70b0bc302bf
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
Accept-Ranges: bytes
Content-Length: 19142
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6
200 OK 22 kB URL HTTP/1.1 1xl.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6
IP
File type ASCII text, with very long lines (21821), with no line terminators
Hash 3f97a68905d330bde2987f0e70052cb2
9c48e323c34652828c3b5bcf4251fc4edd8a7038
7abd36a2f651330420d86187c125331d679408d1be7b6cd93efa64e08eaf80c7
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:33 GMT
Accept-Ranges: bytes
Content-Length: 21821
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xl.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:31:06 GMT
expires: Thu, 23 Nov 2023 19:31:06 GMT
cache-control: public, max-age=31536000
age: 209653
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1xl.com/wp-content/plugins/radiantthemes-mega-menu/assets/js/rt-megamenu.js?ver=6.0
200 OK 2.8 kB URL HTTP/1.1 1xl.com/wp-content/plugins/radiantthemes-mega-menu/assets/js/rt-megamenu.js?ver=6.0
IP
Hash 515e90b8babd198a4d1a17eb51f12628
03b259f003c955031f7952339866db172e3bf168
5a85e7606f333b11581abfc9c846254a8c2db0aae6cde84bf61d4a2fd6131a0d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/radiantthemes-mega-menu/assets/js/rt-megamenu.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:39 GMT
Accept-Ranges: bytes
Content-Length: 2808
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:45:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1xl.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18
200 OK 129 kB URL HTTP/1.1 1xl.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18
IP
File type ASCII text, with very long lines (45108)
Size 129 kB (128668 bytes)
Hash fb0dc63ed31433d3e16526f9e415d57e
3d4029b9f66e3f3c086eba04a02c140660a94acb
559f367b8631134334b4870bed568b019af144c801b574a252e337d4e837a05a
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:44 GMT
Accept-Ranges: bytes
Content-Length: 128668
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4803
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 05:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4803
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 05:45:19 GMT
Connection: keep-alive
1xl.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.6.1
200 OK 1.8 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.6.1
IP
File type ASCII text, with very long lines (1668)
Hash d0a6d8547c66b0d7b0172466558d1208
ff93916519c7b9483251f609e4d29f38c30a66e3
3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 1834
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 2451
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95101ded0fe92a85649a086992948008
afed98649590f2524a9e530c53eebbc1ba36da6a
7f754cb2105494045efe657c47313e77bb26361ca45a6f8cbce1fdb52a15ba01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: 51d9848a-868c-4e51-b1a8-30596d0108b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUfxHjToAMFeGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813464-749244df2aa06b23445d675c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mSCEUQ3aOXg6rxJV0iWPgFZ6TE2pCucWwOI3KAsdbu_EadcDDa5vwg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:07:47 GMT
age: 27452
etag: "afed98649590f2524a9e530c53eebbc1ba36da6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic%7CPoppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:300,400,500,600,700,800,900,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1656675494
200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic%7CPoppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:300,400,500,600,700,800,900,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1656675494
IP
Hash 658c8365ef1081535b20ef0883685b7e
c2c4c9da8bcb27f9ed8eba645c44738d41d8ab54
bb719db367bd3a8c93bc8fe8ead34eb85e5c004b86e0a3857ce0870268ce6d10
GET /css?family=Roboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic%7CPoppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:300,400,500,600,700,800,900,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1656675494 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 05:45:18 GMT
date: Sat, 26 Nov 2022 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0064a575afa520aa6c112249e7b195a
7387cf7c1f6fae78ce7df10271a0fd2504c71382
37876de2a100c65b70bfd199c8405f3ec282c45786ab08744c64592dc16b0353
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9718
x-amzn-requestid: 1b621759-18a2-491a-b44e-f23540e4228c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC5FLbIAMFzFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-78dec425016dc2746242a6c7;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zWdyq64XfAJTwN2HPvv__Q2wm597cilWEJACu8vIDwKUGixYTdUL_g==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:53:21 GMT
age: 28318
etag: "7387cf7c1f6fae78ce7df10271a0fd2504c71382"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c135ab961de12d926b94f9abae8adbe
139f48ea60880efc6d2977f4d3141809f22adfef
1578a994e7c4eef451f1c744116caa95e1aa995c4817a13832f1ac3487cea95d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2944
x-amzn-requestid: 8f1b2573-39ab-442e-8c6e-97538a28aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWXXEjJIAMFu1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813762-52f27ff536b0c3b84bdfba8e;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:45:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9hy8v_azPZzuVRv1VN61DoNWbfA83JPs4JcZfRyLo3j6HCtWv_gkNw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:48 GMT
age: 28591
etag: "139f48ea60880efc6d2977f4d3141809f22adfef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
age: 25930
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.6.1
200 OK 2.1 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.6.1
IP
File type ASCII text, with very long lines (2139), with no line terminators
Hash b72c1cbb1530a011a27bd9800f26765a
27b825c5d8255f33b8427a059d4545ebd65e1746
a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 2139
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.6.1
200 OK 2.9 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.6.1
IP
File type ASCII text, with very long lines (2938), with no line terminators
Hash 0fd625c3991a4015814cffdc88e2fc82
d7c2f53e058210ff3ea773297641008bab71a5f3
2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 2938
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/jquery.sidr.min.js?ver=6.0
200 OK 7.0 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/jquery.sidr.min.js?ver=6.0
IP
File type ASCII text, with very long lines (6911)
Hash 37ac88aac020d48f424ec4c64119f107
57c359f422507358cd667f4119bd54086a1e842d
fd57ae7228574a83527cb8917ec5a0ff944aa787934ee5b85a7976f259b7ae31
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/js/jquery.sidr.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 7034
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/jquery.matchHeight-min.js?ver=6.0
200 OK 3.4 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/jquery.matchHeight-min.js?ver=6.0
IP
File type ASCII text, with very long lines (521)
Hash 3182b2beddb1f798f66d27425b9f99d9
ebfe39b9b22623bf3b289d7d8548f04215b7a820
fa87904726726364ad19a7c4b2f2b20ee10637325601b5aa88ed8bfdcb7117a7
GET /wp-content/themes/unbound/js/jquery.matchHeight-min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 3380
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/wow.min.js?ver=6.0
200 OK 8.4 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/wow.min.js?ver=6.0
IP
File type ASCII text, with very long lines (8385)
Hash 36050285bfeeb7395752f0f9bbc08273
5924f7bbbf1dfa3f0926851d01f782f23a59e805
0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69
GET /wp-content/themes/unbound/js/wow.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 8415
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/jquery.nicescroll.min.js?ver=6.0
200 OK 60 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/jquery.nicescroll.min.js?ver=6.0
IP
File type ASCII text, with very long lines (59928)
Hash d247c9568e051b91d27ba6901447e8b0
25fbb66bc92f7538edab6575cf57c4391d7adb17
2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/js/jquery.nicescroll.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 60010
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/bootstrap.min.js?ver=6.0
200 OK 37 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/bootstrap.min.js?ver=6.0
IP
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /wp-content/themes/unbound/js/bootstrap.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 37045
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/themes/unbound/js/jquery.sticky.min.js?ver=6.0
200 OK 4.8 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/js/jquery.sticky.min.js?ver=6.0
IP
File type ASCII text, with very long lines (4325)
Hash e4a483f35f109c2965be7b0a0827a6c0
d71e911d98fda25ed79b748bafabdd3ce35671bc
deeb89a9f36fa035689b5b3663191694ec542537584298d7dba4f0d63f748fcb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/js/jquery.sticky.min.js?ver=6.0 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 4818
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
1xl.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24
200 OK 390 kB URL HTTP/1.1 1xl.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24
IP
File type ASCII text, with very long lines (64288)
Size 390 kB (390034 bytes)
Hash dbe49ccea4cb977e99af1fc13b5df0c2
7cd5bc888582bf9c3b4c32190963aec3faf76eb4
20260a2b327f69ddfd34a15f57c728f790778989af847470220c5a5f0b929e27
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:44 GMT
Accept-Ranges: bytes
Content-Length: 390034
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xl.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 229067
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.6.1
200 OK 7.0 kB URL HTTP/1.1 1xl.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.6.1
IP
File type ASCII text, with very long lines (7043), with no line terminators
Hash 456663a286a204386735fd775542a59e
0a61620b88f4ae0fa7d71e2c7a014ea2c3ab5749
a7a83e60e7e3b8cadeed69327ba498b4cd68605db6e408729fa1b946758e7501
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.6.1 HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:37:05 GMT
Accept-Ranges: bytes
Content-Length: 7043
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
1xl.com/wp-content/themes/unbound/images/Coming-Soon-Style-Two-Background-Image.png
200 OK 617 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/images/Coming-Soon-Style-Two-Background-Image.png
IP
File type PNG image data, 1600 x 1024, 8-bit colormap, non-interlaced\012- data
Size 617 kB (616843 bytes)
Hash 82a2c143a5f74bad624562de335df99a
80d7acb66d5d11a870e9cf15f70d690b46fb53c0
c2151c1c505f739864dfeb708a26b31505d46f91c4e50d9b29f1f058cfecfc76
GET /wp-content/themes/unbound/images/Coming-Soon-Style-Two-Background-Image.png HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 616843
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
1xl.com/wp-content/themes/unbound/images/Footer-Background-Image.png
200 OK 301 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/images/Footer-Background-Image.png
IP
File type PNG image data, 1920 x 478, 8-bit/color RGB, non-interlaced\012- data
Size 301 kB (300613 bytes)
Hash 42100a28132e78167900e648b7e689b1
b07b937a25aefd482e06a05138d353db32efe4eb
02ea52e1a7feea1651f7205ebeceb96f2a26defe7be71125937e03a001116844
GET /wp-content/themes/unbound/images/Footer-Background-Image.png HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 300613
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
1xl.com/wp-content/themes/unbound/images/Apple-Touch-Icon-180x180-Default.png
200 OK 2.8 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/images/Apple-Touch-Icon-180x180-Default.png
IP
File type PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Hash 9a183a30009ea35ad9e336b100b982d0
589a15abd9b2f80188222fb24fe5d569afef3734
5fd3c69a831b923f04f8d460c65d54e622048f1a9284800ed7a7a8c227a71362
GET /wp-content/themes/unbound/images/Apple-Touch-Icon-180x180-Default.png HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 2779
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
1xl.com/wp-content/themes/unbound/images/Unbound-Favicon-Default.ico
200 OK 1.2 kB URL HTTP/1.1 1xl.com/wp-content/themes/unbound/images/Unbound-Favicon-Default.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f7fbff6a60aae097d7770d3f89a7b03f
cb3ece52962becc39e425204d2dacd962f4bf3a1
02e4d7d4b7ff011b9ca23f47e3352315e4e83bc81b9ae3b0b9e9c68724b40fe2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/unbound/images/Unbound-Favicon-Default.ico HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Last-Modified: Fri, 01 Jul 2022 11:36:19 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/x-icon
1xl.com/?wc-ajax=get_refreshed_fragments
200 OK 267 B URL HTTP/1.1 1xl.com/?wc-ajax=get_refreshed_fragments
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9a93ef526230b6a03f5a9501db010fac
71d7753fa2f313b3d69bbb42629a1be5b51b8e4f
671e3ce319d6a851a24e28a6b63649e036d2578408ee0acf0ccdf26fdbca67b5
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: 1xl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://1xl.com
Connection: keep-alive
Referer: https://1xl.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:45:19 GMT
Server: Apache
Access-Control-Allow-Origin: https://1xl.com
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Robots-Tag: noindex
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b4955-acc7-45b4-957b-f6ff1bb5401e.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b4955-acc7-45b4-957b-f6ff1bb5401e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3559fb6bc7a14549c7bf2509f666f6d1
443bd70c61191b314d0eeb1a035d07aab6238c68
0e3803359766a616c1b9fd6047c49cd428f3623b276d9823a4a2bbe9603e8db2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b4955-acc7-45b4-957b-f6ff1bb5401e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4598
x-amzn-requestid: bfb2c35e-e236-42f2-824f-2b86638d2ea4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNYFmaIAMF6Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-3e808ff327d2e561162a27a3;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u1-peK-0cR7bNo0Rhdj6nubp7H1NiqcOCMyGCOPDnBQDIS06AuK7ew==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:01:51 GMT
age: 27815
etag: "443bd70c61191b314d0eeb1a035d07aab6238c68"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
23.111.144.226
23.36.76.226
93.184.220.29
0.0.0.0