r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12998
Expires: Tue, 17 Jan 2023 09:01:49 GMT
Date: Tue, 17 Jan 2023 05:25:11 GMT
Connection: keep-alive
ekm.co.id/
301 Moved Permanently 162 B IP
ASN #58397 PT Infinys System Indonesia
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 17 Jan 2023 05:25:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.ekm.co.id/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 405f8f149ccdf0005ca0d890c96a9cb4
64de3200cef76133dfad901d6709697d6842405e
3a10790c397a419450ac2c90b941fd20bc49af1dbaeb34678836306de8febfce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A10790C397A419450AC2C90B941FD20BC49AF1DBAEB34678836306DE8FEBFCE"
Last-Modified: Mon, 16 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8488
Expires: Tue, 17 Jan 2023 07:46:39 GMT
Date: Tue, 17 Jan 2023 05:25:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 17 Jan 2023 04:42:15 GMT
content-type: application/json
age: 2576
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d38f4bb41e1264b8a1e11ff0b1499d20
21c3e36bd908df43e0d49b747e270ec75cb882b0
3ff822eb56d2218ad6244fd013a82e0d27450ae21d47e08f1e3fdf4c82a8aad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18992
Expires: Tue, 17 Jan 2023 10:41:43 GMT
Date: Tue, 17 Jan 2023 05:25:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IRTlmNDhUr9ayM7By8abBGYSq1+ZBBa/w0H1M+w50vvWIApxHOIx8trZgqIDiOjZqVwk5i8Pb2c=
x-amz-request-id: 8P934PZFDCY97YQS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 17 Jan 2023 04:44:52 GMT
age: 2419
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:11 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 04:33:47 GMT
age: 3084
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6041
Cache-Control: max-age=105742
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:12 GMT
Etag: "63c513ad-1d7"
Expires: Wed, 18 Jan 2023 10:47:34 GMT
Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: X56p7MibgRRd/vX66rCSsQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KrivrqBhMbhd83AHTMtu9sT+iSc=
www.ekm.co.id/
301 Moved Permanently 0 B IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 17 Jan 2023 05:25:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://www.ekm.co.id/
Cache-Control: max-age=0
Expires: Tue, 17 Jan 2023 05:25:12 GMT
X-Powered-By: PHP/7.1.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 347f027830ba076b313b31bf725de940
36859bd616c18fa156c2c887d37faae5c456967d
192c838d633f264868f4fe448467ca52a7a428fc2f78140d58ebea542552c09b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "192C838D633F264868F4FE448467CA52A7A428FC2F78140D58EBEA542552C09B"
Last-Modified: Mon, 16 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21593
Expires: Tue, 17 Jan 2023 11:25:06 GMT
Date: Tue, 17 Jan 2023 05:25:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5294
Expires: Tue, 17 Jan 2023 06:53:27 GMT
Date: Tue, 17 Jan 2023 05:25:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5294
Expires: Tue, 17 Jan 2023 06:53:27 GMT
Date: Tue, 17 Jan 2023 05:25:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5294
Expires: Tue, 17 Jan 2023 06:53:27 GMT
Date: Tue, 17 Jan 2023 05:25:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec0e283376914297c3fb2464ed15a31b
acd84e057b6c618fd3b31915983998c00fe21dc4
3d02b82d8f6a00703de7594f5b34baf0010294c1a7023818344ca341e4ac203c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10660
x-amzn-requestid: ac5d6edc-5228-4318-a99f-c08d3265aa87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3HXpH4PoAMF78Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5ec30-044bf7c40e44de637c0c2dba;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 00:30:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6wALvrvX2EOL6xe6U3Vf2Xmcx_Nmh0mHXveaX1mZL1yUzOLdKg8f_A==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:45:05 GMT
age: 16808
etag: "acd84e057b6c618fd3b31915983998c00fe21dc4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddb60f9d-860b-4c2b-aa69-d185482f022c.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddb60f9d-860b-4c2b-aa69-d185482f022c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3aa134e9259a4f258a832e223bcd5825
3648297257e246e7ec4541fef1ee549523c04f02
3abcd9f270d477b813f145b6c6ccc6c881c705a05976627762db58c4a1f4b76a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddb60f9d-860b-4c2b-aa69-d185482f022c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8128
x-amzn-requestid: 029defe2-e597-44d5-9bf2-6c3343701baa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enjFcEt6IAMFUEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bfb222-049108b226dd013b05b6fe61;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 07:09:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: o14qfg-v65wiM61tB3wnr4YF1sGrvgVbpKn9ido2su1nmi2wgfr9Zg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:55:46 GMT
age: 26967
etag: "3648297257e246e7ec4541fef1ee549523c04f02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad210f0ba6ce6930724549cbba76e83d
e4badc3fbca9913bc11d968dac5cad1f900ff492
ad5f754d5dbe870feabfe090a46838614e96d72e78b9a2a8010ab339c67130be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9529
x-amzn-requestid: 56f2b9a5-91c6-421a-ad84-165376e23dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm6Fm-oAMFrDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-67a0c1fe6aad6e6b71e50463;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mzmFGVDfMuZte5CJUmchEQIVAuDUKdGfUpm7PRTUqnsP44IcDmbl8A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
etag: "e4badc3fbca9913bc11d968dac5cad1f900ff492"
content-type: image/jpeg
age: 27538
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05aa269a0f2828ea2db69313f279b38c
f6304901ff8fa128627ca44eaf37072c5f4d5fd8
3f7de0fdee25471f646d0f1ab82729c449e3f05c83eec1b84a42c6b2d69dcce2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8868
x-amzn-requestid: deb46f6b-5234-4579-8f20-59906066d836
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZxKWEZfoAMFbzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba2f0e-6890657c300dba5c26a2118e;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 02:48:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BK2NuVnKf9BYNXXPCP3qSN7wQAMvuh_KdaRjuAA_OojxpxyY3ksCmA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 04:20:07 GMT
age: 3906
etag: "f6304901ff8fa128627ca44eaf37072c5f4d5fd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fefb1f12a78ad92ed309da2c54984a3c
caf58bf6276e226a20a0d0cf6fc3d422f922eb28
baf6596c635254885f32e423cbc5667694754243f01109cbdbeb54c337b16bc2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14703
x-amzn-requestid: bdc14ffc-297a-4046-9a4f-26d454f6f9be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2trpGZkoAMFhZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c317-58908dd71980be98200e8f6c;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oqw0_4rVitBtqGh0oigqr5VmH0oVghH9SQiW1bRvMGsIX6fb8iRR0Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
etag: "caf58bf6276e226a20a0d0cf6fc3d422f922eb28"
content-type: image/jpeg
age: 27538
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57828b7affae7633b38d0fb6057b894d
db4cd956ba7e1e6b43174c250b7d4f1193277be9
26d83d511af9583a8f0a9ef1bd2ce3deab3ca42fa2c2ae141b61cd123afa9625
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: eac845c9-b10c-4fce-b2ff-01b4111b506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2OjhHp_IAMFeyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c59149-0058376c385a7bf91e07a395;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 18:02:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FtmoLO8c5S2uN0aj1HxWjVMg31vndNF2iKRJoJXmow1Hbb0NIHm9Cw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 18:16:36 GMT
age: 40117
etag: "db4cd956ba7e1e6b43174c250b7d4f1193277be9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ekm.co.id/
301 Moved Permanently 0 B IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 17 Jan 2023 05:25:14 GMT
content-type: text/html; charset=UTF-8
content-length: 0
pragma: no-cache
expires: Tue, 17 Jan 2023 06:25:14 GMT
cache-control: max-age=3600
x-redirect-by: redirection
set-cookie: PHPSESSID=ka04m4pjko95sccubt7qgtsb9a; path=/
location: https://www.ekm.co.id/industrial/
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/
302 Found 0 B URL HTTP/2 www.ekm.co.id/industrial/
IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /industrial/ HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 17 Jan 2023 05:25:14 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-redirect-by: Polylang
set-cookie: pll_language=en; expires=Wed, 17-Jan-2024 05:25:14 GMT; Max-Age=31536000; path=/industrial/; secure
location: https://www.ekm.co.id/industrial/?lang=en
cache-control: max-age=0
expires: Tue, 17 Jan 2023 05:25:14 GMT
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1b2e51abfd12507b00ebd8b7afda6308
4d3d5fa49e007714dd37da7da25d9d490d05bd0a
85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ekm.co.id/industrial/?lang=en
200 OK 22 kB URL HTTP/2 www.ekm.co.id/industrial/?lang=en
IP
ASN #58397 PT Infinys System Indonesia
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2562), with CRLF, LF line terminators
Hash 85b1c1000375dd685446fa2f52859989
74b4d61bd048a8e9bc187f845ae8a16adc41b8d6
44babe765b3ce7158b6b1989b47b0b3bf32d7074fd9d8418b5e666de6f14c3dc
Analyzer Verdict Alert fortinet Phishing
GET /industrial/?lang=en HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/html; charset=UTF-8
content-length: 22507
link: <https://www.ekm.co.id/industrial/index.php?rest_route=/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=0
expires: Tue, 17 Jan 2023 05:25:14 GMT
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1b2e51abfd12507b00ebd8b7afda6308
4d3d5fa49e007714dd37da7da25d9d490d05bd0a
85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5
200 OK 1.4 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5
IP
ASN #58397 PT Infinys System Indonesia
Hash c6d37f1639077bdea65c1a5c06ff2e9b
2b6fd1d6428282f2c2f084f545d596dc4938eedc
5b70c64280ea7c24f603380cba17b7b517f262b9fbcc0d835e219d2624a3870e
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 1354
last-modified: Tue, 10 Dec 2019 03:45:52 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5def14f0-54a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/css/dashicons.min.css?ver=5.3.14
200 OK 48 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/css/dashicons.min.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (47529)
Hash d54a4192cc3e4d54677c8091c1dae73b
7e3e8e30c66c5751bb5477b4e9939969f4e2aa5e
de7bdcb93f2804e963f238713752a30a22a3a3afef6070fb78d206e6199cd353
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/css/dashicons.min.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 47564
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "6079e1af-b9cc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1
200 OK 8.0 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1
IP
ASN #58397 PT Infinys System Indonesia
Hash 72e6f6415f9d333693791042978c1958
9daae5837f6453d078e78251d11ac78950b91dca
9251da9cb46d9041da4c8e77fe1e9130d11acc5a80e0d73cddd7ef21efcfcf9b
GET /industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 8006
last-modified: Tue, 10 Dec 2019 03:46:01 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5def14f9-1f46"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6
200 OK 289 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6
IP
ASN #58397 PT Infinys System Indonesia
Hash d76e210be5a6a4539da2252a674d6254
c72570396a3c0b7d424a79db41d091c092bfacf7
86b21814c2d81d8593674d07bf5cd6fe0ad1935aa6cdaa09075d401344f081f8
GET /industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 289
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:46:53 GMT
etag: "1e4-599515ce67e4f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0
200 OK 510 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0
IP
ASN #58397 PT Infinys System Indonesia
Hash e72408980861f812425cc5560286fbc2
a965a016806caa19e38392a1007205e717fc7032
c76010d299b0fb4d175cd59df003abe981a0bf9dfc4a9494ccd2553b5e3ffa17
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 510
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:47:21 GMT
etag: "3d2-599515e919a71-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14
200 OK 41 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (41045), with no line terminators
Hash 612b7ab9f699e968f5b3206ca16ee834
12685fd0b83dabb9a2004dd4c74de4515fea3013
dfd6d929422d1f69a727fb6b525f610562eab183a333576516bec0b0503cb049
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 41045
last-modified: Thu, 11 Jun 2020 19:21:01 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5ee2841d-a055"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6
200 OK 5.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
Hash 95c8dc15faa10e9af0e1389ac6fcc2d5
311bb5e8696c561765b3d9f7c9df987bd94763ba
2c78bba41633b20948e4d970863c2891356c2b469843126187105b629ee465f2
GET /industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 5120
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5bced815-1400"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 97 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (31997)
Hash 49edccea2e7ba985cadc9ba0531cbed1
f8747f8ee704d9af31d0950015e01d3f9635b070
1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
GET /industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: application/javascript
content-length: 96873
last-modified: Thu, 05 Sep 2019 19:17:58 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5d715f66-17a69"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 10 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 10056
last-modified: Fri, 20 May 2016 06:11:28 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "573eaa90-2748"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5
200 OK 4.6 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5
IP
ASN #58397 PT Infinys System Indonesia
Hash 75cb305a4728559e94c95f8a8fe998db
6b369839f2346289d6df2f2c67dff63bc2198967
f818cf4d21a4e8df0e604818c996bc0c4e4de581e726f781062425b1a5982049
GET /industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 4638
last-modified: Tue, 10 Dec 2019 03:45:52 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5def14f0-121e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1
200 OK 1.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1
IP
ASN #58397 PT Infinys System Indonesia
Hash 89265fa66ef241cd9036296f3f103d3f
1c71d32453f64d78bdcd2f8b6c3a65a3d050a049
d8d2315aa61a96e9ac109b8a920c67d77c132b9ddb07d508d6729d0d03dd91ea
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 1075
last-modified: Tue, 10 Dec 2019 03:46:01 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5def14f9-433"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6
200 OK 479 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6
IP
ASN #58397 PT Infinys System Indonesia
Hash 5850a4d6be478b5a5c29526a957840c4
1854bff2c967f028cf8c1f53b3c7878fb605e329
654a9a69300dd841ea2bc14d36c346377cee298b126463cc844fb26929260843
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 479
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:46:53 GMT
etag: "346-599515ce67a67-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0
200 OK 2.3 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0
IP
ASN #58397 PT Infinys System Indonesia
Hash d57ea8be4223524c97a28d4bcbe46825
b750ecd609b7245b8fcfd5f9c148b36a5dbbf2ec
4e263a75e29fff467d615ae2b7c503c4e98ea972e25ec82db02197d1f0db058a
GET /industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 2288
last-modified: Tue, 10 Dec 2019 03:47:21 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5def1549-8f0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6
200 OK 300 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (501), with no line terminators
Hash e448a68154bf06878cc60d6539a78ce4
432569a8de31496a1d2108936bb010f617a77ab5
c03e04d1c143d95647dd3c04ae4f4655d4c01e2661c4a76f0b2b99e7bedbe245
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 300
x-accel-version: 0.01
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
etag: "1f5-578e0f0a66f40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6
200 OK 3.3 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (3265), with no line terminators
Hash 91349263844a385fc3bf390957658d6a
7ee19517fd8fcff70bbaea61e22fd6d458bf8b32
57e320a8a2bf1e293035bcede5b20ba86a5c3425c2ee6ad95189521f1dfde4ab
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 3265
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-cc1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6
200 OK 5.8 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (5787), with no line terminators
Hash 23d5133365c6c8a4080e677d992c3417
526bafe3be4f169a7c709d3dd88294706a5ab6b7
4d60a17bf718cfe8352ecf36005a326fa9075f84e1429b416a9d422ed3586843
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 5787
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-169b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6
200 OK 35 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (34848), with no line terminators
Hash e5bc2c8d5f37628708f6658472af108d
52cdb84901fbb2c3db676edfe7f486c4546e537a
117dbc850cc626cf948ad4d33acd367399d0d175a69d733685804a6258c1ceef
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 34848
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-8820"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6
200 OK 37 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (37121), with no line terminators
Hash 1bf3a9bd42c771a0f08115985bf011e4
e0529e327a5c36deb7f01dfb239184143c719e09
d7f67578463db7d1fa22377741664a8093eedd8c7e2f947d0ebb99b35f6ba557
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 37121
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-9101"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6
200 OK 1.5 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
Hash d8fae9badb74fe359c4ed3de0753f9c6
f71ccdae520c5021f9a3f5b6e70fbbbf5e8fc0b8
fb8904b6bed74152309795bb0b18a9330316eff32a38792a5601c818122e2e6e
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 1539
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-603"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1
200 OK 1.5 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1
IP
ASN #58397 PT Infinys System Indonesia
File type HTML document, ASCII text, with very long lines (1509), with no line terminators
Hash 56b90778fb9936e9feb7d077f093c622
b8368525b3b025fda44281bd0f5c6acc8960b4d2
9ad5f9f1acf7b1d2e32607221022b810bb7132568d4f0976ec6ec3449223f7bc
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 1509
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bced815-5e5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14
200 OK 1.4 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 1391
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "6079e1af-56f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
200 OK 14 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (10927)
Hash d6aeffd9e0126160ff89d369c05a5fbe
8480b15ad38e8e1d67960e72b513fa4f463e2cc1
95309410230b1d3148e52211dcee018bfa011a2d69e9d7d6f81164035e8518a0
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: application/javascript
content-length: 13849
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "6079e1af-3619"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/logo-esa-5.png
200 OK 18 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/logo-esa-5.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 551 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash b442551514e8c317fa9a1e22d540bcb0
fa7adf00a98df932027c2fafd84cd2b658541207
de6f9c586286b6cf1a75af1d000ec56e4a2765bfb6ebb6a391560ec5b5357016
GET /industrial/wp-content/uploads/2018/10/logo-esa-5.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: image/png
content-length: 17908
last-modified: Thu, 25 Oct 2018 07:49:15 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bd1757b-45f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg
200 OK 64 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg
IP
ASN #58397 PT Infinys System Indonesia
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 1920x823, components 3\012- data
Hash 41f8d0ac18cb4d31fefa3fa53713d881
fa836dd28f145cc5506ee0cec1cd2dd91450b8e9
5c7ed73e4667829b2ee369064b1020fed3c15f64212fdb3fca59371b8edf8d40
GET /industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: image/jpeg
content-length: 63483
last-modified: Thu, 25 Oct 2018 08:12:49 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bd17b01-f7fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/4.jpg
200 OK 36 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/4.jpg
IP
ASN #58397 PT Infinys System Indonesia
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 800x590, components 3\012- data
Hash 87b83012eeb1b553cef66704745557b8
a038e5084319676c74d1b2efce483fa0906528aa
fbfbf2ad89d4f64e7884fea4d66c599410403bddcbdcb3099243011103fc2260
GET /industrial/wp-content/uploads/2018/10/4.jpg HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: image/jpeg
content-length: 36012
last-modified: Thu, 25 Oct 2018 08:18:45 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bd17c65-8cac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 04:05:28 GMT
expires: Tue, 16 Jan 2024 04:05:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 91188
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 20:09:30 GMT
expires: Thu, 11 Jan 2024 20:09:30 GMT
cache-control: public, max-age=31536000
age: 465346
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:11 GMT
expires: Sat, 13 Jan 2024 13:33:11 GMT
cache-control: public, max-age=31536000
age: 316325
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js
200 OK 50 B URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js
IP
Hash 104d46a3208b40e8ded389332f5a78a3
4ab55ccb2972e9a3cb62c65c97308c2450a682bb
f6e4f5edb3194334a199f0bf80b38d92a0b7388330fbce94c8c0fb2f852c171f
GET /mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: JMKKUUjSVlHYpTo5wUnQDhPQ3bBQQEXtQcLKDpGDUhy8hdhEsjWNGw3nBZQbbdEUMalmV+Kg1GA=
x-amz-request-id: V2MS1NDF0EHQR30C
Last-Modified: Thu, 07 Mar 2019 00:27:11 GMT
ETag: "104d46a3208b40e8ded389332f5a78a3"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50
X-EdgeConnect-MidMile-RTT: 17
X-EdgeConnect-Origin-MEX-Latency: 97
Cache-Control: max-age=1800
Expires: Tue, 17 Jan 2023 05:55:16 GMT
Date: Tue, 17 Jan 2023 05:25:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0988e06d2698db0b1a5bcadbadba234a
515ca060583e340fec230fcf8e758352f4bc10a8
1a0dc461032c28c3e0e71daec9b2296e5b5c089e22785e7d7bee505d71e40127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4334
Cache-Control: max-age=102219
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:17 GMT
Etag: "63c50c9a-1d7"
Expires: Wed, 18 Jan 2023 09:48:56 GMT
Last-Modified: Mon, 16 Jan 2023 08:36:42 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: zPky8xaq9gY0yBRsFyuambX1sQzsYMn3WARXj/Mh88o+3QUhvvxI4M/PV6g++FEQQY1yrDRJLZgBtrKVu4WLUQ==
priority: u=3,i
content-length: 27815
x-fb-trip-id: 1904183273
date: Tue, 17 Jan 2023 05:25:17 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0988e06d2698db0b1a5bcadbadba234a
515ca060583e340fec230fcf8e758352f4bc10a8
1a0dc461032c28c3e0e71daec9b2296e5b5c089e22785e7d7bee505d71e40127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4334
Cache-Control: max-age=102219
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 05:25:17 GMT
Etag: "63c50c9a-1d7"
Expires: Wed, 18 Jan 2023 09:48:56 GMT
Last-Modified: Mon, 16 Jan 2023 08:36:42 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.ekm.co.id/industrial/wp-content/uploads/2018/10/modernequipment.png
200 OK 455 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/modernequipment.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 800 x 600, 8-bit/color RGB, non-interlaced\012- data
Size 455 kB (455288 bytes)
Hash 44e17a1422f61648838e604d45345740
6eaf933b102f336bedbf68881a1f53b33d822269
e481910c942c4b3858763eba7886cb71a6c726745af3b4a2614b8bdbdf419d51
GET /industrial/wp-content/uploads/2018/10/modernequipment.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:16 GMT
content-type: image/png
content-length: 455288
last-modified: Thu, 25 Oct 2018 08:56:19 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:16 GMT
etag: "5bd18533-6f278"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1673933117365&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.2.1673933117364.1178374955&it=1673933117061&coo=false&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1673933117365&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.2.1673933117364.1178374955&it=1673933117061&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110017 bytes)
Hash 99047c3607e010b4558da2760f4c231a
18250cb335723ddcc7dfa9aee5eece344f34837f
3f71a2ee8a6faede41c5788503dcc337a542c676ae7675ede9296d187190ca6a
GET /tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1673933117365&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.2.1673933117364.1178374955&it=1673933117061&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 17 Jan 2023 05:25:17 GMT
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png
200 OK 4.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f9735f70ee815f15537f48a700806ee
16256d7fa662c745717867179144c34f285b69bc
98e5e6f929a755bb681ab19552d8d9e40345f54904068445186c103d1aae4908
GET /industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:18 GMT
content-type: image/png
content-length: 4083
last-modified: Thu, 25 Oct 2018 10:03:11 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:18 GMT
etag: "5bd194df-ff3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png
200 OK 811 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 5abbe474a36219ef098402a64ab2bb2f
565fe81aaaeacce402337dec608011da5132432e
9173ebfd1245503accd5abbfe892495cdf2a8227ae073b04f33604d89ebbd7a5
GET /industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:18 GMT
content-type: image/png
content-length: 811
x-accel-version: 0.01
last-modified: Thu, 25 Oct 2018 10:03:11 GMT
etag: "32e-5790ab5da5a82-gzip"
accept-ranges: bytes
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:300,300i,400,400i,600,600i,700i,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300,300i,400,400i,600,600i,700i,900i
IP
GET /css?family=Poppins:300,300i,400,400i,600,600i,700i,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Jan 2023 05:25:15 GMT
date: Tue, 17 Jan 2023 05:25:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14
200 OK 0 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=ka04m4pjko95sccubt7qgtsb9a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 05:25:15 GMT
content-type: text/css
content-length: 139442
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Wed, 25 Jan 2023 05:25:15 GMT
etag: "5bced815-220b2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
103.41.188.31
23.36.77.32
34.160.144.191
31.13.72.36
93.184.220.29
0.0.0.0