r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9443
Expires: Thu, 24 Nov 2022 07:02:36 GMT
Date: Thu, 24 Nov 2022 04:25:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3411
Expires: Thu, 24 Nov 2022 05:22:04 GMT
Date: Thu, 24 Nov 2022 04:25:13 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2259
Cache-Control: max-age=110622
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:13 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:08:55 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Y/UafJqcRfpMrdWJpPBMgGTh0oq6an33nVBJPtwKT1GurXiO77xoERXwDuhuP81JrPHFmDpWkP8=
x-amz-request-id: 541CNQTFJXBD8XAS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 03:43:14 GMT
age: 2519
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ekm.co.id/
301 Moved Permanently 162 B IP
ASN #58397 PT Infinys System Indonesia
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 04:25:13 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.ekm.co.id/
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 04:18:55 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 378
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 04:11:11 GMT
cache-control: public,max-age=3600
age: 843
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3847
Cache-Control: max-age=107146
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:14 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:11:00 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OkkhprxU2sisJc2C7tl6TA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nn9oxO4c8UjElOkJ9tYrXsjfmx0=
www.ekm.co.id/
301 Moved Permanently 0 B IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 04:25:15 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://www.ekm.co.id/
Cache-Control: max-age=0
Expires: Thu, 24 Nov 2022 04:25:14 GMT
X-Powered-By: PHP/7.1.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ec72b7a4c6f1e92a6faffa8ed387aab
da26678bd40f0c2e53fe6a3f2580fa74e27040ea
6587bbc1510dacf776d566e804f70d72f01c37b7a5dc4b307a3033cb1eb02750
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6587BBC1510DACF776D566E804F70D72F01C37B7A5DC4B307A3033CB1EB02750"
Last-Modified: Thu, 24 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 24 Nov 2022 10:25:15 GMT
Date: Thu, 24 Nov 2022 04:25:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7406
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:25:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7406
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:25:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7406
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:25:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7406
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:25:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7406
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:25:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nwXP5jm9A2Cl3_-Lm194ycXkeClig1L9hwgUgE8i8NF-Vv2gNfj_4Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 15:14:08 GMT
age: 47468
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 23276
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a939ef79a2ad8614e7d3362de0cfbd8
51e1751527dff72955ba62b2d9a2b92199dca31a
564e58dc2e0b2ea0fd67faa30cbf622c9271c1d1f26ae14eacb24c20b1473786
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3805
x-amzn-requestid: 629cde59-1260-40ff-923e-a1d91c6b7a5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvynGq5IAMFgoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9343-162460086ad3b77c4bccd4f2;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wW2JzhBhHcEvMlNxg2ALt7UgDmQQG6s17jCPUp7IzEbrzV6WnU0rzQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:55:29 GMT
age: 23387
etag: "51e1751527dff72955ba62b2d9a2b92199dca31a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 23729
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kkI9Vh2vZeJPwz2JVL5MErsBBwk8-2Jo49yc0sFqv5pxIyBi6azFIw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:23 GMT
age: 23273
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:15:15 GMT
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
age: 76201
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ekm.co.id/
301 Moved Permanently 0 B IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 24 Nov 2022 04:25:16 GMT
content-type: text/html; charset=UTF-8
content-length: 0
pragma: no-cache
expires: Thu, 24 Nov 2022 05:25:16 GMT
cache-control: max-age=3600
x-redirect-by: redirection
set-cookie: PHPSESSID=mabvk99tj1f8vc98u8faes6q91; path=/
location: https://www.ekm.co.id/industrial/
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/
302 Found 0 B URL HTTP/2 www.ekm.co.id/industrial/
IP
ASN #58397 PT Infinys System Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /industrial/ HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 04:25:16 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-redirect-by: Polylang
set-cookie: pll_language=en; expires=Fri, 24-Nov-2023 04:25:16 GMT; Max-Age=31536000; path=/industrial/; secure
location: https://www.ekm.co.id/industrial/?lang=en
cache-control: max-age=0
expires: Thu, 24 Nov 2022 04:25:16 GMT
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/?lang=en
200 OK 22 kB URL HTTP/2 www.ekm.co.id/industrial/?lang=en
IP
ASN #58397 PT Infinys System Indonesia
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2562), with CRLF, LF line terminators
Hash 68afbf32e4832d1f2a4077b7995c9973
a059e3c8786f5e7983ea798afb0058d04fc40be5
e1c2d97e30dab8f36791f34a44c6a16c2983e11fce35ea8202f2df2c4dfd7981
Analyzer Verdict Alert fortinet Phishing
GET /industrial/?lang=en HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/html; charset=UTF-8
content-length: 22507
link: <https://www.ekm.co.id/industrial/index.php?rest_route=/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=0
expires: Thu, 24 Nov 2022 04:25:17 GMT
x-powered-by: PHP/7.1.33, PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5
200 OK 1.4 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5
IP
ASN #58397 PT Infinys System Indonesia
Hash c6d37f1639077bdea65c1a5c06ff2e9b
2b6fd1d6428282f2c2f084f545d596dc4938eedc
5b70c64280ea7c24f603380cba17b7b517f262b9fbcc0d835e219d2624a3870e
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/catch-infinite-scroll/public/css/catch-infinite-scroll-public.css?ver=1.5 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 1354
last-modified: Tue, 10 Dec 2019 03:45:52 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5def14f0-54a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/css/dashicons.min.css?ver=5.3.14
200 OK 48 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/css/dashicons.min.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (47529)
Hash d54a4192cc3e4d54677c8091c1dae73b
7e3e8e30c66c5751bb5477b4e9939969f4e2aa5e
de7bdcb93f2804e963f238713752a30a22a3a3afef6070fb78d206e6199cd353
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/css/dashicons.min.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 47564
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "6079e1af-b9cc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14
200 OK 41 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (41045), with no line terminators
Hash 612b7ab9f699e968f5b3206ca16ee834
12685fd0b83dabb9a2004dd4c74de4515fea3013
dfd6d929422d1f69a727fb6b525f610562eab183a333576516bec0b0503cb049
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 41045
last-modified: Thu, 11 Jun 2020 19:21:01 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5ee2841d-a055"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1
200 OK 8.0 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1
IP
ASN #58397 PT Infinys System Indonesia
Hash 72e6f6415f9d333693791042978c1958
9daae5837f6453d078e78251d11ac78950b91dca
9251da9cb46d9041da4c8e77fe1e9130d11acc5a80e0d73cddd7ef21efcfcf9b
GET /industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/css/catch-instagram-feed-gallery-widget-public.css?ver=1.9.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 8006
last-modified: Tue, 10 Dec 2019 03:46:01 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5def14f9-1f46"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6
200 OK 289 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6
IP
ASN #58397 PT Infinys System Indonesia
Hash d76e210be5a6a4539da2252a674d6254
c72570396a3c0b7d424a79db41d091c092bfacf7
86b21814c2d81d8593674d07bf5cd6fe0ad1935aa6cdaa09075d401344f081f8
GET /industrial/wp-content/plugins/essential-widgets/public/css/essential-widgets-public.css?ver=1.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 289
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:46:53 GMT
etag: "1e4-599515ce67e4f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0
200 OK 510 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0
IP
ASN #58397 PT Infinys System Indonesia
Hash e72408980861f812425cc5560286fbc2
a965a016806caa19e38392a1007205e717fc7032
c76010d299b0fb4d175cd59df003abe981a0bf9dfc4a9494ccd2553b5e3ffa17
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/to-top/public/css/to-top-public.css?ver=2.0 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 510
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:47:21 GMT
etag: "3d2-599515e919a71-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6
200 OK 5.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
Hash 95c8dc15faa10e9af0e1389ac6fcc2d5
311bb5e8696c561765b3d9f7c9df987bd94763ba
2c78bba41633b20948e4d970863c2891356c2b469843126187105b629ee465f2
GET /industrial/wp-content/themes/catch-fullscreen/assets/css/fullpage.css?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 5120
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-1400"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 10 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /industrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 10056
last-modified: Fri, 20 May 2016 06:11:28 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "573eaa90-2748"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 97 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (31997)
Hash 49edccea2e7ba985cadc9ba0531cbed1
f8747f8ee704d9af31d0950015e01d3f9635b070
1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
GET /industrial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 96873
last-modified: Thu, 05 Sep 2019 19:17:58 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5d715f66-17a69"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5
200 OK 4.6 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5
IP
ASN #58397 PT Infinys System Indonesia
Hash 75cb305a4728559e94c95f8a8fe998db
6b369839f2346289d6df2f2c67dff63bc2198967
f818cf4d21a4e8df0e604818c996bc0c4e4de581e726f781062425b1a5982049
GET /industrial/wp-content/plugins/catch-infinite-scroll/public/js/catch-infinite-scroll-public.js?ver=1.5 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 4638
last-modified: Tue, 10 Dec 2019 03:45:52 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5def14f0-121e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1
200 OK 1.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1
IP
ASN #58397 PT Infinys System Indonesia
Hash 89265fa66ef241cd9036296f3f103d3f
1c71d32453f64d78bdcd2f8b6c3a65a3d050a049
d8d2315aa61a96e9ac109b8a920c67d77c132b9ddb07d508d6729d0d03dd91ea
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/catch-instagram-feed-gallery-widget/public/js/catch-instagram-feed-gallery-widget-public.js?ver=1.9.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 1075
last-modified: Tue, 10 Dec 2019 03:46:01 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5def14f9-433"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6
200 OK 479 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6
IP
ASN #58397 PT Infinys System Indonesia
Hash 5850a4d6be478b5a5c29526a957840c4
1854bff2c967f028cf8c1f53b3c7878fb605e329
654a9a69300dd841ea2bc14d36c346377cee298b126463cc844fb26929260843
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/plugins/essential-widgets/public/js/essential-widgets-public.js?ver=1.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 479
x-accel-version: 0.01
last-modified: Tue, 10 Dec 2019 03:46:53 GMT
etag: "346-599515ce67a67-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0
200 OK 2.3 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0
IP
ASN #58397 PT Infinys System Indonesia
Hash d57ea8be4223524c97a28d4bcbe46825
b750ecd609b7245b8fcfd5f9c148b36a5dbbf2ec
4e263a75e29fff467d615ae2b7c503c4e98ea972e25ec82db02197d1f0db058a
GET /industrial/wp-content/plugins/to-top/public/js/to-top-public.js?ver=2.0 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 2288
last-modified: Tue, 10 Dec 2019 03:47:21 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5def1549-8f0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6
200 OK 300 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (501), with no line terminators
Hash e448a68154bf06878cc60d6539a78ce4
432569a8de31496a1d2108936bb010f617a77ab5
c03e04d1c143d95647dd3c04ae4f4655d4c01e2661c4a76f0b2b99e7bedbe245
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/skip-link-focus-fix.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 300
x-accel-version: 0.01
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
etag: "1f5-578e0f0a66f40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6
200 OK 3.3 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (3265), with no line terminators
Hash 91349263844a385fc3bf390957658d6a
7ee19517fd8fcff70bbaea61e22fd6d458bf8b32
57e320a8a2bf1e293035bcede5b20ba86a5c3425c2ee6ad95189521f1dfde4ab
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/jquery.matchHeight.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 3265
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-cc1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6
200 OK 5.8 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (5787), with no line terminators
Hash 23d5133365c6c8a4080e677d992c3417
526bafe3be4f169a7c709d3dd88294706a5ab6b7
4d60a17bf718cfe8352ecf36005a326fa9075f84e1429b416a9d422ed3586843
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/functions.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 5787
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-169b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6
200 OK 35 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (34848), with no line terminators
Hash e5bc2c8d5f37628708f6658472af108d
52cdb84901fbb2c3db676edfe7f486c4546e537a
117dbc850cc626cf948ad4d33acd367399d0d175a69d733685804a6258c1ceef
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/fullpage.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 34848
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-8820"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6
200 OK 37 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (37121), with no line terminators
Hash 1bf3a9bd42c771a0f08115985bf011e4
e0529e327a5c36deb7f01dfb239184143c719e09
d7f67578463db7d1fa22377741664a8093eedd8c7e2f947d0ebb99b35f6ba557
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/scrolloverflow.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 37121
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-9101"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6
200 OK 1.5 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6
IP
ASN #58397 PT Infinys System Indonesia
Hash d8fae9badb74fe359c4ed3de0753f9c6
f71ccdae520c5021f9a3f5b6e70fbbbf5e8fc0b8
fb8904b6bed74152309795bb0b18a9330316eff32a38792a5601c818122e2e6e
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/custom-fullpage.min.js?ver=1.0.6 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 1539
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-603"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1
200 OK 1.5 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1
IP
ASN #58397 PT Infinys System Indonesia
File type HTML document, ASCII text, with very long lines (1509), with no line terminators
Hash 56b90778fb9936e9feb7d077f093c622
b8368525b3b025fda44281bd0f5c6acc8960b4d2
9ad5f9f1acf7b1d2e32607221022b810bb7132568d4f0976ec6ec3449223f7bc
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/assets/js/fitvids.min.js?ver=1.1 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 1509
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-5e5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14
200 OK 1.4 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/js/wp-embed.min.js?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 1391
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "6079e1af-56f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
200 OK 14 kB URL HTTP/2 www.ekm.co.id/industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type ASCII text, with very long lines (10927)
Hash d6aeffd9e0126160ff89d369c05a5fbe
8480b15ad38e8e1d67960e72b513fa4f463e2cc1
95309410230b1d3148e52211dcee018bfa011a2d69e9d7d6f81164035e8518a0
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: application/javascript
content-length: 13849
last-modified: Fri, 16 Apr 2021 19:12:47 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "6079e1af-3619"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/logo-esa-5.png
200 OK 18 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/logo-esa-5.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 551 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash b442551514e8c317fa9a1e22d540bcb0
fa7adf00a98df932027c2fafd84cd2b658541207
de6f9c586286b6cf1a75af1d000ec56e4a2765bfb6ebb6a391560ec5b5357016
GET /industrial/wp-content/uploads/2018/10/logo-esa-5.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: image/png
content-length: 17908
last-modified: Thu, 25 Oct 2018 07:49:15 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bd1757b-45f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14
200 OK 139 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14
IP
ASN #58397 PT Infinys System Indonesia
File type Unicode text, UTF-8 text, with very long lines (1119)
Size 139 kB (139442 bytes)
Hash d57388662ab76033db86b28a1c49894e
f56591fcea5814d663dde8135aa9d3162d48e347
feeec65bbe66ba958e33b827aa55cc4fd19f2533e646d08d0a0563d26ff74468
Analyzer Verdict Alert fortinet Phishing
GET /industrial/wp-content/themes/catch-fullscreen/style.css?ver=5.3.14 HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: text/css
content-length: 139442
last-modified: Tue, 23 Oct 2018 08:13:09 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bced815-220b2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg
200 OK 64 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg
IP
ASN #58397 PT Infinys System Indonesia
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 1920x823, components 3\012- data
Hash 41f8d0ac18cb4d31fefa3fa53713d881
fa836dd28f145cc5506ee0cec1cd2dd91450b8e9
5c7ed73e4667829b2ee369064b1020fed3c15f64212fdb3fca59371b8edf8d40
GET /industrial/wp-content/uploads/2018/10/cropped-promo_box_00018_main.jpg HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: image/jpeg
content-length: 63483
last-modified: Thu, 25 Oct 2018 08:12:49 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bd17b01-f7fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/4.jpg
200 OK 36 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/4.jpg
IP
ASN #58397 PT Infinys System Indonesia
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 800x590, components 3\012- data
Hash 87b83012eeb1b553cef66704745557b8
a038e5084319676c74d1b2efce483fa0906528aa
fbfbf2ad89d4f64e7884fea4d66c599410403bddcbdcb3099243011103fc2260
GET /industrial/wp-content/uploads/2018/10/4.jpg HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: image/jpeg
content-length: 36012
last-modified: Thu, 25 Oct 2018 08:18:45 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bd17c65-8cac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:52 GMT
expires: Wed, 22 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 135686
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ekm.co.id/industrial/wp-content/uploads/2018/10/modernequipment.png
200 OK 455 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/modernequipment.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 800 x 600, 8-bit/color RGB, non-interlaced\012- data
Size 455 kB (455288 bytes)
Hash 44e17a1422f61648838e604d45345740
6eaf933b102f336bedbf68881a1f53b33d822269
e481910c942c4b3858763eba7886cb71a6c726745af3b4a2614b8bdbdf419d51
GET /industrial/wp-content/uploads/2018/10/modernequipment.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:17 GMT
content-type: image/png
content-length: 455288
last-modified: Thu, 25 Oct 2018 08:56:19 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:17 GMT
etag: "5bd18533-6f278"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:48:50 GMT
expires: Thu, 23 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 23788
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekm.co.id
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:31:06 GMT
expires: Thu, 23 Nov 2023 19:31:06 GMT
cache-control: public, max-age=31536000
age: 32052
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash b6e7c5faf2d24e0d958ab10ee95f6791
16b68ad4b4a2776571697dff8edc9369a3c5c451
1431771f6fd4ad8c028d53a7489acc16b829e32e01d92df5e8c923723024b75a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4082
Cache-Control: max-age=126436
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Etag: "637e2d20-1d7"
Expires: Fri, 25 Nov 2022 15:32:34 GMT
Last-Modified: Wed, 23 Nov 2022 14:24:32 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 2pJz8l4aiYhhJnvqgRfZJAXp192CJB32tZzmdzJ8d38kxoyV/rVT5RV0zaveCOa8DX6pGoi0p5P32ZquLsAvJA==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 04:25:18 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b6e7c5faf2d24e0d958ab10ee95f6791
16b68ad4b4a2776571697dff8edc9369a3c5c451
1431771f6fd4ad8c028d53a7489acc16b829e32e01d92df5e8c923723024b75a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4082
Cache-Control: max-age=126436
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:25:18 GMT
Etag: "637e2d20-1d7"
Expires: Fri, 25 Nov 2022 15:32:34 GMT
Last-Modified: Wed, 23 Nov 2022 14:24:32 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png
200 OK 4.1 kB URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f9735f70ee815f15537f48a700806ee
16256d7fa662c745717867179144c34f285b69bc
98e5e6f929a755bb681ab19552d8d9e40345f54904068445186c103d1aae4908
GET /industrial/wp-content/uploads/2018/10/cropped-ekm_igid-192x192.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:18 GMT
content-type: image/png
content-length: 4083
last-modified: Thu, 25 Oct 2018 10:03:11 GMT
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:18 GMT
etag: "5bd194df-ff3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png
200 OK 811 B URL HTTP/2 www.ekm.co.id/industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png
IP
ASN #58397 PT Infinys System Indonesia
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 5abbe474a36219ef098402a64ab2bb2f
565fe81aaaeacce402337dec608011da5132432e
9173ebfd1245503accd5abbfe892495cdf2a8227ae073b04f33604d89ebbd7a5
GET /industrial/wp-content/uploads/2018/10/cropped-ekm_igid-32x32.png HTTP/1.1
Host: www.ekm.co.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/industrial/?lang=en
Cookie: pll_language=en; PHPSESSID=mabvk99tj1f8vc98u8faes6q91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:25:18 GMT
content-type: image/png
content-length: 811
x-accel-version: 0.01
last-modified: Thu, 25 Oct 2018 10:03:11 GMT
etag: "32e-5790ab5da5a82-gzip"
accept-ranges: bytes
cache-control: max-age=691200
expires: Fri, 02 Dec 2022 04:25:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js
200 OK 50 B URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js
IP
Hash 104d46a3208b40e8ded389332f5a78a3
4ab55ccb2972e9a3cb62c65c97308c2450a682bb
f6e4f5edb3194334a199f0bf80b38d92a0b7388330fbce94c8c0fb2f852c171f
GET /mcjs-connected/js/users/f5c2c2dee580067de384708a0/406459df1102941ac2ecb4273.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: JMKKUUjSVlHYpTo5wUnQDhPQ3bBQQEXtQcLKDpGDUhy8hdhEsjWNGw3nBZQbbdEUMalmV+Kg1GA=
x-amz-request-id: V2MS1NDF0EHQR30C
Last-Modified: Thu, 07 Mar 2019 00:27:11 GMT
ETag: "104d46a3208b40e8ded389332f5a78a3"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50
X-EdgeConnect-MidMile-RTT: 17
X-EdgeConnect-Origin-MEX-Latency: 97
Cache-Control: max-age=1800
Expires: Thu, 24 Nov 2022 04:55:18 GMT
Date: Thu, 24 Nov 2022 04:25:18 GMT
Connection: keep-alive
www.facebook.com/tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1669263918981&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669263918980.1839149695&it=1669263918603&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1669263918981&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669263918980.1839149695&it=1669263918603&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=301696673807149&ev=PageView&dl=https%3A%2F%2Fwww.ekm.co.id%2Findustrial%2F%3Flang%3Den&rl=&if=false&ts=1669263918981&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669263918980.1839149695&it=1669263918603&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 04:25:19 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:300,300i,400,400i,600,600i,700i,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300,300i,400,400i,600,600i,700i,900i
IP
GET /css?family=Poppins:300,300i,400,400i,600,600i,700i,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ekm.co.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 04:25:17 GMT
date: Thu, 24 Nov 2022 04:25:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
103.41.188.31
52.38.198.114
157.240.200.14
96.6.17.210
93.184.220.29
0.0.0.0