r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96defe1601ba891731eee83f0830649d
ba500679fd337488c3f60543561740ff0dfc1898
d2a320a9feb1a874af3da921db2a8619513968724ef8eb0715c010291c4cf8d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2A320A9FEB1A874AF3DA921DB2A8619513968724EF8EB0715C010291C4CF8D9"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19562
Expires: Mon, 26 Dec 2022 09:39:33 GMT
Date: Mon, 26 Dec 2022 04:13:31 GMT
Connection: keep-alive
oilterminal.ae/
301 Moved Permanently 231 B IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8d07b40780138a1982ebe45e04829fcb
3400fc0b3c8ab15b402d8122608e6c02d39e3c9b
dab42f545e7db16349047931ddcd6ea59ceb98db56dba8fc58328fcab90d0e88
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Dec 2022 04:13:31 GMT
Server: Apache
Location: https://oilterminal.ae/
Content-Length: 231
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67f508aae634a023b587a7129a5b8039
2ff7e1d29b497147941d0abf581411cbd2722d7b
eee5fda5214bd4f75b0934bb1f14429fe01251628026fd0f18f117b38848601c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE5FDA5214BD4F75B0934BB1F14429FE01251628026FD0F18F117B38848601C"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19845
Expires: Mon, 26 Dec 2022 09:44:16 GMT
Date: Mon, 26 Dec 2022 04:13:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b1d63d9d906daa309dc263b4991bbe9
04680ddd86781d46dfe6a9671571b3ad1f3758f3
46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6687
Expires: Mon, 26 Dec 2022 06:04:58 GMT
Date: Mon, 26 Dec 2022 04:13:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 26 Dec 2022 03:46:27 GMT
content-type: application/json
age: 1624
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3bx8U4ebvIFg796L0YkZYpHtUDHOPp+vNGGHveor9GrB5AcTU1JD3sZyZvGV7XekUXt9oAkomj01SOEkXoCeCQ==
x-amz-request-id: NJK8VY9DQ1GMTB3A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Dec 2022 03:55:10 GMT
age: 1101
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 04:13:31 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0acb309aa89779ae5a2d9445168092c5
77fc3a7d050d5c1d64e2ca4d02840862639384e0
cefb9135484a19e55882efeb0e63011e16c87554dbb438e3973baf3b4f37fcaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEFB9135484A19E55882EFEB0E63011E16C87554DBB438E3973BAF3B4F37FCAF"
Last-Modified: Sat, 24 Dec 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 26 Dec 2022 10:13:32 GMT
Date: Mon, 26 Dec 2022 04:13:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 26 Dec 2022 03:33:30 GMT
age: 2402
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdc6ddd27a64c85bd15f78b39a79874c
965b8f1b763483b4b4dfe35526d27393d1fdf05c
d2f4dee4d920109e0751634731bea278c9ea9e6c0120ac07969eba74ddbfe615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1813
Cache-Control: max-age=105809
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:32 GMT
Etag: "63a812a8-1d7"
Expires: Tue, 27 Dec 2022 09:37:01 GMT
Last-Modified: Sun, 25 Dec 2022 09:06:48 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +YnT0Of9UsK0I8a+7gVxYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jkX3l59Te1i5sYjUcWJN+/DCFPg=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 796e102a616f07b0de39f5476179ccd5
bf1d8b0944ffa91afc7d31d2ffb3291652f903c3
6881d46edd3d3730884da6719176d7d4bc79aa6d05cda0f4ef97ac10c4591279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6006
Expires: Mon, 26 Dec 2022 05:53:39 GMT
Date: Mon, 26 Dec 2022 04:13:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 796e102a616f07b0de39f5476179ccd5
bf1d8b0944ffa91afc7d31d2ffb3291652f903c3
6881d46edd3d3730884da6719176d7d4bc79aa6d05cda0f4ef97ac10c4591279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6005
Expires: Mon, 26 Dec 2022 05:53:39 GMT
Date: Mon, 26 Dec 2022 04:13:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 796e102a616f07b0de39f5476179ccd5
bf1d8b0944ffa91afc7d31d2ffb3291652f903c3
6881d46edd3d3730884da6719176d7d4bc79aa6d05cda0f4ef97ac10c4591279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6005
Expires: Mon, 26 Dec 2022 05:53:39 GMT
Date: Mon, 26 Dec 2022 04:13:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8403a671b2c4b3b2ce2f8a9eba9de2c0
5437391241a500b6b0d2118120e835d2673e7d39
1e52a144b08ff6efe2da52dfdfeccbc4cea9270536cf5e7a2a769bbff9cd7d2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 6fdd6489-ffea-400f-9199-a20789160ba8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlFk6FvuoAMFYcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a51c85-6805b25c54c3390e5c39c6e1;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 03:12:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SYzFNQsVsh92WOvx4IDgiKouBzdILGiMV4BRAImE7MEbHnVH6E__eg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 03:18:39 GMT
age: 3295
etag: "5437391241a500b6b0d2118120e835d2673e7d39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41f5188d-f96d-4ff9-b031-6deaf492f9eb.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41f5188d-f96d-4ff9-b031-6deaf492f9eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5aa58dca6b2b5be1164a0ef094269f3f
02286c6089b03e288b54d1dc4075dc9fe2c1a633
c51e9a68ff1d6e96c7b933dcfe09a1039d24410846e9eb8d7bf43e9265511a30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41f5188d-f96d-4ff9-b031-6deaf492f9eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 23cc6525-1409-46f4-b2cb-99721981ddbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNZzE84oAMFl5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2a4-13f642154e4da26315cd47aa;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0rpD9gFBkVbScXgDCu3-sEElsVNMRsQsHanighWBhLb2Sw-dIeSdA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:51:20 GMT
age: 22934
etag: "02286c6089b03e288b54d1dc4075dc9fe2c1a633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8987286d-0da9-4e2a-a674-43d900e573e4.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8987286d-0da9-4e2a-a674-43d900e573e4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e79b945cb70d09691397e022efa506b
ab355a55dadbdb52f57f2179bcb016cd4bbeff48
7d9ef5d21e701e90302a4c195cb84abb4419d2c5fada3878aea00a8fc9675685
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8987286d-0da9-4e2a-a674-43d900e573e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8848
x-amzn-requestid: 0b602342-cbce-43d0-b9d3-6bd95221fb9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duO9oF1ioAMFwUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c523-15e9ffaa144f9e001f19b3f4;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:48:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XfAE8-I8KZDnzcB8lVz2buLE_9_sWPF_NVkt1xl-PNDyfKk_Tn6KFw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:51:05 GMT
age: 19349
etag: "ab355a55dadbdb52f57f2179bcb016cd4bbeff48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a394e27-3391-4992-8278-c17b6af6f6e6.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a394e27-3391-4992-8278-c17b6af6f6e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4c1c005f6a410f9a70bb3dfca6e3946
db8224a2f6a985ae37c1ba6b7edd669e8fd2b097
62018c535821be673031b5a9f48e0a208763ce2ba270cf1211b96a6bee950fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a394e27-3391-4992-8278-c17b6af6f6e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5205
x-amzn-requestid: e77f5360-eb30-4e16-b481-e9823a2b94a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMunF_YIAMF_MA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-5727986253815e4d5fe64ee9;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hSuINwOLEb9yadXYM8-wjj5s50dflddwYw_WqqNuNiV7fUW0PUvRnw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:51:28 GMT
age: 22926
etag: "db8224a2f6a985ae37c1ba6b7edd669e8fd2b097"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1170b8f7-9efd-47d4-8f22-05af9334d2a1.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1170b8f7-9efd-47d4-8f22-05af9334d2a1.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4dba0cdb1d2b6c9d61f85f66817137bb
e97b3e4f82bfea16e1991c566fa647d0531a4265
2aee5b88869edcdcb8427831e1c547828f5f013e793646ebbe29e56955df90fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1170b8f7-9efd-47d4-8f22-05af9334d2a1.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9040
x-amzn-requestid: 155323c6-61ec-42c2-9a6d-a25493949cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMupGpNoAMFrBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-32280eaf0734f99d555ffb02;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hZzrydMtwKz3g7jNxoeX0aHGPGOHKZfr8hAdxFV6teHfI0G4HVJ20A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:06:28 GMT
etag: "e97b3e4f82bfea16e1991c566fa647d0531a4265"
content-type: image/jpeg
age: 22026
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f5421b0-4d90-4126-813c-f0b20b8058dc.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f5421b0-4d90-4126-813c-f0b20b8058dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a39035081117434c8be0b4b9d247edd
62ce877ea88dc4c691fce6ce36149eb3db8849ba
594754f2ab4a2f394d465893b9f73364c6ca1d03b688c8bc71ae687b70364c4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f5421b0-4d90-4126-813c-f0b20b8058dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6402
x-amzn-requestid: e473a47b-af93-4aef-87ee-0ae9bd9ea1fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNbQHdWoAMFRZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2ae-571725cd15512b1d33f622c7;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YS_2VrIREftdRQ3aNY7qUGMY0c-QZlXFNhpyCaOEJ8MsNl0D9Am_-g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:51:05 GMT
age: 22949
etag: "62ce877ea88dc4c691fce6ce36149eb3db8849ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 508c2c991a10f5f048c213f732698d4c
5a43bb96597ada2c1a16fb35c6cd74529bb306c4
bdf5e18cacb564fe4be4448d268ecee27b7139b91109b6d0727f2b809c6b5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 508c2c991a10f5f048c213f732698d4c
5a43bb96597ada2c1a16fb35c6cd74529bb306c4
bdf5e18cacb564fe4be4448d268ecee27b7139b91109b6d0727f2b809c6b5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.oilterminal.ae/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/2 www.oilterminal.ae/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 189
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.9.5
200 OK 988 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2cb5394cfc5d30eb7c8bc458c79c8c91
75d4c574037049397eb40250f312b73ca87923f5
73a405f70e2e37d2a3489b2623e2f11c7901a47fa399bc1166c85103328423f0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.9.5 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 988
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.9.5
200 OK 8.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash cee4606c526d5d2264c27328af9296e1
2136cf0f09a512599afb94a40330a483368546bb
b72bb2aa4acd9c30ebde492bb00fb17f183204f04c6729dcb00cf9b2dc89249d
GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.9.5 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 8406
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/oilterminal-entries-management/public/css/oilterminal-entries-management-public.css?ver=1.0.0
200 OK 106 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/oilterminal-entries-management/public/css/oilterminal-entries-management-public.css?ver=1.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8af7d01cc8f7698605260aa25a37f45e
854439cb106afae13bace1acbdfd03e0ec2daee4
8b46abceed3ee90f0e9053977b5dcb569c09784270d0e5fff5aebf80256501e0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/oilterminal-entries-management/public/css/oilterminal-entries-management-public.css?ver=1.0.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Nov 2020 05:50:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 106
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6
200 OK 323 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b24c24b7da3ffeed6ae8ade102a4d317
c4445b3977ce704b927508108e100213eea67a3c
5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 323
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
200 OK 3.6 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17030)
Hash 7d869ce172eda757790baf78f43d35a2
20b2f464cd128e0211e65c430a06a0754eda8afa
15df364776cdbef11f92e8f7836127bbcc6135a067553ad094a617b0e61b1710
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3603
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1
200 OK 3.0 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2997
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.1.1
200 OK 484 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash fd3d1e0df2e8147a3c6b4b581770ad18
b7c4798e187c3c3fd2d51dec5c5d6fdef25436e4
01a761e99476e93d8082bd681c2c49297c26ebfd1d0b6d8cb31e2b44b1dd4f8b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 484
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/astra-addon/astra-addon-60291d5d01bcf7-33086384.css?ver=3.0.1
200 OK 11 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/astra-addon/astra-addon-60291d5d01bcf7-33086384.css?ver=3.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (63879), with no line terminators
Hash 6b731dc69f26b1996854088cbaf15998
56ccbd23316cad952730a779ee11485799f7ba0e
010bd19b06e518e23a70cb7c46fdad0b91352b47102bf614d0bb8590f756f2aa
GET /wp-content/uploads/astra-addon/astra-addon-60291d5d01bcf7-33086384.css?ver=3.0.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 11108
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.2.2
200 OK 13 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash 76ce564e380846e68aef544c866cfd17
8148b9861bfe9bfe667c9d8ca01f605fa63f8873
30529979bc56ece1d2e6a51ceaf2daca4e598123f48d482fceaf19cabc46e639
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.2.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 12862
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/spf_style.css?ver=1.2
200 OK 277 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/spf_style.css?ver=1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 21fbe4d0ad690cbc07e293d68719cfcc
ae4f052b3499d7aafd970c4815f68c6b3428e3f9
4e9e78d2681c9c1c82cd66e724b10c8e77bc9e5643e0be4b3bcea6ee8043557b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/spf_style.css?ver=1.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 277
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/gfstylespro/themes/sp_modern.min.css?ver=2.6
200 OK 1.7 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/gfstylespro/themes/sp_modern.min.css?ver=2.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7520), with no line terminators
Hash 1b015d890fcc229b254ad93d13072b0d
b4640d0d0c0ea1a8d1a23df69ce9fdc99399ae95
dea85ba386d7c0ff110d1e7b717c83f4e4f91c421b1414af9a2201d26ccdebf1
GET /wp-content/plugins/gfstylespro/themes/sp_modern.min.css?ver=2.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Sep 2020 10:05:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1679
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.5.0
200 OK 4.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash a46b5e03a48f889196c3354741011be0
7c25efaa496eb1f2113bfdf2a2f27b58b72fa9e1
e850c766767667b180e9361d4c77f08a53d956fe87ebc68a87e9b4c639fb16af
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.5.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4435
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.1.15
200 OK 1.1 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 0255ff6597e349dcbea28616023120f0
0edd58f3bcd3e4058d1b95ecbad5604a2e9a64ae
bd2aef76525cc429f185078bd0ae3b6d8a3db6db086063c6dab6381a5989daa1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1081
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.1.15
200 OK 1.2 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash aa081444ff4bc9d5cc37904b67e8327d
37932643abf630b1279d676584e0bdc40ab2e1e2
af4b63dd29cb1d174b6fef542dd2fa6f2ca1f3989dcc3e57c6c9ae873ae8334d
GET /wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1153
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato%3A400%7CUbuntu%3A400&display=fallback&ver=3.0.2
200 OK 5.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A400%7CUbuntu%3A400&display=fallback&ver=3.0.2
IP
File type ASCII text, with CRLF, LF line terminators
Hash 741debe22a041e33d97b32a34bf4b8a9
9583c357d7a583d8526304ff6e93ab90b97571b6
48158f49a3c1b6c35171875a30051c773f3ed3df0c360a03ae58337d2d6f0d33
GET /css?family=Lato%3A400%7CUbuntu%3A400&display=fallback&ver=3.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Dec 2022 04:13:34 GMT
date: Mon, 26 Dec 2022 04:13:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.1.15
200 OK 5.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash dc974887535dda3016698c161990498a
fc1a8a45d64ee8ae8e90a5a8d1e8a4c19cde5e12
0b2ab9404bbaf6043d00061a9d33438755f5c9fc9c8673d3f0f534a9c1d0f33c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5404
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=2.1.15
200 OK 3.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14965), with CRLF line terminators
Hash c2343b3cdd9e322774d5e34cfbdd2db2
704dcda7e4104393d391ce9112381fde58005fa5
58c95348e8d8220f6f2a05137b21900ec872aa26f2d89e5e5e1ac672d2dfdb4e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3363
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.1.15
200 OK 6.0 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 597757aca0d08660808bc02e2fc6aa51
a09f32e7dd2d3f822faa4d04ce5e2671e889537a
e092d0f9d3ff8f5e08acc2a776a86e88ea5be880da43112f51bcc537a13a740d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5984
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.3 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5321
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.1.15
200 OK 1.3 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 6f6945568966f581add6a10ad3600243
cbdf38f66fca0b123b91c85bdb5fe7c04033d7f2
90eea33f843339da21e03749cfd0fd8e62131d30c106c07b08ac21e73dc2b2c1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1271
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.1.15
200 OK 2.9 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 255c4e51a37e482cd762003dfa561745
d4b0e0ea8890c7f2de58b563a1b86a0a38b5f9db
69ff0215dd07d473edda3506dfa5f9c62d955dc304c9614f43d2644ae3fd744f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2901
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.1.15
200 OK 792 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash b9fbf5506d729d7742e6087c9f852ef1
c3558c906adeb636f2c8e374af92103c2d626ea7
08aa0ad04914599b36cc6d5fd0d404e613a22c408a126abee48263edbaecfaaa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 792
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.1.15
200 OK 1.1 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 921bbdb213882234cdcf2f351ae732d6
68f5abca9de66a06cf3b0523c9b34e4fcdd3248a
c6e7d16babc8bcc02374d63f132c149bdcd0729d47b1cc99a7271d4099fd25cc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1145
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/intlTelInput.min.css?ver=1.2
200 OK 2.9 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/intlTelInput.min.css?ver=1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19157), with no line terminators
Hash 01a9dd574bf5c457ffdcd3ef6b463efc
29f93d71ed22bad6b94beb05fda96cbdfbf9d0ee
621bc765007b2d33cde579bb7b6f1520339347dcfb2c27cac30644d5aa44ddcf
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/intlTelInput.min.css?ver=1.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2877
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.1.15
200 OK 820 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash a3f09b37e2d1b9cdabcb8efc3f85d8e2
29f6ef91ef4e97b74d5ba842fb9db37f55337c92
93c327615c6a561922fc986e2d1a5e48a1ef3d6274f95d3f43bd7c9fc6bf141a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 820
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.1.15
200 OK 1.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, Unicode text, UTF-8 text, with CRLF line terminators
Hash f4a4e66364ccf285169c11e41e751f2a
81b5007c51c9e027f70f51b74978b4643f1f9b11
7bddb6d1731292912d8a8ba2ab03a2ba46a79062b16796bc054adacb42f4d740
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1384
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.1.15
200 OK 1.5 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash cacbe86e50f3a87622f8a6bf5095f95b
394becb76978371f642ddfce996f02f8c795c629
3f17d5ad1a74deb5324aa278331ac5549dee1d145b160857f4999ba32975b894
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1516
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6
200 OK 12 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash c6e9d77524605c7e3303d3915073913b
b331a445df00ccfdda50c9cbb0e3c7b44ed1120f
e47d964691f518d80b41b0afab8c1aa56b2f57f00abd89454c916a5557ebc2f0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 11537
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.1.15
200 OK 436 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash ea101a1cb640b2f4990290c0bbd78f55
4425e74d5c55681c13abc32f6c13f23b057a7c6a
339f839ae5f61463a760d391d2e81a7afd99833628116ea35afda531d3c67cd8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 436
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.1.15
200 OK 522 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 730d7b8992aadba0c31837aadd278aaf
c3c9cb9d70ca86a522340f8e1838897124510405
b73e28192fd70b77a91253186c03227fcca7f36bed1eef74e8e76e4ce7fe2a50
GET /wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 522
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.1.15
200 OK 1.2 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash df97bc5269c7cf86c133fa11dd8e2088
0cfe01439353f9488ace6ada9fe71df5a2991d36
a11e791893d733cb59a4904350629a43b788fd2fb4f41cd319d24f17e828f3ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1152
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.1.15
200 OK 1.3 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type CSV text\012- troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 55d0d4646b0e5f98bd0fc46244dbc777
015b9b0880c1fdcbc484ee1e03ea94ccc7a38769
97f8fbe64a43495a4fd2c1c8d981698df1d9d926b940b2779da73fb818fd2619
GET /wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1288
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.1.15
200 OK 3.1 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash d7cd95ee9651f8644b44781353171dbc
98c4717f86f13a09cc00a7a3358c4eab50a4915a
828438cf0b754bb50fa6f6e788826ae462b8c7274aefa44198883210d2eaa14c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3114
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1
200 OK 309 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (491)
Hash 4ac03792c06bc9fc64f6b43b4af1ffc5
fe915fdc0d8462afc4740f8cacc62ea85a0ad2e5
f1be68acb27e94f8925cb0d68f965c686fc9d320e814ec0a5747bab2cc251206
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 309
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
200 OK 310 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 2787accb505c197c9bbff06a38d5c931
c7fa986bdb2f6972caa0d003705098aeb644b8f6
86ba4a954e110a614b9174dbe21466c45acebec05115e606d9fbfe3175624074
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 310
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1
200 OK 13 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash 9e1402f4301abf62dead70303a02d64d
8d4b851d6fd7db716aae3640fac34fa53ecd5de3
15b535c20b222f5135a738e15f0487808fa0888ee6d37a8e2e9f42b963dd3a09
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 12576
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.1.15
200 OK 181 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash 47b19f2a754758a178105c67405b41dd
6204579d7fdd494d8fdb213c27ea35628d9ee91a
5e4959a1ef0628bc5296540a0d372791ca7064f22d81139e0b43973ceb46743f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 181
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/themes/astra/assets/css/minified/compatibility/gravity-forms.min.css?ver=3.0.2
200 OK 315 B URL HTTP/2 www.oilterminal.ae/wp-content/themes/astra/assets/css/minified/compatibility/gravity-forms.min.css?ver=3.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (598), with no line terminators
Hash 2dd6866b1fa6db2df49dac42313fa922
bf39cf87bec93d9c4ce1fc8f1d248f4babcfdf94
d44f7a6032a43f3b27f3e83270a8b3b5ec0a842eeaf7eab461f757ac90caaa97
GET /wp-content/themes/astra/assets/css/minified/compatibility/gravity-forms.min.css?ver=3.0.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Feb 2021 18:18:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 315
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family
400 Bad Request 5.4 kB URL HTTP/2 fonts.googleapis.com/css?family
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11126)
Hash c6a7109d0a626926a76298291a7fdf96
5be128bdc5d403e811d6a6fcc00adb92276692ca
a4d5e3932c4b6fcac0e938b235f8100a41f9c8839b9131bea1b3fb56ff23761e
GET /css?family HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 26 Dec 2022 04:13:34 GMT
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.9.5
200 OK 11 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash e63d8dd07cad2301f9e97205d99481a5
c8227a2c635803d7bdd5db2b4ba36f630b3b092d
786effa7eabd419bed0048a69d366e1ea5bf00d1367963184fcd5001d55e6af2
GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.9.5 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 11043
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/intlTelInput-jquery.min.js?ver=1.2
200 OK 13 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/intlTelInput-jquery.min.js?ver=1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (27010)
Hash 9cc56dc29ff84c192976ee96e9c849b8
931357538334988681054bd748b229312102e884
1204a4e6ed186f69c27a2922940e56e1b248fa2b9571e707fafa07377c558459
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/intlTelInput-jquery.min.js?ver=1.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 12976
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/spf_main.js?ver=1.2
200 OK 1.0 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/spf_main.js?ver=1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b298709fa0ec61b686e4689d29c70e2a
f276b81bf66512cb70d1cb231f3bcad70b7e50ec
c736818cb866487ee145f18e856f81e10ecc203038419354ea5f1154fa996035
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/spf_main.js?ver=1.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1000
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.0.2
200 OK 3.6 kB URL HTTP/2 www.oilterminal.ae/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10594), with no line terminators
Hash 5c244ddd3d5b81f943cc06bb3d39eae0
937bc56733f05985e8b6bad6e6ccd11e106c59eb
7f4883c7ab2bb307c921ae27ce4821017e907b8361b421883f61495c40cf9965
GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.0.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Feb 2021 18:18:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3642
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/oilterminal-entries-management/public/js/oilterminal-entries-management-public.js?ver=1.0.0
200 OK 479 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/oilterminal-entries-management/public/js/oilterminal-entries-management-public.js?ver=1.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5850a4d6be478b5a5c29526a957840c4
1854bff2c967f028cf8c1f53b3c7878fb605e329
654a9a69300dd841ea2bc14d36c346377cee298b126463cc844fb26929260843
GET /wp-content/plugins/oilterminal-entries-management/public/js/oilterminal-entries-management-public.js?ver=1.0.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Nov 2020 05:50:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 479
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
200 OK 1.7 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4875)
Hash 6a452794a68bc140a53b30519b94edf6
68046f5611ba3cf5da1c46087609aff18f59fdc1
259990a9e6191a72a51ac9d038d0c52bb56d880a2b0d460b1fca3f3fee7961ed
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1712
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.7 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6475), with no line terminators
Hash 45bd1d6f7fc3a4069fc6fd400b90c961
903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2675
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.6.8
200 OK 908 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.6.8
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1836), with no line terminators
Hash 8902a263b8b5b763ebb7854037649bf1
58404f2f86269f877780a491e212040a21b55d41
e7cd8ecb9947e22b7da25879eb7e8d88b707c0e3451c394fba7488d6cc3ee965
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.6.8 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:53:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 908
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
200 OK 999 B URL HTTP/2 www.oilterminal.ae/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (2472)
Hash 05e2ccec781ae289719bb26320d5cc40
60f3adc6dccea4df940d0f1579b83b06e715d0ed
1242f50bffe2d7745a712e1702f3f26a58d955fc110abf58599730fb6380a91c
GET /wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 999
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 8.3 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18798)
Hash ac9c7baaab74ef2576932d5798161987
fa202113e12b09696788a7024984879bddd29143
c03d52f8f157e9209646e3e696e9845d7d2b3cf3e73c8204f371b7393e738026
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 8305
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/astra-addon/astra-addon-60291d5d021464-09986787.js?ver=3.0.1
200 OK 10 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/astra-addon/astra-addon-60291d5d021464-09986787.js?ver=3.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (33474), with no line terminators
Hash ba995bd43695897370ea54735dd2b0bf
7ce729e804f486f60ec8a11ac215656026989804
47123bb4db26074123efc7ba2e2e99736b05702405abc38942c5b281b36c94ea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/astra-addon/astra-addon-60291d5d021464-09986787.js?ver=3.0.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 10115
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-crop.min.js?ver=2.1.15
200 OK 6.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-crop.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17153), with no line terminators
Hash bb4efd4a7314295926f4498a97e64dc6
028233c41b3c7cb2bdcf62db5690fc780dd64d9d
e875b2ca0677bf30bc5df2fcf4f0529ebe21c30d9948e7a26c42f6665f5cf8a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-crop.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 6437
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/wp-util.min.js?ver=6.1.1
200 OK 758 B URL HTTP/2 www.oilterminal.ae/wp-includes/js/wp-util.min.js?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 60bc75e3b14030c62d9fd3a3d317d8a8
6d919bbd05a3984a8e5e67b693e6d5d41cc885f9
e22df84be1a3ffe3b54352a4a39e14adb3fac69f2ce755e4c7babbc243c5bb4b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 758
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.1.15
200 OK 1.5 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5278), with no line terminators
Hash a839461f95c33a76418ed0933cb379c5
408d7a0c7985881f1deef558b331821ebb5c47f8
3a84886e588065fa5439e6f9a9684b61023cdc6e863eb8c9654ebc8890c95020
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1470
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.5.0
200 OK 4.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.5.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4359
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-fileupload.min.js?ver=2.1.15
200 OK 3.7 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-fileupload.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9072), with no line terminators
Hash 57256ccadd616c89392f4e3f39cecdf5
ba662afe1f4952c3f64ce6c8f26c7f1636232f7d
ac049457b47703d0f8c593075ba2147696763f02215aff9487c325ce0a3c89b3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-fileupload.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3657
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
200 OK 308 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 3b6ace6afa17a2615db7e96ed5bccbbc
43382ed6741ca36e7479916d82c7e3f3f6a4af1f
84a12534a686c238982043c08f6c3fa2502b7a4c171dbaf0e464a3bc777f9263
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 308
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
200 OK 4.2 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 3b62593186f7f91a9470ab6968ec5feb
bd7728c79c04f4f2f7a787097b0868e06ceba5ad
2a9920dc63cbd8228103c7d6bf2a044f06963041253c385c3cebb147297aa782
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4233
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-jquery-form.min.js?ver=2.1.15
200 OK 6.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-jquery-form.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14799), with no line terminators
Hash de63c49d6bc6cc0fb980ab812377b863
84fabd613b4aa9bb9d7cf110fc86db0e59d97471
c05396264288aaff599effe94d6b9a964c06733c63b12be31d609c2311b7e7ff
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-jquery-form.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 6405
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-raty.min.js?ver=2.1.15
200 OK 3.5 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-raty.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9186), with no line terminators
Hash 42d855c7f6538131d293d09170ff15bf
0c134104b064ac97680e9380a27aa6023442ab6f
90138628a896db93330c633d48d204aad515cd9952cb19f42129d12493aded6e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-raty.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3503
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.time.js?ver=2.1.15
200 OK 10 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.time.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 764b7a0bc40547e2ac7ba6359407ea09
ae7ef0ff239a7f13f426da74f12187b102fb8576
ff9a6c1a9c618d9ec51ffa2de4ef4b1bcdb1ce1f4cb6bccc112d558a74655a16
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/pickadate/picker.time.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 10203
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 7.6 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 66c68f2158dcf7d97a02f3719a17aab0
fdb04fb4c632b9fb4275006a4e402cd0d4fa393a
e4b360f0e6ae1afc06f05f958e8696e5ae45257912bc2ab0b9334bd1382a51aa
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 7621
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.date.js?ver=2.1.15
200 OK 14 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.date.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 8edaee8714cf3fbb1e4329d192710489
5e25149d97bf25643508ce8ed12f189dd1870291
b59badc758ffd35a22aa627393bcc0a1f020f4873af6771c07d1668a4a93c5e9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/pickadate/picker.date.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 14318
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Gp_global.png
200 OK 10 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Gp_global.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Hash e5e4d1495521412ae785571de7f8dac7
137fdf0d44931164536c4184fe9d2d4f7b4f1dc2
468cf0df533e0bd0bac0227ce0b2364d8c64d6d2ee9c02473e5cfde6947c655f
GET /wp-content/uploads/2020/10/Gp_global.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:24 GMT
accept-ranges: bytes
content-length: 10403
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/enoc.png
200 OK 24 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/enoc.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Hash e179dfeb2423cbf0152cd204fdb25fd6
5f536f53e6ec65dde0b21d6743b7f3473afa9965
2530db9d21e2147167ad63641cf24d7ebe4e81fc865455b8055de42f4638e7bc
GET /wp-content/uploads/2020/10/enoc.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 09:10:05 GMT
accept-ranges: bytes
content-length: 24055
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-tipsy.min.js?ver=2.1.15
200 OK 1.7 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-tipsy.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4405), with no line terminators
Hash 368a19b79fb2a7291211280feb7e0f9f
3e621362d07605c81edf831e9f1bec33a93f249f
ce35771a48bf4d3e675e1add7a773b1c8c3016186c23b5d1ea561b906013b78e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-tipsy.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1733
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 9.2 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/masonry.min.js?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (23966)
Hash 2a730dafa34e6ff81513d31e486cdbdb
1fce17d256f67ae086d74092a03006997d9b0add
7a5fd36a453a3a7471fa93b8169579f9a98e2df7a262c44d28d3de41a0f7ae1c
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Mar 2022 11:41:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 9216
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
200 OK 724 B URL HTTP/2 www.oilterminal.ae/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1626)
Hash e1b8f48388e00a715d3fe1f64ea15476
3ea75fd181dd3630bd8765a2b67f23d6da39edbf
87f4466dda6ad8e1c9aa26ef27e28b3b74ac40327d8daf4a7cf994e5b7893718
GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Mar 2022 11:41:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 724
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Horizon_png.png
200 OK 16 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Horizon_png.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Hash c3e74926400534eb0d61e4524f9e6327
e14a0f6b74c6a85e8a7f60e265fda369f8b9fdcc
97090ea7416c787ec98cdfc1eb0fb8957a8578aba2adc3c8427f0ef47705153e
GET /wp-content/uploads/2020/10/Horizon_png.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 09:06:17 GMT
accept-ranges: bytes
content-length: 15796
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Emarat-1.png
200 OK 16 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Emarat-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Hash d3ffcf6bdf897ffeca526b772d047d12
31c239265b3d15d336f14b630435fb3c0224f575
c810e77e083f7c605ad340b22a06dadacc9660b2d71e4db68b0c873f729349cb
GET /wp-content/uploads/2020/10/Emarat-1.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:53:29 GMT
accept-ranges: bytes
content-length: 16475
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4887aa0a07d726c889d8dfbddc359c6
83658ae9db1abb14fb2b869bf451caa97ef58e4d
085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.oilterminal.ae
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:12 GMT
expires: Sat, 23 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 225623
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4887aa0a07d726c889d8dfbddc359c6
83658ae9db1abb14fb2b869bf451caa97ef58e4d
085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 09e8af46742d0b5be1adedadb11e66af
4813ca0140478abb24c6fa012b4184cb2f3253c9
31d3905131f21b4a8fd8a4764b8dd57b2e994153f511b65a15ce7ecc386040c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.oilterminal.ae
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:12 GMT
expires: Sat, 23 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 225623
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Gulf_energy_limited-1.png
200 OK 16 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Gulf_energy_limited-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Hash 49d47e6683b07ef0ffa632e4044b9fbd
e626d855a0a2fe1481c0c81b410f873daa1390aa
453524d15627a79ebed622cea696e2f0655907e024f69c4b35a85e50db06d9fc
GET /wp-content/uploads/2020/10/Gulf_energy_limited-1.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 09:03:17 GMT
accept-ranges: bytes
content-length: 16250
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4887aa0a07d726c889d8dfbddc359c6
83658ae9db1abb14fb2b869bf451caa97ef58e4d
085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NF5N8WF
200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NF5N8WF
IP
File type ASCII text, with very long lines (7216)
Hash f731f562418d67092de741214b9b1a93
7c782abc32da2e6c12d21760ee8a07ad356d5dd2
842bfaac40e9c1768e5664bb4dae04f229195a1105c6a8db0650c5df8ea73b93
GET /gtm.js?id=GTM-NF5N8WF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Dec 2022 04:13:35 GMT
expires: Mon, 26 Dec 2022 04:13:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 26 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45711
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 09e8af46742d0b5be1adedadb11e66af
4813ca0140478abb24c6fa012b4184cb2f3253c9
31d3905131f21b4a8fd8a4764b8dd57b2e994153f511b65a15ce7ecc386040c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.oilterminal.ae/wp-content/uploads/2020/07/cropped-hh-1.png
200 OK 50 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/07/cropped-hh-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1116 x 237, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c42a5e7eb041859ab9b7fd9e958361c
43e8f0c3b894c5a3bae198589eb2e64d003fa0da
af42d0b32cb7be542eef704be98fc507add86f477b7685436e78462190141663
GET /wp-content/uploads/2020/07/cropped-hh-1.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Jul 2020 20:41:38 GMT
accept-ranges: bytes
content-length: 50121
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.1.15
200 OK 2.9 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9801), with no line terminators
Hash c89611545e0f7dc5c1a1e0741bf553b6
7647249d4549426ef5193948fe4e82341709b72a
f0898779250f37c40426cb8e83905d035908e1705c83b68e5c7b0e1179fac789
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2911
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.1.15
200 OK 140 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash fe35280d3ae8e7d181a74e3a707ba08e
1d1ac9adae0b0a1d7a1467d6388ebc53bc2ef334
5bb723cf4c05607e03ce15570127a1e19c58e675756471b925dd9f6f41609b87
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 140
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.1.15
200 OK 1.0 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2771), with no line terminators
Hash 4e3ee38227f0c369846ae8297af2f594
1f564b1a2555ca02a715db368b150817975c1846
9f876790d599e084c82f8a4e0a3ccddafccc1e58a0ae684e445906282b6f3811
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1004
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6
200 OK 5.4 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 0c7bbaa5c8592b6e2b8b5ca9379c22ef
3387c3a7724dcd81d6da548c1e9660590efc3641
e1bbe89c3ed606b728dab15ed4895de76b8cde33e41a5d1222d86a44c573b9ce
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5418
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.1.15
200 OK 4.6 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14716), with no line terminators
Hash 92c725eedfeff6847271b3168ac2195a
51f4d9b07f8ca27e39bc19fe560e6bb01095df43
533132d8c90444cbd516a61bd39734d27fd67067af9e70a8bd66be8155358ee2
GET /wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4598
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.1.15
200 OK 969 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (2740), with no line terminators
Hash b099da372caf8898258d50f5447a3fc3
0a97d50fefb22203cb9477238357b090afb17bc7
6755e195727a87c65cb6c35729f40fba95fbc5b112ab34c62dd1706c3f9b30fb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 969
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
200 OK 736 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1801), with no line terminators
Hash ae098a17e8889ff188a7a1ca4545c729
250400844f4e830503e2e9b8642fb00bc337eb62
0f5aecfe5c23d3149b592488ac69726074ee450de920b0e7ecf3071c1acd0771
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 736
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1
200 OK 2.1 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4587)
Hash 9c7730b765a3a0e60eff70883dcd241b
7a1c755b8ba258760a1ceafb88e69d6dfb2fae77
857967c35c9ab1e0fd694e2afe30150d4eed39486fe80ab2c73ccf862c3d361f
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2112
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.10
200 OK 2.2 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.10
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6595), with no line terminators
Hash 2aa47e22e033b1a04cf09550d521033e
a0cf9de580a0eae9481906f97c1d6b38a0f8cf36
bda46e0dfe6c4c18bc8a9f9562a6e18e4261844d2d39ddcdb8b4c0160d267be7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.0.10 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2153
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.1.15
200 OK 3.8 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11725), with no line terminators
Hash 8ee252575ca3ca12c801a66b3d7477ab
86a57cdb18f1b23b9e9d2e3878614dd04526d9be
34a70d0c728ffe6285af33805161cd065cc5d048dd0b4bdc0296cc64f3cfd65d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3807
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 8.3 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 838560e989767f2ef5951b9eeee20352
6bf8419cb4d68d9beced9e4b79b22b347ae16a46
72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 8344
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1
200 OK 1.2 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2577)
Hash 159281ac01a46f042b38d0d44cf3eb7a
54677be6b1cf85899d2ab1a6fada531ca5613d29
0738d3f931e8df2b67f3be1ec216b103560266c56cc38fdafae055bcb807ffea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1151
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
200 OK 5.8 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10725)
Hash 854232f6b340787f97d378246ae0608a
e839b023ca153971dfda9648ad5e35871b98a452
b77864dee0808e2b4e368c761e5478dfb47489cf96d7f6c4c435b83078d464d7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4275
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 3747
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 2.1 kB URL HTTP/2 www.oilterminal.ae/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5477)
Hash f0bd7ad12acdee26cbb2701c1ba3610b
53c5d15129860868b60b74cb010b2c6050a64f69
e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Mar 2022 11:41:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2103
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 13548, version 331.-31392\012- data
Hash 4a74738e7728e93c4394b8604081da62
fb9648469530a05fa9aac80e47d4d6960472a242
ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
content-length: 13548
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: font/woff2
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 78 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392\012- data
Hash f075c50f89795e4cdb4d45b51f1a6800
f726c4275bb494a045fde059175f072de06c01df
71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
content-length: 78460
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: font/woff2
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392\012- data
Hash 8e1ed89b6ccb8ce41faf5cb672677105
9b592048b9062b00f0b2dd782d70a95b7dc69b83
6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
content-length: 80300
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: font/woff2
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
200 OK 84 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 84508, version 1.0\012- data
Hash 53820ed72e47259e4da471321b703876
8e195a9780c786c0a44b77798578908079bae4e0
02571d9d533a23c1b743c04f0248a0e5f40e86c1da19b229123f50773e4d03cd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
content-length: 84508
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: font/woff2
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Arzo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Arzo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash a5055980ec2c2c27662a932c2eabc770
8acbec779fba6c4a03da21dd90aa4a0c0cab77d7
2e730cd4f0a237ebe4d1cce888c5204cd02ae94224656f7a1f66983a0c36d9e9
GET /wp-content/uploads/2020/10/Arzo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:09 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/napco.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/napco.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash d63d678fc5fda61f95955595e67bf567
c066abcfde843ac885cc3030fb689dc4c77ba527
4848229bd443828efa52c13f59a1d09b9aa7e6acae369132b1567ee56fc83cc3
GET /wp-content/uploads/2020/10/napco.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:10 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/GTI_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/GTI_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash ce86e8e20e1b6b60bc78998dfd9703d8
98566148d8a47a06099ed29b2535bd2239dffb87
fa2ba9e766b915099916f31eedfd5d485064a7fd39a5685c3877b8f7a599358e
GET /wp-content/uploads/2020/10/GTI_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:29 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/FOT.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/FOT.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 119340adf742c081e0df8a9daf70491b
49cd63aedaeb13ff0387b6be1987935201ebc5dc
54cfbe579f8786efe56ccf262c05ad3e5a8178426976b651880fafe0a096eab0
GET /wp-content/uploads/2020/10/FOT.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:23 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/DANA_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/DANA_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 87a4ca75d7a69db2f420220a4759abb5
dba6d4014ae0d28f48a340edcf7416b015c5c503
f532421884c119af2b4d33359b0b398e85585e466394e3d910fee78e0e48dfa2
GET /wp-content/uploads/2020/10/DANA_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:16 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/total_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/total_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash c7c1870c5c77a4931166248153b566e5
3e59d5b1995ee78297fc35d975b9d9f42a46cdc5
690416ae55fa058415da4a254cd48ce34759ae26f881cd7511976d555279bb94
GET /wp-content/uploads/2020/10/total_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:52 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/brooge_energy.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/brooge_energy.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 779a0fa2288a989715e2d4b639c5d335
bd278e5edc0e8d1a98333c4e31f790e5728c60d0
1c055e2d6f64a90bb911e1cfdea18973c3c3dad2bfd87984cf7d21dbac5b8a11
GET /wp-content/uploads/2020/10/brooge_energy.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:12 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/orient_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/orient_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 9d33acb212138eed8063a51da17f86c1
bb4436a795f5384ac5e8e30115008e51c38466c5
aa30010ad4c38988fee5bdd26ba3bae51e1738d07657d8a18327787a4f2d3105
GET /wp-content/uploads/2020/10/orient_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:17 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Snoc_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Snoc_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash cf78b87cf0146b1cae053f3b9f324c0e
006e3717aeb055298b85eeecad1d45aa26cc9899
b5684335ad38ad2f529ed2e6cdbe5b42840eb311de89edc8b1b01f80c8596c6f
GET /wp-content/uploads/2020/10/Snoc_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:41 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/petro_chem.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/petro_chem.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 8606995fa46dfa642f38586c3c513b4b
1898e7df3ef8445bb950422cca553af2cd5f864c
dc23abb711cfe74b6837611bdec9499055395b8cc9c3287736b6408663ebda17
GET /wp-content/uploads/2020/10/petro_chem.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:21 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Dow.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Dow.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash b8c7f29416caadb08150c32a0076dc3f
2e9655cfea80c6d9b1a4e0e7fddf2fd0cd8851aa
5659b90dc2158b97f56664e68219d1c73d8642cbf73aa6be260326dbd8cb35c4
GET /wp-content/uploads/2020/10/Dow.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:17 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/unilube.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/unilube.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash a5313774a27b756d91fff88a62645d8a
629092ec223c4a0612372857b3bbe92ec2b5382e
1bb37e9e011699e126c95e458d7c71d0b524e17665d3ccf9fbc6cbfc68bc9fd4
GET /wp-content/uploads/2020/10/unilube.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:54 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/iptf.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/iptf.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash d8fb77541a2d897235e2bc03d20ff68e
f0a35992f26bf7ce12210f825ab29343c4af37a1
ed39967a2ec9b35fc1dd897ef5df60933ab1083c478ab5a53a280cbc438c3668
GET /wp-content/uploads/2020/10/iptf.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:33 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Sharafco_png.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Sharafco_png.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 6c83e89752067b9ef6faaad39695a601
2ab49ba8e560ce0a8c92a1650ff654e84b4807ea
0e4f48360660a03089652db1bcbac423f0319fe2766a082f8416720e20f3e8c0
GET /wp-content/uploads/2020/10/Sharafco_png.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:30 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Coral_energy.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Coral_energy.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 9ea7fe00b2b39569db9913b9c28f509d
99fb49309dab21a666365bf5458d5e402971ae44
ee244bd8cf71720d24b066d07efbc84bb06f34ff2964316643e90ec9880c6eb9
GET /wp-content/uploads/2020/10/Coral_energy.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:14 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/adnoc_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/adnoc_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 2c51f09ec675772858462a9ad2c69e73
2e1f54b0db08cb0890a37ebc3574a4994313e1c7
1e3b5747dbf903c1e1e723cb5a98a373eca14674823556ccc0e799a31caddf6f
GET /wp-content/uploads/2020/10/adnoc_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:03 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/vopak.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/vopak.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 332fea29350e6dd880b10305e128ce5b
a8e2f8bc05f70c93a5883da5a6747c9d83507c67
93a64f8dfd26209b33e153165a1a8501331f8bdb097898ffbab1685bda076c24
GET /wp-content/uploads/2020/10/vopak.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:59 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/VTTI-1.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/VTTI-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 607952a7c0c5d0436ce8c60035f82bad
bce3c1b02c6ed2b4537914a9fbbd19442831a94c
ff96b9e03cf71d25582c6f1acead25caa635677433ea2450380f147dcd83cd85
GET /wp-content/uploads/2020/10/VTTI-1.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:01 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/puma_png.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/puma_png.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash dbd5d799f149d2e6aa02c2950c6b3a5f
d0840e7b02eda8706976f04cdda3dc375d873195
7c03a6e4354ee0b8a5cb5fcf2b4ea8e067c7bb96d92c857b40a6e7afa0144593
GET /wp-content/uploads/2020/10/puma_png.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:26 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Gps_checm_oil.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Gps_checm_oil.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 8e0c015d2023da9810fbaa6b42432a0b
6e7ccf6f69af4fbef4c6504bf0788d639c351a1b
081be00df5f8329c1daf5680c7ec7d65af3d3e7241ed8f98608dac6e7bc395bf
GET /wp-content/uploads/2020/10/Gps_checm_oil.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:28:26 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Sharlu.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Sharlu.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 07c231789c63bdb7d996ebb288caa607
c57aa43642915de4f618e56688aec28c3218a647
ac7a6b268a709539cbde33feb34eeb3119085e474a5b83996d8a4109ad26459f
GET /wp-content/uploads/2020/10/Sharlu.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:32 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Star_energy.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Star_energy.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 5c4cec5da9b1ef4b04eeb20b3a28bf8f
bfd2d9275a44a405bc12fe611b65d86f32c8a0ff
a90c77c7dc3a3eccfb385a33afea286f6bb08f510665a3e8c0599e856e7f63c1
GET /wp-content/uploads/2020/10/Star_energy.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:43 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Siddco_png.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Siddco_png.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash c5569ff89e5832a3f8acafc02f69ffe7
ff623346335ce98e06b69ca4ea57b361452fe433
e9341627781d01af855cfe403ec4e54f388a6720c38398a4288043af532aab40
GET /wp-content/uploads/2020/10/Siddco_png.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:38 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/
200 OK 259 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
Size 259 kB (259154 bytes)
Hash 40daa693306b7461d3d55a8f777436a9
70835a245dbad7ce79bacf14e02dba7fc6d14980
059b570cb0c41bff5cefc354aecb1e1f7021dc60304009aa9efb6cf1e437c1a6
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Dec 2022 04:13:33 GMT
server: Apache
content-type: text/html; charset=UTF-8
link: <https://www.oilterminal.ae/wp-json/>; rel="https://api.w.org/", <https://www.oilterminal.ae/wp-json/wp/v2/pages/16>; rel="alternate"; type="application/json", <https://www.oilterminal.ae/>; rel=shortlink
content-encoding: gzip
vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: true
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Petrafos.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Petrafos.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash ae59deb5109a3d4b19c6bacc8ba8875e
440b9636e88a762c85c774942aaf6a8f161d46d9
974f0caf22b31216f26e637605dc42d7a238baaa15102fe64397d2f0b8a31a11
GET /wp-content/uploads/2020/10/Petrafos.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:19 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/petro_cost.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/petro_cost.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 03ac84ab92d4fe32603501e85f650094
605915156d70e523452d56ab06438db114276070
edb07349e76ee3b914ebc4779a62c5893b0de9bab99513e960fea628dc42c014
GET /wp-content/uploads/2020/10/petro_cost.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:24 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/UOSC.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/UOSC.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash ea89db00a5e31a817ea290d2fd876aab
b5e93747fc6fe77c11e7bce90a359d590e3f635d
8f23ef07775eebe69e74b19f6e7538973907fa4c32d84ef2089034c56780700b
GET /wp-content/uploads/2020/10/UOSC.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:57 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Shell_logo.png
200 OK 222 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Shell_logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 283 x 193, 8-bit/color RGBA, non-interlaced\012- data
Size 222 kB (221483 bytes)
Hash 70b8f079a26ec7203e0bd7b6b42c04fa
a19af57afeea356eb54c519baa338a30ab798482
4cf4155a3cef8e64e6a6e7cd3531506e2b331459da5782d378620ac351901346
GET /wp-content/uploads/2020/10/Shell_logo.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Oct 2020 08:27:34 GMT
accept-ranges: bytes
content-length: 221483
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/07/Oil-Tank-1024x586.jpeg
200 OK 53 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/07/Oil-Tank-1024x586.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x586, components 3\012- data
Hash 7ca04ce7bac0a9056d4cfd04852b1326
675c6768e32cdc46b75ea357852df39d3c725c10
1ffd3203d6b9b978837b582ed1e8f764ac5950ce0499a5219ebaa9605754bb0d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/07/Oil-Tank-1024x586.jpeg HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
content-type: image/jpeg
content-length: 53103
last-modified: Sun, 01 Nov 2020 12:45:48 GMT
accept-ranges: bytes
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: true
x-proxy-cache: MISS
X-Firefox-Spdy: h2
oilterminal.ae/wp-content/uploads/2020/10/abstract-mock-up-wallpaper-3291293.jpg
200 OK 132 kB URL HTTP/2 oilterminal.ae/wp-content/uploads/2020/10/abstract-mock-up-wallpaper-3291293.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1280x720, components 3\012- data
Size 132 kB (131517 bytes)
Hash 34bffd1bad612464379feb4829571c92
898008a3b555d42535ce99f8fb12487df74b7de7
9f83010075691f72bf8ab530af942541af88a0bc54e6acbea9c26d06b6497499
GET /wp-content/uploads/2020/10/abstract-mock-up-wallpaper-3291293.jpg HTTP/1.1
Host: oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Oct 2020 10:55:41 GMT
accept-ranges: bytes
content-length: 131517
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/uploads/2020/10/Tanks-Leasing.jpg
200 OK 343 kB URL HTTP/2 www.oilterminal.ae/wp-content/uploads/2020/10/Tanks-Leasing.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 343 kB (343128 bytes)
Hash 1ca266138b58f06209d7cb9da5830837
6aa62bee4ae63db822373549d60111e49cc56744
f78fadcef75a56d405a5102fa5446ca4b9bf8cdeb7c0e1448e24578d98b78e01
GET /wp-content/uploads/2020/10/Tanks-Leasing.jpg HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 22 Oct 2020 06:01:52 GMT
accept-ranges: bytes
content-length: 343128
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/text-editor.aed713532404e88b2deb.bundle.min.js
200 OK 1.8 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/text-editor.aed713532404e88b2deb.bundle.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3862)
Hash c4c822aca2dbaf8b68c9333d1bcdb5bf
57b56494eabee1f0d53bb9f0df928d5d8832bb90
bd8a50b3d585e0c0ebeec585de3171eb03e99e4150e81f265808dc8563f59f32
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/text-editor.aed713532404e88b2deb.bundle.min.js HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1812
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/tabs.ad5db6c2e7715f4a853c.bundle.min.js
200 OK 2.6 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/tabs.ad5db6c2e7715f4a853c.bundle.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6430)
Hash 37d40700fd114c815668ac0802b34b5e
bf99407bb596e6a1aebd3d2419e1c8915b4a1e75
93c3268a2e7048574aa8314ca1e73f4bc6d651a9d1051386d088355bc59d8183
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/tabs.ad5db6c2e7715f4a853c.bundle.min.js HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 2628
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/counter.99f87b466b69ef909f39.bundle.min.js
200 OK 1.1 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/counter.99f87b466b69ef909f39.bundle.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2179)
Hash 18982faf49bff621cb229aaeb0419e06
d78be92f57b4a50b74090b0a1c22242cea192bfe
972146ebe0737935fab8389e8ca02fc07a5bd199a01d1764fc0836f5f4520100
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/counter.99f87b466b69ef909f39.bundle.min.js HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1101
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/image-carousel.b8262c12a4b2954dac64.bundle.min.js
200 OK 7.6 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/image-carousel.b8262c12a4b2954dac64.bundle.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18378)
Hash 907f7d9ae2db79a9377b24348ce80f44
2b51a0bf53cfa1c243112eff378fb04b18d61442
0dbc83fa4fdd0396f075c210b7e0897d9043fb556ff1332d6e19b103cc3aa228
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/image-carousel.b8262c12a4b2954dac64.bundle.min.js HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 7629
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/k40PCQlo8uw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/k40PCQlo8uw
IP
Hash 14b4d73bf7dec723ef4fa36484709aac
a8771a25d09eabb25be9cc0cb0a2ace68bfb12d5
8afed429ab756dcb08f3c23a8a1e7558627c15297280516306ad44e64c45d67d
POST /s/gts1d4/k40PCQlo8uw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:36 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 761041525aee0daf7ef158f620a4ed8f
a5ad2672e31c5060beef9261ff8e0bff967d04f8
470e6ae3c16ee45d69d207ff38cc4912507f80c860515a4ba5026f086ed08a23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-YM8MGME17P>m=2oebu0&_p=1890692969&_gaz=1&cid=1656826635.1672028013&ul=en-us&sr=1280x1024&_s=1&sid=1672028012&sct=1&seg=0&dl=https%3A%2F%2Fwww.oilterminal.ae%2F&dt=Oil%20Terminal%20%E2%80%93%20Oil%20Terminals&en=page_view&_fv=2&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-YM8MGME17P>m=2oebu0&_p=1890692969&_gaz=1&cid=1656826635.1672028013&ul=en-us&sr=1280x1024&_s=1&sid=1672028012&sct=1&seg=0&dl=https%3A%2F%2Fwww.oilterminal.ae%2F&dt=Oil%20Terminal%20%E2%80%93%20Oil%20Terminals&en=page_view&_fv=2&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YM8MGME17P>m=2oebu0&_p=1890692969&_gaz=1&cid=1656826635.1672028013&ul=en-us&sr=1280x1024&_s=1&sid=1672028012&sct=1&seg=0&dl=https%3A%2F%2Fwww.oilterminal.ae%2F&dt=Oil%20Terminal%20%E2%80%93%20Oil%20Terminals&en=page_view&_fv=2&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oilterminal.ae
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.oilterminal.ae
date: Mon, 26 Dec 2022 04:13:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oilterminal.ae
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.oilterminal.ae
date: Mon, 26 Dec 2022 04:13:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 761041525aee0daf7ef158f620a4ed8f
a5ad2672e31c5060beef9261ff8e0bff967d04f8
470e6ae3c16ee45d69d207ff38cc4912507f80c860515a4ba5026f086ed08a23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/img/flags.png
200 OK 71 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/img/flags.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/img/flags.png HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/css/intlTelInput.min.css?ver=1.2
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
content-length: 70857
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/simplebar.min.js?ver=2.1.15
200 OK 826 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/simplebar.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash e157724522cce9fd1416d628311babe0
7f9d7a1d8d9a8899f20e2d0ec83331263e1cb25c
94f29d8ca0d3fd1fcff644e4e468ff83d01722c88a6784466b153efe9d051a1d
GET /wp-content/plugins/ultimate-member/assets/js/simplebar.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 16857
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1
200 OK 32 kB URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 9c870c004eacdbf4241250d625ce5215
f4cf3ba5b8039ca8bc024ac3dde464eff9acfc82
4f25553a77b5d6e00b9c1546c3a6004362391694835dfbfbb16cf3b0f3a37256
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1&z=143096616
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1&z=143096616
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YM8MGME17P&cid=1656826635.1672028013>m=2oebu0&aip=1&z=143096616 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Dec 2022 04:13:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e866711a88426b3ee9acbf356b70e647
8b0e5bba4d2925915338b5b2c9e45e76036bea8c
346eae7d44d2d2047fb2761dceacecdfcbdc4da17aa0222afb9680fe0d993681
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 04:13:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b46e077944b0d53e361327e6d690f2ec
c9f17cad706817aa66832633d1307a91c8c7d61e
b00a16c34c95675a08bafb198f7cc4b374e88a9041a6bb8593a61cb08ef3c306
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10961
x-amzn-requestid: 04d69a4a-2357-4651-a490-4a054bd3fd4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMunGOQoAMFbKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-53efc5ef1d7545a90e940d0d;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EOf46ZIBIMKzJvfpWMB7BdYMA6dXxRYhinIN-lD4cOvkiPfsS-e3qA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:01:21 GMT
etag: "c9f17cad706817aa66832633d1307a91c8c7d61e"
content-type: image/jpeg
age: 22339
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.oilterminal.ae/favicon.ico
200 OK 0 B URL HTTP/2 www.oilterminal.ae/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /favicon.ico HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
content-type: text/html; charset=UTF-8
link: <https://www.oilterminal.ae/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: false
X-Firefox-Spdy: h2
oilterminal.ae/
301 Moved Permanently 0 B IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Mon, 26 Dec 2022 04:13:32 GMT
server: Apache
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
content-encoding: gzip
vary: Accept-Encoding
location: https://www.oilterminal.ae/
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: true
x-proxy-cache: MISS
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.0.2
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.0.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Feb 2021 18:18:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.6.8
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.6.8
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.6.8 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:53:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/gfstylespro/styles/gfstylespro.min.css?ver=2.6
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/gfstylespro/styles/gfstylespro.min.css?ver=2.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gfstylespro/styles/gfstylespro.min.css?ver=2.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Sep 2020 10:05:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1
Cookie: _ga_YM8MGME17P=GS1.1.1672028012.1.0.1672028012.60.0.0; _ga=GA1.1.1656826635.1672028013; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:36 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.js?ver=2.1.15
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/pickadate/picker.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/ultimate-member/assets/js/pickadate/picker.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 12467
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:53:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.10
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.10
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.0.10 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:54:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 07:52:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/utils.js?ver=1.2
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/utils.js?ver=1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/smart-phone-field-for-gravity-forms/frontend/js/utils.js?ver=1.2 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 07:48:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/select2/select2.full.min.js?ver=2.1.15
200 OK 0 B URL HTTP/2 www.oilterminal.ae/wp-content/plugins/ultimate-member/assets/js/select2/select2.full.min.js?ver=2.1.15
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-member/assets/js/select2/select2.full.min.js?ver=2.1.15 HTTP/1.1
Host: www.oilterminal.ae
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.oilterminal.ae/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Feb 2021 12:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 26 Dec 2022 04:13:34 GMT
server: Apache
X-Firefox-Spdy: h2
162.241.226.25
23.33.119.27
93.184.220.29
0.0.0.0