r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17965
Expires: Fri, 20 Jan 2023 02:53:37 GMT
Date: Thu, 19 Jan 2023 21:54:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b36ef73c20dffb6bc10194bbd2d0dcfa
a67a4023dc8b4944debaeb92f3ba0f1402c079a6
05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7121
Expires: Thu, 19 Jan 2023 23:52:54 GMT
Date: Thu, 19 Jan 2023 21:54:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 21:49:31 GMT
content-type: application/json
age: 282
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2416
Expires: Thu, 19 Jan 2023 22:34:29 GMT
Date: Thu, 19 Jan 2023 21:54:13 GMT
Connection: keep-alive
almakaaseb.com/
192.185.94.102301 Moved Permanently 0 B IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 19 Jan 2023 21:54:12 GMT
Server: Apache
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://www.almakaaseb.com/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HfSch4MDkn3nDouWEolD39g0RceXbgeKf6C42qJlDfzxwI6Q/aaz3ZA2a3+mh+g+3JIH7yrHK4BAU1mTPP2wkQ==
x-amz-request-id: E62CA91QXEFHAX5S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 21:46:04 GMT
age: 489
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 21:54:13 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 21:48:57 GMT
age: 316
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash dce4a8be753d4a93db03ffca50421c43
068040a8f69777484e545c0053ad54f273710797
7e6dddef8a4a5502c9715f8c20dcb75e132ecc875f13459a967c9e235e9ce3e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 572
Cache-Control: max-age=127324
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:13 GMT
Etag: "63c90825-1d7"
Expires: Sat, 21 Jan 2023 09:16:17 GMT
Last-Modified: Thu, 19 Jan 2023 09:06:45 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1386944f9d2457595ef4fb036dc57893
3f4308074a635b67141aff3cce6dbcd59b634abb
71e9e34c5e5b486da3fd9d43c87584336a6e777a3389928d2a25182f8f9e5e24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71E9E34C5E5B486DA3FD9D43C87584336A6E777A3389928D2A25182F8F9E5E24"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 20 Jan 2023 03:54:13 GMT
Date: Thu, 19 Jan 2023 21:54:13 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.156.90101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.156.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YM7ZtHTG0bieHGeTKLXIKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Tkb6YMSUjRzTbCGycB20ImqOa5M=
www.almakaaseb.com/wp-content/uploads/2020/02/logo.png
192.185.94.102200 OK 8.3 kB URL HTTP/2 www.almakaaseb.com/wp-content/uploads/2020/02/logo.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 245 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash c140f1a8589fce694c512132946e2c98
49950df93a06d3517bab3ca6ac4caad38d045add
0b96e101e9ea1919d81a41ff89e7d95f8ae2f0339d12597f858863681aa2374d
GET /wp-content/uploads/2020/02/logo.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jun 2020 09:03:35 GMT
accept-ranges: bytes
content-length: 8339
content-type: image/png
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
192.185.94.102200 OK 4.6 kB URL HTTP/2 www.almakaaseb.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/about.jpg
192.185.94.102200 OK 178 kB URL HTTP/2 www.almakaaseb.com/wp-content/uploads/2020/02/about.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, baseline, precision 8, 495x351, components 3\012- data
Size 178 kB (177703 bytes)
Hash 41e6346cdc8bb4d98cb0ce1a2d36414d
8da432800411f53bb0f0ecca0e54ff272eb487d9
5a3d527996408da3f4d4ef639957bc72505e6da606a165d8eb55b509cad0b302
GET /wp-content/uploads/2020/02/about.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jun 2020 09:07:37 GMT
accept-ranges: bytes
content-length: 177703
content-type: image/jpeg
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.4.1
192.185.94.102200 OK 498 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1479), with no line terminators
Hash 52e1730e057b620926c87d350af6e2cd
89e8e96097c73c8d8c19b46522523d1c46fbe3f1
1809ca8fe9b4df58065d7f82e886fe43d0fe304a642eb69d14f5390e4464a0ec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=5.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:58:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 498
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
192.185.94.102200 OK 777 B URL HTTP/2 www.almakaaseb.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 09:44:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 777
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1
192.185.94.102200 OK 1.7 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 84ecc03a89badfc48d51b0650dec7c35
ff3e35b3202d82d3355fd236cb0b1c52114a1a0b
aa4ffe7f5e44be1a39ef28496e9410c245440d1d76adc86739b9a7267ef6626a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1653
content-type: text/css
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
192.185.94.102200 OK 2.6 kB URL HTTP/2 www.almakaaseb.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6406), with no line terminators
Hash 340db4973d1ee14c5348599f661a3220
d4cf31e2af7774c276d7a883733a8392e232df49
85d0de0d6dbe1f487407829c52413d7e81c7c9ed28bc3ae9079c19303e91f678
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2635
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
192.185.94.102200 OK 2.9 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 0d312dec91842ebafafa27b9a973503c
1049bf649eda3af917ef226815eb339983229641
5b3e7756636f5b0a7637384a4837453352efee9b9e67ec599a7fee3179886f7e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2934
content-type: text/css
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
192.185.94.102200 OK 5.2 kB URL HTTP/2 www.almakaaseb.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15224)
Hash 00af0ddf324f69fcb25f0d2e5d08910a
df0379ab0e1b2902957c8aba77f89d88e1239b59
f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5243
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0
192.185.94.102200 OK 5.2 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (55728), with CRLF, CR line terminators
Hash 581f1f675933d0b84a752fe7f916bd07
e75e99cb3dfc9d9a513689019acf39c54754ad03
54a4c24868a75f5a422c68baff6139e1c2e7b02ff2cc6442f092aa57e69ac8e3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5217
content-type: text/css
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
192.185.94.102200 OK 15 kB URL HTTP/2 www.almakaaseb.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (33376)
Hash 6ebc7a4d773cb1f29a93f605933fba76
b113ca39afc5fd44cbc06dca58945bb5e9fb771e
7a12133f8cb48c1b5b4631ee9e9a0eebe36bbf2bbe1eb792b0f9fc630c18bd76
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14560
content-type: text/css
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
192.185.94.102200 OK 6.9 kB URL HTTP/2 www.almakaaseb.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (16323)
Hash 122fe79a1d53d10946cded540d2e219f
6271fdf889afe8a13d7c69efea9b40cbd0d81939
94cb1b0ca86f7f0bb7bcc81b42a06b6199bd37ff77ca88dccf3acc92683f3e24
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6935
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
192.185.94.102409 Conflict 83 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-button.js?ver=5.8.6
192.185.94.102200 OK 174 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-button.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash 1484db10cddde999b798bd7c603eff96
26a39f2ff3b0e16aef731ef3b17f761959678e19
bf3d923f5f52fb47ebd84f4eac24b5800a2bc7a7e5f7403757fc514fe656e54a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-button.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 174
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1
192.185.94.102200 OK 16 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31997)
Hash 8a2ba9702fb3cca3c84924959fff383d
ec7e32b952d84e211870dd0e9f1520582e3b4270
ebcdf76e9e513c320785d95cbfa122a4aaa6143fc8ea69a2ea0dedf0277828b8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15883
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1
192.185.94.102200 OK 337 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (695), with no line terminators
Hash 0921c87a11483e7ea5c29d7adeb6575e
7f4edddc51e12385b8ee8c859abbadaae5f2f899
dee531dca244cc30d1bd9e80253cf7362928cc9dfbbf58b3ea020edfdbc6fcbd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 337
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1
192.185.94.102200 OK 1.6 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3505), with no line terminators
Hash 972b7fa1966c76563d3664f711567918
c6df87bb4c4748c92ef122a9873c9c503c970eec
d724dc8b3fc2df28fd7c71b61dc563b28bb1124e13485ed276c6a8013fddf7e3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1621
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-legacy.js?ver=5.8.6
192.185.94.102200 OK 460 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-legacy.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1561), with no line terminators
Hash ffaa3cf24e0b62afa04e5691f49f5f6e
568617e270077e3f03b66d025747eb736820a0bd
91a3dc40904b79b406de00c7bd062bbcc03502b332e535235cf45895c84a6eb6
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-legacy.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 460
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=5.8.6
192.185.94.102200 OK 634 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1484), with no line terminators
Hash d479e82b59185806bf1b57f34edcae5d
0955bb1c5671db0086d76004757db3fa3114c202
8bad9e6e1f08cf61932e20017dfc0f54a16e2ff74d1e86a8d1a29234ae1ff0d4
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 634
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/Pharmaceuticals.jpg
192.185.94.102200 OK 65 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/Pharmaceuticals.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=565, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=847], progressive, precision 8, 337x302, components 3\012- data
Hash 07038eab107d5c2dbf23cc50c4fb211d
29c642b8581e73238086606c20f74ddec0134833
e738d7767e040445316c093962f407480cc60e8d6239d7a6e198fa81f28f7764
GET /wp-content/uploads/2020/02/Pharmaceuticals.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:44:06 GMT
Accept-Ranges: bytes
Content-Length: 64742
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.4.1
192.185.94.102200 OK 1.8 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4534), with no line terminators
Hash d45c1a57085871cb37483b9ee9ba1279
3d900925ae5127f8f7079b20788ea878b2eaec80
c84812c347cab7f618540ccc76548240891a1eba25d26afa248e5918b2c94922
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion.js?ver=3.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1794
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/Building-Materials-2.jpg
192.185.94.102200 OK 101 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/Building-Materials-2.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=438, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=680], progressive, precision 8, 337x302, components 3\012- data
Size 101 kB (101019 bytes)
Hash eed5363974e1038538e7f2e50935c082
692f9efe6b4cfb9fdb7ec8958a887cc8eb27fd23
e97bc49438e1fdd26af39c56cf3c0c047b983e6c4f2d0ab3240334fa7a1c8e80
GET /wp-content/uploads/2020/02/Building-Materials-2.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:54:12 GMT
Accept-Ranges: bytes
Content-Length: 101019
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/machines-and-industries.jpg
192.185.94.102200 OK 101 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/machines-and-industries.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 337x302, components 3\012- data
Size 101 kB (100983 bytes)
Hash 3c4b0465da37bc45ae9f4f8693343728
784b9b565129548da6c9567bdb710d09be81e916
cc7406d1d92841aa349793028facf58a4fee1689297e0083057a6fa1153787e1
GET /wp-content/uploads/2020/02/machines-and-industries.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:51:46 GMT
Accept-Ranges: bytes
Content-Length: 100983
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/broadcast-equipments.jpg
192.185.94.102200 OK 123 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/broadcast-equipments.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, baseline, precision 8, 340x303, components 3\012- data
Size 123 kB (122574 bytes)
Hash 60384e0b9363f05c502f8c52789c1bef
c774e3c1716c4b0a098d41450b9cbba15e52b5a2
c24eeba799fc9db0724d16f376036b2d91384fcbe0c9c59cf57b723aeb1b6931
GET /wp-content/uploads/2020/02/broadcast-equipments.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:50:58 GMT
Accept-Ranges: bytes
Content-Length: 122574
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
192.185.94.102200 OK 1.0 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3377), with no line terminators
Hash f83a3a790a1a12d3a48c8adcfd6866b2
ed06cf63b310c630673e445b4dcd825c3bd64294
dfc0a1df7f0bc36ec65bbf760eace33a1fdd46723cf040428f592a8966d467c1
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1018
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
192.185.94.102200 OK 607 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1371), with no line terminators
Hash 41fbb125d8fd6ac775a4cbd609b4e5c4
3b29135349a2c5f23d921140d82f6ac8b2b926ba
3d862635912fb2ee1a41fd30f1352ad1c574a90f28e944b6ebf952ad0abdaa41
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 607
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=5.8.6
192.185.94.102200 OK 1.9 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6308), with no line terminators
Hash 3e2d867c2f4635486a54321e62f45314
a2a66522b7b0a06aaec608060468f21664f9b079
08de8a3285e2118060cb63cc2923e8dfc49c399876cad5c8d2198f46367e42b5
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1888
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0
192.185.94.102200 OK 2.5 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5911), with no line terminators
Hash bafe2a794073d1c5183360031f66eb27
992edec842cc91a6320de2b742c20ced9ae6dbd7
cb3abd034a3d7058374b4f41d2147d6de1dce5440fb8a4877f43e60cd8de3311
GET /wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2467
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
192.185.94.102200 OK 363 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (945), with no line terminators
Hash 31608b942a5fd102bd7061606beea21c
96d21bcd71d24e308fdab545337b51b0602d7b1b
94a33800d6c16d440ac846bdcd2620e5e794f4c1849e825d9b262d1c12121ea5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 363
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6
192.185.94.102200 OK 373 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (741), with no line terminators
Hash 0287f860a8c842bd15caea306aeae882
78fd117d49d7ee7aa8f57809902a190b16fe6040
b59b5dbbb13c25fbd8177298e3960a218c5034c076d4f840958540947896ae22
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 373
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.4.1
192.185.94.102200 OK 1.1 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3069), with no line terminators
Hash 415191efd31ad4023fe09955645c26ae
578d082a942dc6064ff7c2a68eb0a1207b68ed24
9ce637c5b722edac6af37caf439edbb9c3a3113f7c7c6a454b5cf5c35e898e94
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-live-search.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1119
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.4.1
192.185.94.102200 OK 218 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (413), with no line terminators
Hash 23f2f1c5d7ea17a286f0786a6e140c57
07747eb896e632ae0be9434bd6f72f23bfd5deba
37ec369020564a393ed54f305a9405de87340872e44669cc0a5d4f93b579715f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-general-footer.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 218
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2
192.185.94.102200 OK 8.4 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (22474), with no line terminators
Hash 4f10227347bfc66057ea25ff095607d6
3cb4fd24018b535ad82d47ee80941a511a8cbf32
47d386fd3a8380898025147078009fd340b6d19fdb2c0e2c374a11f4522ce6ae
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.7.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8374
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.4.1
192.185.94.102200 OK 766 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1850), with no line terminators
Hash 5747d84b857930b35fa0d60a3149cef5
d73994ca0743e49ce21e040515d941d5297c0fdc
58df3954e4a0c24859ddf5fd3960be6272cab43e666907ef9114b9623f1b5dad
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-quantity.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 766
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.4.1
192.185.94.102200 OK 467 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1017), with no line terminators
Hash 5603f48ce69bb8bdca37b8a000f9ac51
09572d998a2e8e2e3a6c42c15abc2774dab64bea
3542be9bfe76a2aa9721db8495a113d567198f0959699c4da30dc8be804c89ee
GET /wp-content/themes/Avada/assets/min/js/general/avada-to-top.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 467
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
192.185.94.102200 OK 2.5 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7302), with no line terminators
Hash 1a0420d257b0d91678e32f831745de29
cc575d3f4bd9252c591e36055c69948d2b9ea419
140884e4620fe388ec4f701859c893ecc38f0f7d82da214dd09b5a5b9d609ed0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2527
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.4.1
192.185.94.102200 OK 11 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (39463), with no line terminators
Hash 47d76050b02810f420d5dcb5c089f6ed
f96c4e632e6df4870fb1efc24a684ef8f453a5b0
3127d31a13b16551190af30ce5e144d609a8603cadbf7e0e4dcbc3a59dce7ea7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10900
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7
192.185.94.102200 OK 873 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2176), with no line terminators
Hash 9276bd6681ea3877bcfe75a91176be52
60eb7404920631cdef60fc09d96551d888004848
654d24fcc7d5cfda65beebafcb58a0aca1221e1ff16ce73542ff4686f8583575
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 873
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
192.185.94.102200 OK 1.3 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3575), with no line terminators
Hash cad228573c17dcca5a2142bdce10de44
9640857a4764a8bae562cdcf8abc44d699446d70
2561c074abb6da7b781da9048db6a4e7b9a9d2fbec956c9887c791fd0d808493
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1314
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.4.1
192.185.94.102200 OK 259 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (503), with no line terminators
Hash 1e46ce5880df5dbf12b6a8f7f7d75e81
bdb3cc8f74ae0e319c3691c7ff4fa846a873498e
c87434343054c77a10df2527ae4041e503db763e1a6f7a901e1195917f27dc09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-tabs-widget.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 259
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.8.6
192.185.94.102200 OK 195 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.8.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash 035163682275e8f6a212787443a5bec6
030d18ea4df0e92fc24075a087a5d9348ac9ec05
a8c8562166bc6c2f9865bcd3ce89dd0e9d5e49cb6583bcb7d4579e173a882f60
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-alert.js?ver=5.8.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 195
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.4.1
192.185.94.102200 OK 343 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (886), with no line terminators
Hash 80ada6e5a72910c7934660b7b2abdd8e
bf9d02b2475365b25199119600c7887451b88cac
9bf5381e6f406dbc72404c0994322ae2dec8cffbe4bc0575a6909e1dae3b9639
GET /wp-content/themes/Avada/assets/min/js/general/avada-select.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 343
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
192.185.94.102200 OK 323 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (849), with no line terminators
Hash 25078b3c53dce64c47392f93754a59ca
7326ac69885d9de280f98e9b3e126992fc6c48a4
171d0134270f3318c59fd703ce5b9f88fcd8102c19c57b107009b7cb1ea94255
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 323
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-crossfade-images.js?ver=7.4.1
192.185.94.102200 OK 190 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-crossfade-images.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (418), with no line terminators
Hash 23f20a4910baec4f89ee4b41c41663a9
0137dfa686ad8e3c03afee4cb72ded6dafc52d65
cc1fc5dea521e84e6bc2f3ed7128896dce516f4c0f40c6e668a43fc7464badf5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-crossfade-images.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 190
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/metro-chemicals.jpg
192.185.94.102200 OK 151 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/metro-chemicals.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, baseline, precision 8, 337x302, components 3\012- data
Size 151 kB (150791 bytes)
Hash 8d8a5765eb308e1d4e491576d5979efd
da338154ffabe001d277faee73c533941b351026
dd0c2f70575af04584f624a2f00701d57d431615f6cd8ed40b26ebbaaf49d477
GET /wp-content/uploads/2020/02/metro-chemicals.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:48:50 GMT
Accept-Ranges: bytes
Content-Length: 150791
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/commadities.jpg
192.185.94.102200 OK 95 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/commadities.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=450, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 337x302, components 3\012- data
Hash 2362349e258cfa2d07a216ecf4c68b09
805ebc725df4d7b31b232f3ab5ea012981ec3022
b3c32ed0b3f3ab80b20855cc3687ac6763f3d2d20bf69aad18556f81e9c495a1
GET /wp-content/uploads/2020/02/commadities.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 29 Jun 2020 09:48:25 GMT
Accept-Ranges: bytes
Content-Length: 95150
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fade.js?ver=1
192.185.94.102200 OK 437 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fade.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1162), with no line terminators
Hash 51e57fabc7b182d7ec3fef8f4f57404e
8d8018b572928c522b6c9a665ad347f35f693d62
6f8638903f64d7b007e657b7b3319ca1017d864aa5ce24c19d75f37608b617e7
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fade.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 437
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/like.png
192.185.94.102200 OK 2.8 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/like.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 17542bfc71cc8355216e47dd3ee03b7d
8ff62149362a64c07086a881b05e7f00091d0b46
64cf51069a14393018784a84cf978cbffaf12eef6b7164197635df5665dbbff2
GET /wp-content/uploads/2020/02/like.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 09:55:23 GMT
Accept-Ranges: bytes
Content-Length: 2800
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
192.185.94.102200 OK 795 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (1767), with no line terminators
Hash b79965d26737121a398b88bb7fc1f0fe
a4f5e6d76a398b6a4f7101b1322fdca8ed3fa2d1
d9708d168947b4ba3bc2856ecd1b63a67f6954e45f15ed885c76154391e4eecc
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 795
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
192.185.94.102200 OK 752 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2283), with no line terminators
Hash 7ec3d0da9b265679f4a9ddb4445201ac
fd5f4b16b154d331df4d4ccf54d66f54a7437a67
d6dce1740ec22b7b7ea76536007f74be4dce6c81ffd29651f23ff631d2acd357
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 752
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
192.185.94.102200 OK 1.2 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2625), with no line terminators
Hash ebe4e9f6c08025495f62dbd3dab49558
99989ce4bbcb950c5528b6b9af98bd5a7201a6ba
9ab8983b99fcfe8135797b970e1c72f41ff977456ee3f4174f27dc0d7e6b1399
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1193
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2
192.185.94.102200 OK 2.3 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5894), with no line terminators
Hash 6ea670f77bc327cfc7440bc409d0a6fb
883c93490ac29f5180e40315da44151e0e89ecb7
c74be1d1d7acebab196022f2f051af8029ee1f1c73ccd4eea196a8c2f97ede67
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.sticky-kit.js?ver=1.1.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2288
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
192.185.94.102200 OK 1.5 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3344), with no line terminators
Hash 7b1c3a4ae856e0f5476185a5eadee528
40cb14c5c5a4763e6562115d9de15a800a6a8a15
b751be721e680dae84ffcadafad3650afd6740cf1bc807ea8c8bf8a674c71b99
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1540
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1
192.185.94.102200 OK 1.8 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4498), with no line terminators
Hash 144c0e8904a1ca69849b9dbd25c32436
c11665d5e05017e0c35cf1f7987c2b045fb42ab0
779aa56aed84c315eeafca1cf3a8da23fe1b56297676c521005dd3bace6b02bd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1847
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1
192.185.94.102200 OK 3.8 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12019), with no line terminators
Hash dccea011cf5cffbe9578fed24dd3d66f
3dbe2cc510b05b31220f137748146800bb52a978
b1e12ba5855f8b582c33dc6ca75fa535d6a79f9284e5f7175b3ba70f4a575a3e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3833
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1
192.185.94.102200 OK 4.8 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15673), with no line terminators
Hash c68f08149e3598d4284288a05431eb00
840a4b9d894307a4feffdfb63df7296619b8d59e
16f0a4929fcccb3fd42a5bae35661e5e89d3bdda1254b7fac894470dacb5f35c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4834
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
192.185.94.102200 OK 4.5 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10862), with no line terminators
Hash 3ba9771f425df344603ff17d0833bfb6
e52fbc72e649ce839e6e1d53dfa46ffa61f3a775
9fb90ea5d02e8854297739876a1b160d05035bd0dd1e5531e0514c6c7fc957c3
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4486
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=5.4.1
192.185.94.102200 OK 5.6 kB URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=5.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (16847), with no line terminators
Hash 04255720e9d3798c393a9c6a28f12143
7e6674f9686725d8f329b1722425f2d2c948c50a
2b02a513a804ae9165b6513e2adc7746172e3395cd07a4122224070504855c61
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=5.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:58:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5618
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
192.185.94.102200 OK 5.8 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12991), with no line terminators
Hash 6abcdd034dd7851cdd3b2dcc1078e107
00ae25c1c12d9778da5701359d425637d65ff307
6dd4737179a597c7a877abb269d8438ed5d23e7dc44affb5f6ec6e268b0cadf2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5789
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.4.1
192.185.94.102200 OK 8.3 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32043), with no line terminators
Hash 36840f5c77e437297b52dee12e1c32d5
0cb402d2d28a28d46e8ba7e2a6dce34afb270d90
3f5bf9648bab0774439af442fb42f83dfec097236f31c6588a73e9001ec760be
GET /wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8277
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1
192.185.94.102409 Conflict 83 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
192.185.94.102200 OK 1.1 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2714), with no line terminators
Hash 682cde07c4b2534a4021bd480303b708
a58324936e4b57a1a0f2dbc6527d92605da1e112
b5d13192d2ef0455d28bbb8f74736d9ac166f131d079df86f6f424bea5803fc1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1106
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
192.185.94.102200 OK 2.1 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5448), with no line terminators
Hash a4556481dfdb6c0b0a6a3e88047a0886
dcf9f90f144d10336737ac579b1ac95ac3a4dc0a
a69aebd65b904727a27b7468dd2fb976d4736148cd75f5420886a39cc104f7be
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2097
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
192.185.94.102200 OK 289 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (666), with no line terminators
Hash bfeb289857ead93129131ff61c39ddac
9894cac0709b1c47f11360580a0a7126addb276f
0341d25b5f6ea387918f3e710d27ecd468fe5df7dcb79a037d10530dacf0cf9c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 289
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
192.185.94.102200 OK 742 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2069), with no line terminators
Hash 659e87d2a49bda2a61c1863b7c254394
0987dc0ba33e384d4cacdc3f77bb1d7cffc51e5d
1b9242dc40f6fc76f67d0d76b95943e834ebf0545769e67d850aaf204629c6d7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 08:59:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 742
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
192.185.94.102200 OK 256 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (496), with no line terminators
Hash 3b22e0f6140e504693a588a8165b2de4
2ead3e37e9f09d75ad0923ea909c234abc28d0b7
b6962f72a4d8d423e2eae516abb32b2ca88bfa01e3cbeeef3295f5ef6c9b927e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 256
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
192.185.94.102409 Conflict 83 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.4.1
192.185.94.102200 OK 330 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (729), with no line terminators
Hash f6e519b1676d4a0d1802a7b05d2c21a6
9edb43af7757dd2bf72f32e7bcb7a6d0bb00968a
81c5d8234dde30e63aef590686c943268b4a967a1cb3c2323fb84eb60242b52d
GET /wp-content/themes/Avada/assets/min/js/general/avada-scrollspy.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:25:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 330
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/consulting-1.png
192.185.94.102200 OK 2.5 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/consulting-1.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 2d10d2039777f7803d378e8adec21729
8a672e1393052a9c4fc94889c6134d7fe452c53e
9e3435a8825f6da1c5baba12172603054074f0cc764a0896ce84a77ef987a6e7
GET /wp-content/uploads/2020/02/consulting-1.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 09:56:46 GMT
Accept-Ranges: bytes
Content-Length: 2541
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.almakaaseb.com/wp-content/uploads/2020/02/value.png
192.185.94.102200 OK 2.7 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/value.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 0593d91c9a57e0f67419f98367dac968
43487f3309124ff8b889f1a7a6e93948d97dada2
d4ab42ef14cb0ea5e9bf9a75e7b502d791d26592590f024abf77d742b0b63e5c
GET /wp-content/uploads/2020/02/value.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 09:55:45 GMT
Accept-Ranges: bytes
Content-Length: 2721
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
www.almakaaseb.com/
192.185.94.102200 OK 107 kB IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 107 kB (106846 bytes)
Hash 838c7e7e3d8f28e26928b4282ac2ab99
34c44a115e3f59576b4f078e807114734a306600
1409340829338630bafdc5d3c9d617dd7f6a02ce839df31085b14072354812c3
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://www.almakaaseb.com/wp-json/>; rel="https://api.w.org/", <https://www.almakaaseb.com/wp-json/wp/v2/pages/10>; rel="alternate"; type="application/json", <https://www.almakaaseb.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 19 Jan 2023 21:54:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/hardware.jpg
192.185.94.102200 OK 85 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/hardware.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2018 (Windows), datetime=2020:02:16 19:11:45], progressive, precision 8, 337x294, components 3\012- data
Hash 2d781cac817454ed94e361eea8775ad6
fa44e4816465a24ec840925b2440a06e7f1fa816
71fc9056dc59395fd593052a1d16bd3e603bcc50b35c8181cfeebae3f00e88d6
GET /wp-content/uploads/2020/02/hardware.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:15 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 10:21:15 GMT
Accept-Ranges: bytes
Content-Length: 85406
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/safety-products.jpg
192.185.94.102200 OK 64 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/safety-products.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=294, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=337], baseline, precision 8, 337x294, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 28528-8300, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 60210172656587976474624.000000, slope 73179179394293985907126042624.000000\012- data
Hash c8d4b7bb67e6c0de9b65e52896f4d2ac
e72ebc40530b486db25f934c7140853c2110d3ff
1b9aee88ffe5e9fefa6a2125bbf4d2cb85f486730c3e60fe46021afdafd6bd52
GET /wp-content/uploads/2020/02/safety-products.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:15 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 10:25:51 GMT
Accept-Ranges: bytes
Content-Length: 63539
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/pipes.jpg
192.185.94.102200 OK 54 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/pipes.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2018 (Windows), datetime=2020:02:16 19:13:14], progressive, precision 8, 337x294, components 3\012- data
Hash 398e11c94fd6ba52c0fbf18556330ebe
f3ca8ae6d76102c3aec867a7eeb353aa9fdc3ea4
50c67f359761ecda6cbc90ed2016c99e8163866c895ebc82b4e66e494f3cad75
GET /wp-content/uploads/2020/02/pipes.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:15 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 10:21:53 GMT
Accept-Ranges: bytes
Content-Length: 53942
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/uploads/2020/02/trust.png
192.185.94.102404 Not Found 11 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/trust.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3182), with CRLF, LF line terminators
Hash 6d8b3fe28d7149a647db5aaebb42f7f7
a60df202984c79a0cd5070a1a5cb8823dba1f4ca
ab7b69dc7839a4d01dada85c6881689ea0fee361ab9833161ee99965b2b7fcab
GET /wp-content/uploads/2020/02/trust.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Date: Thu, 19 Jan 2023 21:54:14 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.almakaaseb.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11161
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5187
Expires: Thu, 19 Jan 2023 23:20:42 GMT
Date: Thu, 19 Jan 2023 21:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5187
Expires: Thu, 19 Jan 2023 23:20:42 GMT
Date: Thu, 19 Jan 2023 21:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5187
Expires: Thu, 19 Jan 2023 23:20:42 GMT
Date: Thu, 19 Jan 2023 21:54:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 884f5d7c3a0ee782d4f3fe9f16099891
1c80645a9b9879d1e4b57c546ba35131ba3c28fd
a7b63d331e09518150e6d9eff0c1d80928185ed0734cf1992af7df0021b6886f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10497
x-amzn-requestid: 3bc349ba-7da8-48c8-aa90-2c48c93a023d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fnEG8mIAMFgMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c612f9-08e751fc7f0eacb43fc92712;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f8-pNhxDbAcrbORfT71Y_XAXV3C6Je_9Zi5auLlRNyl7zSRB1_9VzA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 04:30:08 GMT
age: 62647
etag: "1c80645a9b9879d1e4b57c546ba35131ba3c28fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5187
Expires: Thu, 19 Jan 2023 23:20:42 GMT
Date: Thu, 19 Jan 2023 21:54:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a6337c-ea71-4474-ba67-803997f0f17d.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a6337c-ea71-4474-ba67-803997f0f17d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8069887e5e81584380ef3f819bcfab6e
3794126935a3e08de469ea37d29cba7be412d408
934e0982c1d49f06c64f524698b93fb1abf3b8833785d633bad104d052dd3ef0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a6337c-ea71-4474-ba67-803997f0f17d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7871
x-amzn-requestid: 212d220f-c590-4c72-9508-e481cd5045ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1UGmeoAMFzpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714ee-273c8bb54acc0f2b6d12b567;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xwxzja4wdr7AfJC7BU10NpD4zbhg8MLdQ35gmo9LP75IFy9WDaDInw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:54:33 GMT
age: 86382
etag: "3794126935a3e08de469ea37d29cba7be412d408"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5187
Expires: Thu, 19 Jan 2023 23:20:42 GMT
Date: Thu, 19 Jan 2023 21:54:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f491398239265c63ac162d47ab006ce6
c95e1bba76e910100e86f8abf789e5b5c1a2baa6
cdada2d9608e9d3f8e03cf9ced211550b6f7c8f7e0b5ee027a96f45af38523f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7741
x-amzn-requestid: 9af04340-5be9-42b0-96be-0264661c6dae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A6LEMtoAMFW_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c7150d-2348c8846249175e74efc226;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:37:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bYiQLNEiz35_p4_5MV3ky7R5fpl4qUYtf-F2KP0C2gzmeXp5B7kgSQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 22:10:04 GMT
age: 85451
etag: "c95e1bba76e910100e86f8abf789e5b5c1a2baa6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 511bbd0c410838e4a978d471d361d876
706be1b2636ad65bf5fe78ef7301af472c015275
e124c1ba6059fb613d0ab8f7ad37f4524323e7bbde851f78e9e5727c7d20f19f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef64b6-6b9b-4860-a201-58a01048084b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9916
x-amzn-requestid: 42bb326d-889c-4b91-b989-47c1fd650afa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e96pVF61oAMF76g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8a4a1-2f33e6be45e298a7120d1119;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 02:02:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 68BfqCCeDzqQURstD87lSuWaXjwrqVQnXX8ws6EeFfQtbu_ad9JEgw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 05:26:43 GMT
etag: "706be1b2636ad65bf5fe78ef7301af472c015275"
content-type: image/jpeg
age: 59252
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b8f931fb5afe958e67fce9e1822dac4
5732887999b819f6facc6f4608a407b5a09adf75
3c6c787e700f8139ec0eeaad93923f647f9efa5ce60120fc0aab52fa9588efaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5005
x-amzn-requestid: 647dd62e-6b47-4298-9457-c7f37e653e0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e5qLKEX6IAMFX0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c6f0ad-3dc1396c1b3662fa4ec5f1fa;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 19:02:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ge_XozSe44BAhC-fFiu-u8Oa4jd8Uctn4O3fmdLCavhYpcSVrhNMww==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 17:22:45 GMT
age: 16290
etag: "5732887999b819f6facc6f4608a407b5a09adf75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b015242ebdda9cc22cfe6741d2e926f1
76072223007cd11c6f7b9fda8f01818ab0fea740
b7a72c737cac91c83c39718de999bc6ff0ec4ede63342e86407190d95e60d9a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6908
x-amzn-requestid: 5f0a0b3b-1d4c-450e-bcd5-481bda79f4e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1qQHwYIAMF-IQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1030e-62d053e35c8ab2374fd2fe35;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:06:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WdNoHBL4A3J_FHp8V9HLUMNKmEPIw-lstt0OdqYJtcUGfMRZJXPdwQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 11:03:43 GMT
age: 39032
etag: "76072223007cd11c6f7b9fda8f01818ab0fea740"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 149a7cdd0e94d31b2237ac241b3bad35
c6e2c3aba0c96ffc26114f79306930a4554964b3
fe9cd8e03a847278924ed338131b5ef16b8ef315db81f3e6387c0621baa46232
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.almakaaseb.com/wp-content/uploads/fusion-styles/263c84a3b5f99b58af4bba610dbe38b9.min.css?ver=3.4.1
192.185.94.102200 OK 208 kB URL HTTP/2 www.almakaaseb.com/wp-content/uploads/fusion-styles/263c84a3b5f99b58af4bba610dbe38b9.min.css?ver=3.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 208 kB (208415 bytes)
Hash 3dfabff3d802a81e3bb2be4bf81a1e8d
89762568cf787889fe203ac50e19ba2428f4dde4
b084df6980c60e5543ac72e1b120d5809c561356d0b4a3ae4a6bb82aa2e7c58c
GET /wp-content/uploads/fusion-styles/263c84a3b5f99b58af4bba610dbe38b9.min.css?ver=3.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Jan 2023 21:47:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/1.jpg
192.185.94.102200 OK 13 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/1.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x559, components 3\012- data
Hash 27bcc4c1f932c5d0c8700f00c7fa3d9e
3250fa34d2bb7e29f9c22d84610c528744908b62
863e3da67cd22e390437e74a4a9ad79287ee9e0dbe9922306cd5396875a52e1d
GET /wp-content/uploads/2020/02/1.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:15 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 09:57:39 GMT
Accept-Ranges: bytes
Content-Length: 13025
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2710e6694429ed2cf5082b6e48eb6ebe
fd6e63ac90e1d86f37e5f46c98c7592a86106217
928ff655e10cf8a01515e4ca9ad5c7128044617acd61fbd46b613b4861aa5379
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.almakaaseb.com/wp-content/uploads/2020/02/our-range-of-products.jpg
192.185.94.102200 OK 73 kB URL HTTP/1.1 www.almakaaseb.com/wp-content/uploads/2020/02/our-range-of-products.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=598, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1366], baseline, precision 8, 1366x598, components 3\012- data
Hash 40997f8dcb4654286eb8a820adfdfcde
4511d4b64d0833e25f35760fab024e74a370001e
25ca3208fea9cb28784474c14df57864a35741f76ecabf519890fb16ffc7749b
GET /wp-content/uploads/2020/02/our-range-of-products.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:15 GMT
Server: Apache
Last-Modified: Mon, 29 Jun 2020 09:47:54 GMT
Accept-Ranges: bytes
Content-Length: 72647
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff
192.185.94.102200 OK 18 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 18364, version 1.0\012- data
Hash 8e959e0380c51ce13f3d3b2e0ce199b9
5b18dafaefe7cd611793564883243751d5776642
76eee1df4f77092b36dd5bb653611a145fa09f8e0ae8b0d13d7bf0deb9dd3b52
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.almakaaseb.com/wp-content/uploads/fusion-styles/263c84a3b5f99b58af4bba610dbe38b9.min.css?ver=3.4.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:10 GMT
accept-ranges: bytes
content-length: 18364
content-type: font/woff
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2710e6694429ed2cf5082b6e48eb6ebe
fd6e63ac90e1d86f37e5f46c98c7592a86106217
928ff655e10cf8a01515e4ca9ad5c7128044617acd61fbd46b613b4861aa5379
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
192.185.94.102200 OK 78 kB URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78212, version 331.-31261\012- data
Hash 8c4f474a3aaa695346196b1f33fab616
abc1ae262d760e104a5a5cb68614ac119fd0db18
ef2369c82b6ec19bcf4fe76799d94edc43604e164c0f73978059536159845441
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.almakaaseb.com/wp-content/uploads/fusion-styles/263c84a3b5f99b58af4bba610dbe38b9.min.css?ver=3.4.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:10 GMT
accept-ranges: bytes
content-length: 78212
content-type: font/woff2
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.almakaaseb.com
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 13:09:06 GMT
expires: Wed, 17 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 204309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2710e6694429ed2cf5082b6e48eb6ebe
fd6e63ac90e1d86f37e5f46c98c7592a86106217
928ff655e10cf8a01515e4ca9ad5c7128044617acd61fbd46b613b4861aa5379
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.almakaaseb.com
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 19:33:54 GMT
expires: Thu, 18 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 94821
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.almakaaseb.com
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 07:51:59 GMT
expires: Thu, 18 Jan 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 136936
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
192.185.94.102409 Conflict 83 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2710e6694429ed2cf5082b6e48eb6ebe
fd6e63ac90e1d86f37e5f46c98c7592a86106217
928ff655e10cf8a01515e4ca9ad5c7128044617acd61fbd46b613b4861aa5379
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7216.420607358212!2d55.31022!3d25.26351!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x5e3488031e61ed0d!2sAL%20MAKAASEB%20GENERAL%20TRADING%20CO%20(L.L.C)!5e0!3m2!1sen!2sin!4v1581773387569!5m2!1sen!2sin
216.58.207.228200 OK 1.1 kB URL HTTP/2 www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7216.420607358212!2d55.31022!3d25.26351!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x5e3488031e61ed0d!2sAL%20MAKAASEB%20GENERAL%20TRADING%20CO%20(L.L.C)!5e0!3m2!1sen!2sin!4v1581773387569!5m2!1sen!2sin
IP 216.58.207.228:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1987)
Hash ec0a83f3370c189a589fca3727d4e038
95d808f9c1668a4b181c4980439b885e1942d458
c157c3605811933b6478b3201f2db0beed7ec190701cf32e81700c4f30029ecf
GET /maps/embed?pb=!1m14!1m8!1m3!1d7216.420607358212!2d55.31022!3d25.26351!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x5e3488031e61ed0d!2sAL%20MAKAASEB%20GENERAL%20TRADING%20CO%20(L.L.C)!5e0!3m2!1sen!2sin!4v1581773387569!5m2!1sen!2sin HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 19 Jan 2023 21:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-yzIGP3dZLJQ__-LhM1LXCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 1113
x-xss-protection: 0
server-timing: gfet4t7; dur=166
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 623f341fa3fd0e09d3a2b649ea882919
98c12490034b5633fcc6386b627947806495fc61
edf2873ae5aee565800ffbd38c62519e683adf9f4624bd49af202b64f158f5eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a435563e4adb6d7d64a8600e6250bf45
a8f5a99620153938ec4cfba0423d6d06c66bb7fe
9e5c713c50dca08152c55041574e3e4003213133a8c78494ff18d1d1808589fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en®ion=in&callback=onApiLoad
216.58.207.202200 OK 56 kB URL HTTP/2 maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en®ion=in&callback=onApiLoad
IP 216.58.207.202:0
File type ASCII text, with very long lines (2546)
Hash d577ee9bf438fac5ce25839ca548fa3b
723b2e58f8c21bb50f4388bef580a7922503dae6
faf848deee4f5165ebde8e6def89830f52539c634fe4a2b99e0d4304d2a3e95f
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en®ion=in&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56006
x-xss-protection: 0
x-frame-options: SAMEORIGIN
date: Thu, 19 Jan 2023 21:30:06 GMT
expires: Thu, 19 Jan 2023 22:00:06 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 1449
server-timing: gfet4t7; dur=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1
192.185.94.102409 Conflict 83 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/assets/min/js/general/avada-contact-form-7.js?ver=7.4.1 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a435563e4adb6d7d64a8600e6250bf45
a8f5a99620153938ec4cfba0423d6d06c66bb7fe
9e5c713c50dca08152c55041574e3e4003213133a8c78494ff18d1d1808589fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 21:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.gstatic.com/maps-api-v3/embed/js/51/6/init_embed.js
142.250.74.3200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/6/init_embed.js
IP 142.250.74.3:0
File type ASCII text, with very long lines (2599)
Hash be12a12462b048e40e6df59292fd14d5
5074e1bdfc1ba62a9390b86431fa182c8214a3c4
d8d53fc87f655da09239adf5d94194d687060d2b025214f7d9c956c475ddb0ba
GET /maps-api-v3/embed/js/51/6/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69374
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 20:27:37 GMT
expires: Thu, 18 Jan 2024 20:27:37 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 17 Jan 2023 21:59:16 GMT
content-type: text/javascript
age: 91598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/slider-2-2-1.jpg
192.185.94.102200 OK 143 kB URL HTTP/2 www.almakaaseb.com/wp-content/uploads/2020/02/slider-2-2-1.jpg
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=512, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1365], baseline, precision 8, 1365x512, components 3\012- data
Size 143 kB (143074 bytes)
Hash f53f6ee7f3b294b694e4a32804f08ca7
5188fecf3b7b84b6613eae0c2823b553c024b5b0
af5772a62333e4a28641144483f2a8990b762f9d421571173e268b5f04d99bd2
GET /wp-content/uploads/2020/02/slider-2-2-1.jpg HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:56:09 GMT
accept-ranges: bytes
content-length: 143074
content-type: image/jpeg
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/uploads/2020/02/site-icon.png
192.185.94.102404 Not Found 11 kB URL HTTP/2 www.almakaaseb.com/wp-content/uploads/2020/02/site-icon.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3182), with CRLF, LF line terminators
Hash b3da6f2fa673fcd4aa5c6174c77d88e6
ce17ea5ecdc403ba48c53280bc7fc94134ba092a
5c041fcc8fca4b36c85c3c07d0317b6fd63b8c1a8816bde2de9a1322f16074de
GET /wp-content/uploads/2020/02/site-icon.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.almakaaseb.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 11151
content-type: text/html; charset=UTF-8
date: Thu, 19 Jan 2023 21:54:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_next.png
192.185.94.102200 OK 261 B URL HTTP/1.1 www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_next.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash bb36249eae2836938a4fcaa3a03b1df4
99a1a668df22283e233c4b4afa3128b6edae6c13
d27e81fbd7cae813c2206724e15018673c1ee76272aeef848cfa1e7489d4f10e
GET /wp-content/plugins/slide-anything/images/icon_next.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:16 GMT
Server: Apache
Last-Modified: Wed, 04 Nov 2020 12:48:09 GMT
Accept-Ranges: bytes
Content-Length: 261
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_prev.png
192.185.94.102200 OK 224 B URL HTTP/1.1 www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_prev.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e8d8b60cdc0fc6182236f3b9f37b9ae
aa8f3e0c89631500d0b48c3b5b64a8c6fc59899a
106089e291c72daecb8dc98e36800362b56366d9093486dfe86bb51d8890e98a
GET /wp-content/plugins/slide-anything/images/icon_prev.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 21:54:16 GMT
Server: Apache
Last-Modified: Wed, 04 Nov 2020 12:48:09 GMT
Accept-Ranges: bytes
Content-Length: 224
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png
www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_prev.png
192.185.94.102200 OK 224 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_prev.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e8d8b60cdc0fc6182236f3b9f37b9ae
aa8f3e0c89631500d0b48c3b5b64a8c6fc59899a
106089e291c72daecb8dc98e36800362b56366d9093486dfe86bb51d8890e98a
GET /wp-content/plugins/slide-anything/images/icon_prev.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
content-length: 224
content-type: image/png
date: Thu, 19 Jan 2023 21:54:16 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_next.png
192.185.94.102200 OK 261 B URL HTTP/2 www.almakaaseb.com/wp-content/plugins/slide-anything/images/icon_next.png
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash bb36249eae2836938a4fcaa3a03b1df4
99a1a668df22283e233c4b4afa3128b6edae6c13
d27e81fbd7cae813c2206724e15018673c1ee76272aeef848cfa1e7489d4f10e
GET /wp-content/plugins/slide-anything/images/icon_next.png HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Nov 2020 12:48:09 GMT
accept-ranges: bytes
content-length: 261
content-type: image/png
date: Thu, 19 Jan 2023 21:54:16 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
192.185.94.102200 OK 0 B URL HTTP/2 www.almakaaseb.com/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Jun 2021 19:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.almakaaseb.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
192.185.94.102200 OK 0 B URL HTTP/2 www.almakaaseb.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 192.185.94.102:0
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.almakaaseb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.almakaaseb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Jul 2021 06:41:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 19 Jan 2023 21:54:14 GMT
server: Apache
X-Firefox-Spdy: h2