{"report_id":"848490d8-b20d-47e3-9fff-2907c34d9ad8","version":0,"status":"done","tags":[],"date":"2026-07-12T20:25:54Z","url":{"schema":"http","addr":"oj.jo/internal/web-sso","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":0,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"title":"Authentication","dom":{"size":64758,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38086)","md5":"5303ad51e18a045aebf7e008a89ca353","sha1":"5c587692f930a542a10e7e4f0b725e7ae7de3124","sha256":"f48aaf5a603cb6a04cb819a4320ab6dae98dd43e4df0239ef1aa7a3255ca45c8","sha512":"2a7df3ed946c04d09741d309b634e4ee732bb7a12c8c2fb9cb789a4cc668d398165085f1d2be7400e867578a29605d00afbb3d3a90b0a8cd2f470ec18859f6a7","ssdeep":"1536:Nmwpa1sFwWfOskX210Qy6BOAHpTq+RPuSSgvt+JER6m8v1+8Dso3JkEZ5:wL1kwWf/kX2Fy6O+Re7vDso3Jkw5","tlshash":"0a53f7678e9f1d524721d5aa27df5ac1281cc38fa485c48cba9edbc8cf4ec5528d22dc","dom_hash":"domhashc07c820765eb3c082104d247c570c380","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oj.jo/internal/web-sso","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":0,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:25:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.kindpng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-07-06T15:13:52.241954Z","alert_count":0,"request_count":3,"received_data":55983,"sent_data":1662,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"asset.brandfetch.io","ip":{"addr":"108.157.229.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-17","domain_rank":493186,"first_seen":"2021-10-08T16:13:01Z","last_seen":"2026-07-10T10:35:52.020175Z","alert_count":0,"request_count":1,"received_data":18670,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"docucdn-a.akamaihd.net","ip":{"addr":"95.101.10.42","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":51084,"first_seen":"2014-04-10T18:55:33Z","last_seen":"2026-07-08T23:04:01.69364Z","alert_count":0,"request_count":1,"received_data":3432,"sent_data":554,"comment":"","tags":null,"fingerprints":null},{"fqdn":"seeklogo.com","ip":{"addr":"172.67.164.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-08-23","domain_rank":36062,"first_seen":"2012-05-31T03:47:38Z","last_seen":"2026-07-11T03:05:02.016685Z","alert_count":0,"request_count":1,"received_data":1083,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.in2tech.com.au","ip":{"addr":"103.146.112.110","port":443,"asn":136557,"as":"Host Universal Pty Ltd","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2017-06-17T13:32:25Z","last_seen":"2026-07-11T03:05:02.246672Z","alert_count":0,"request_count":1,"received_data":42107,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"controlpanel.serverdata.net","ip":{"addr":"104.18.40.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-06-09","domain_rank":0,"first_seen":"2014-05-25T17:17:54Z","last_seen":"2026-07-11T03:05:02.784177Z","alert_count":0,"request_count":1,"received_data":2109,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oj.jo","ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-23T21:51:49.528395Z","last_seen":"2026-07-11T00:48:22.031062Z","alert_count":18,"request_count":6,"received_data":392369,"sent_data":3492,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.seeklogo.com","ip":{"addr":"172.67.164.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-08-23","domain_rank":662961,"first_seen":"2024-03-09T13:18:05Z","last_seen":"2026-07-11T03:05:01.83365Z","alert_count":0,"request_count":1,"received_data":14620,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.crunchbase.com","ip":{"addr":"3.167.2.92","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-05-17","domain_rank":475589,"first_seen":"2014-06-20T08:32:11Z","last_seen":"2026-07-11T03:05:02.125089Z","alert_count":0,"request_count":1,"received_data":1407,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.freeiconspng.com","ip":{"addr":"78.46.22.9","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2014-08-03","domain_rank":467248,"first_seen":"2017-01-29T16:54:10Z","last_seen":"2026-07-05T20:26:40.800519Z","alert_count":0,"request_count":1,"received_data":46254,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-05T23:52:25.141715Z","alert_count":0,"request_count":1,"received_data":90144,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.kindpng.com","ip":{"addr":"198.204.251.75","port":443,"asn":33387,"as":"NOCIX","country":"United States","country_code":"US"},"domain_registered":"2019-10-13","domain_rank":547426,"first_seen":"2019-12-19T09:22:30Z","last_seen":"2026-07-11T03:05:03.106146Z","alert_count":1,"request_count":1,"received_data":29480,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ab956489c27dd76626ed7e2ca7d834d","sha1":"d6e81cf11fb1941a3c3042c073219b6c789d916b","sha256":"e7a2401df65c68cca96f710103a5534649e733949102c4ac896fe681a55bd027","sha512":"0e33c5c49de13b50a637fdddb83889b11c84e51f5dcf89300680495bf862731ddc39278015c4f40deaad18c57c8b75c5afa0c6aa0f0819a55cac99a2f32177c3","ssdeep":"768:/mwyoa1EM+FwXaxfOsk2XYXh2pJ+/x53Gtj4Qy61yqtOFAPHpTq+R7zW3shSgvtN:/mwpa1sFwWfOskX210Qy6BOAHpTq+RPV","tlshash":"af03c523cd4f2e4687209a9726de9dd61c1d87cdb8c604cdc65bdfc9c68e92a24c52ec","size":37821,"data":"","first_seen":"2026-07-11T03:05:05.189685Z","last_seen":"2026-07-12T20:25:59.256032Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"94b2657c320381e3efdd750ead9cdf9f","sha1":"81ae639edd8ac30c04bb26a9a0e4095e72ecafc7","sha256":"565972bbd2ff60d7d6120d9f6a0e5dfd77961ff03400b4547d9a3a15af698092","sha512":"da10547ad3955e56bdabe4386a06f9ab9a2eb0ea631671f4686b1284ea3daf1d267132946aab91ecdad7b19165c08889967b5eb7e33ae37af74ef5d62d0c43c4","ssdeep":"","tlshash":"25e0683ac49518b041abb17b53afe1202a310483d444d9213d4c0f8d9f4201c8b66a1a","size":372,"data":"","first_seen":"2026-07-11T03:05:05.190844Z","last_seen":"2026-07-14T14:53:55.891307Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T14:39:22.95242Z","times_seen":491415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ed07d5e6ca7ec7f9115ff3c25f10ff3","sha1":"777fbfaf545036f4c8a0cc7bcb90f077c0118b80","sha256":"ac17cb2a8d0957e02b4ff72cc750db693150250bef879da298921b74fea913cb","sha512":"e2136346534ea34f1d98213956cc73bd3390c60cec801c0f5276a819fbde28bbfda3c790de372e6201ea2d4e446dc5b6ddb114cc1f8839f9da663765f69e1c17","ssdeep":"192:3vNy+3iai9i7/FiF0a8iUidL+McSjiOacUqvWiTXeVHrgq/HngqyIXb:3Ziai9ihiF0viUi1iEUHiT4HVHrb","tlshash":"4c02fcaef2ab05710aeaa5be3b8f23447024d00bdd05c0087d9d93195f61d1ab8f5ade","size":8573,"data":"","first_seen":"2026-07-11T03:05:05.191737Z","last_seen":"2026-07-12T20:25:59.260807Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.087Z","timestamp":1783887929087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nage: 1417008\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270036-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375306, 282439\r\nx-timer: S1783887929.157724,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T14:39:22.95242Z","times_seen":491415,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":13,"connect":21,"send":0,"wait":21,"receive":4,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kindpng.com/picc/b/716-7162953_aol-logo-png.png","fqdn":"www.kindpng.com","domain":"kindpng.com","tld":"com"},"ip":{"addr":"198.204.251.75","port":443,"asn":33387,"as":"NOCIX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.100Z","timestamp":1783887929100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kindpng.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 07:26:43 GMT","end":"Sat, 05 Sep 2026 07:26:42 GMT"},"fingerprint":{"sha1":"EF:BB:3A:2D:74:35:C8:9C:1F:59:1B:E1:3C:D9:35:6B:15:0F:75:F6","sha256":"2A:C4:20:4F:0D:A7:8F:7E:4C:13:0C:B0:57:E2:F2:1C:72:C6:35:AB:74:F2:34:6F:86:23:A1:75:D1:BC:D6:55"}}},"request":{"raw":"GET /picc/b/716-7162953_aol-logo-png.png HTTP/1.1\r\nHost: www.kindpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.2\r\nDate: Sun, 12 Jul 2026 20:25:29 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 10 Dec 2022 12:35:05 GMT\r\nETag: W/\"63947cf9-7217\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29207,"size_decoded":28787,"mime_type":"image/png","magic":"PNG image data, 600 x 632, 8-bit/color RGBA, non-interlaced","md5":"07ccdfd924a0ebf229d3ecfbf005e4aa","sha1":"9f5dc039076869a01dead05ff2e737a041592529","sha256":"3626bc98f1df5f582c8c378e5e159ee21f2512ce2cb5cae4b2ac9f27ba85f547","sha512":"6289b6b5fa734c38d979103298611ab3dff1b1bd969cb59a06e6a6744f71009083b60b35085abf6f99f710600986bb1781cdfb04f31d0eea5d91f0efd3f0f5b8","ssdeep":"768:xLYK3wY7Zr4MvRfD6yZ1l2lwfqY93gYBjTt4bG+:6Kg6r4ARf55z9QYtTt4P","tlshash":"0dd2e1a364cde9804f6f95322b57c4af2f40811629e0fd62af89d99d3c790ef6901d0e","first_seen":"2023-04-18T16:12:19Z","last_seen":"2026-07-14T14:53:55.888776Z","times_seen":10,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":28,"connect":122,"send":0,"wait":240,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.kindpng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:28.663Z","timestamp":1783887928663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /internal/web-sso HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oj.jo/internal/web-sso\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=ec4c40dc6691ba4f508fa7b9544a33ee6186ee99.1783891528.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 12 Jul 2026 20:25:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 795\r\nlocation: https://oj.jo/internal/web-sso/\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/b/b3/Microsoft_Outlook_logo_%282024%E2%80%932025%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.094Z","timestamp":1783887929094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/b/b3/Microsoft_Outlook_logo_%282024%E2%80%932025%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: mqnb7myrg9pkp3xuozdh2gus2ux59ae\r\nlast-modified: Tue, 25 Nov 2025 15:59:31 GMT\r\ndate: Sun, 12 Jul 2026 18:56:53 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/6bec7d03b4fe4e1353a6cf6f8d9ee839\r\ncontent-encoding: gzip\r\nage: 5315\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 hit, cp3077 hit/1\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=0JNIH6mwlx6OY0p0yX5-1wObAAAAAFvdUUtCqAOT97X91Yoft4jbXsYaQGAamTyB;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 12 Jul 2027 00:00:00 GMT\r\ncontent-length: 3376\r\nx-request-id: 1591be9c-8bc8-44a4-907e-9a0fb6e0af2b\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":9980,"size_decoded":5516,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6bec7d03b4fe4e1353a6cf6f8d9ee839","sha1":"c2accb9a168e23f1a2aeaaa38f0129a8947bd746","sha256":"b59793f3a979b8785894215604d94cc8ea45ed692b75f4aa99a5c2c5c37ad040","sha512":"480f851489f01da5c8808fba16ae7250cfb511a4b19422607007fc091febc6ceb1fb46c45c2feb2c0eeae49b7f6b3a79b993a04f515362640a38d7a4cdce71a6","ssdeep":"192:si5EeGkrdgqP+9P5Rhbjs+A+kGKxkfteKS:rKnHRu+A+aksKS","tlshash":"7522d611d7a914ead11ec36cffd52945112930a3a2664d19fcac12baaf129c2f71e3ec","first_seen":"2025-11-21T09:42:46.000108Z","last_seen":"2026-07-14T14:53:55.881038Z","times_seen":8,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":15,"connect":27,"send":0,"wait":28,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asset.brandfetch.io/idu0JRNI4Q/idDUrfzUIn.png","fqdn":"asset.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"108.157.229.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.108Z","timestamp":1783887929108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 23 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:F2:DF:8B:7B:F2:05:42:93:2B:E8:AE:7D:92:38:A0:B7:BE:2F:D2","sha256":"6A:D1:91:2C:6C:2F:C8:4B:62:FF:BD:D2:92:2D:DF:99:02:68:AE:40:2E:C5:DC:C4:37:AF:12:BE:BB:16:DD:3A"}}},"request":{"raw":"GET /idu0JRNI4Q/idDUrfzUIn.png HTTP/1.1\r\nHost: asset.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 17931\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 19 Jun 2023 08:19:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 12 Jul 2026 20:25:30 GMT\r\netag: \"5c81f81264f99d63f5621123da7eba4f\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 954566f060b15d780520f7d4a3482500.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-amz-cf-id: 7ZlLYA4Hsu_1UlKJCM3rX5dHWtuZeQqmdq_Ns0oohtEWlvsOaewvqw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17931,"size_decoded":18670,"mime_type":"image/png","magic":"PNG image data, 820 x 237, 8-bit/color RGBA, non-interlaced","md5":"5c81f81264f99d63f5621123da7eba4f","sha1":"836cb8447b38d5ecf8a378dcbd567b115cb007ba","sha256":"263b489226d5de00389be959a3d5fe4ddbd6c4e21b39fd01d218252f406dc91b","sha512":"4add7f6bc59344bfefffaf0820d1f7b925e6b8487afd39edda63e898dbf71648107ad343ce9a07b5f57140ee6b9a7673a4413ccc4cb91dafbd384a3643e1a6d7","ssdeep":"384:y5KiqAgdk7wY4CXo/mWqqYYbwttPMt/NebcDecUQf:y5KbTkcY4CvWhtt/+jw","tlshash":"bf82afc2eef5d4d3e5234f2e7d150e700ae4aa79537d3be4447c46a0234ba54f2a89a4","first_seen":"2023-09-17T13:42:37Z","last_seen":"2026-07-14T14:53:55.887187Z","times_seen":11,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":53,"connect":30,"send":0,"wait":333,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/bg3.png","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.293Z","timestamp":1783887929293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /internal/web-sso/bg3.png HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=ec4c40dc6691ba4f508fa7b9544a33ee6186ee99.1783891528.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 20:25:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 08:31:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339247\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339247,"size_decoded":339710,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e19ce4736331a1c09708140e00630a81","sha1":"2c6d5943cf4f3d4fdc5d979546b1767240f19179","sha256":"ca24b631cabfec08e6a27c83848e3f3678422034f93f800bc8faff3abab583db","sha512":"1da6c3a30570294deb8287432eac30e872e6d6d313195d6efa84feb8a7cdf47cf0fe7b9d3f849f0e2ff4574a42bd47100115a8bca15d63f91ba28c94e7b39c81","ssdeep":"6144:qNr1CM+iV/EuNcqPN7S8uyJ0jzCo0N5lM9elHHosEAq1aM/XC4F/HF:Crv+oEqZNjurjzbI5O9OSkCXvRF","tlshash":"db74120a6d66df9dcadf3cb2ab588fe302528063eef56550d51832891848f336ecc4b5","first_seen":"2026-07-11T03:05:05.186404Z","last_seen":"2026-07-14T14:53:55.889313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.seeklogo.com/logo-png/27/1/rackspace-logo-png_seeklogo-273838.png","fqdn":"images.seeklogo.com","domain":"seeklogo.com","tld":"com"},"ip":{"addr":"172.67.164.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.305Z","timestamp":1783887929305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seeklogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 20:05:08 GMT","end":"Fri, 02 Oct 2026 21:03:27 GMT"},"fingerprint":{"sha1":"BE:0D:E2:41:C3:EA:A7:56:91:25:89:FA:8E:BC:93:EF:DB:4C:EC:90","sha256":"DA:CE:04:8B:C0:2E:FC:39:31:77:3F:3A:5F:DF:7B:E1:CE:0F:23:4A:34:CA:02:77:B9:14:23:53:1E:F5:5D:B7"}}},"request":{"raw":"GET /logo-png/27/1/rackspace-logo-png_seeklogo-273838.png HTTP/1.1\r\nHost: images.seeklogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jan 2025 20:56:01 GMT\r\naccept-ranges: bytes\r\netag: \"1db63a20e1a3235\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-download-options: noopen\r\ncontent-security-policy: upgrade-insecure-requests; frame-ancestors 'self'\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nage: 216761\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wh2cBeCkDFvuBYZEZ1WFejLuTN5kszWRz6abgUEaL0E8GIbB99dFvUKycXLoSlyZ8QP9lSeggIK9extWRJ562CBVezFrJVfk2HFsFxna2LAoKdYkPNkUjdPMdt%2FAXEfTbfWaHKGG\"}]}\r\ncf-ray: a1a2c7063bb00b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13493\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13493,"size_decoded":14620,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"18c8d670ba9cbe47b9bffe48758a06c9","sha1":"ad3a77e943d5879d5e15631722b7198f91131c1a","sha256":"e002ecdae29b69fbff5bbfc2b9bae452cb7d78205855e8376be26ba3107b58cf","sha512":"aeb22dd67aa53cf3c2e3544a62cdf1daa0ff2f706f43935947e3a5b47ace3b60106f03217817438dfb85e64c468a44d3ecd6edde8ca0805274419f5d59227f13","ssdeep":"192:Cn0GdTHeNyl847liLKSUNz9lAKKjsM0gxwpjNYgdTEq5IxEArlE6ydUVIcwIQAIh:C0kl8gJ3zVKR69JEq5slOUuI7w","tlshash":"a952d06bcda32ca6e7ca527a2550137d4f8420b4c361615fc600e98412f6bf90adf8df","first_seen":"2026-07-11T03:05:05.178469Z","last_seen":"2026-07-14T14:53:55.879651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":12,"connect":9,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:27.277Z","timestamp":1783887927277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /internal/web-sso HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:27 GMT\r\ncontent-length: 11706\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11706,"size_decoded":11951,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4613)","md5":"b7c1533c07770b652ff71e13e9a2802c","sha1":"ff5ccf2ac2b5b3a04a6052a015022744f9460d0f","sha256":"6ada7c9e7f425e254db9ddca991433d6ebd4939f539de7a0170ea13abf0434c2","sha512":"45208f76b1508b7e20608c4502557d294143b1b43c81ee618bc8ea296098a139aeb5d70fa6183d665d6b764932383fedc8ba3420af470a3952a5d457bd0fbc30","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxz9MH1qWEPHhZ8iR222t2i22G:sXX+/DV7k/39MHgJPHhuw7gH22G","tlshash":"6b32074caea03274f21653ce3baf2819626554c3244ccd98f94d6ef8bf8638e4157b5a","first_seen":"2026-07-12T20:25:59.240569Z","last_seen":"2026-07-12T20:25:59.240569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":14,"connect":22,"send":0,"wait":44,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13069720\u0026pdata=https%253A%252F%252Foj.jo%252Finternal%252Fweb-sso\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887927","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:28.634Z","timestamp":1783887928634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13069720\u0026pdata=https%253A%252F%252Foj.jo%252Finternal%252Fweb-sso\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887927 HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oj.jo/internal/web-sso\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:28 GMT\r\ncontent-length: 0\r\nlocation: https://oj.jo/internal/web-sso\r\nset-cookie: wssplashchk=ec4c40dc6691ba4f508fa7b9544a33ee6186ee99.1783891528.1; Path=/; Domain=oj.jo; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/internal/web-sso/","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:28.694Z","timestamp":1783887928694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /internal/web-sso/ HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oj.jo/internal/web-sso\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=ec4c40dc6691ba4f508fa7b9544a33ee6186ee99.1783891528.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 13687\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38105,"size_decoded":14106,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (38105), with no line terminators","md5":"bb404ef86bdea0929b911059cbf7ab40","sha1":"c3178ae59b1996d2ee1e8b11fb98959950103397","sha256":"bb539602d11fbfb37a2946c5e509f80c7e0b4568916ded1e94f37d0742b17793","sha512":"3148ca2f3157c51cb492774a28182f7cd5bb024ad9c6249489fe07affeda68eb866bc0272a710c1159ea121da14926f090d9049dfdced5dfb1ee1efdd5238edf","ssdeep":"768:3mwyoa1EM+FwXaxfOsk2XYXh2pJ+/x53Gtj4Qy61yqtOFAPHpTq+R7zW3shSgvt0:3mwpa1sFwWfOskX210Qy6BOAHpTq+RP8","tlshash":"5e03d523cd4f2d4687209a9726de9dd61c1d87cdb8c604cdc65bdfcac68e92a24c52ec","first_seen":"2026-07-11T03:05:05.174021Z","last_seen":"2026-07-12T20:25:59.241948Z","times_seen":3,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docucdn-a.akamaihd.net/olive/images/2.72.0/global-assets/ds-logo-default.svg","fqdn":"docucdn-a.akamaihd.net","domain":"docucdn-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"95.101.10.42","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.093Z","timestamp":1783887929093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /olive/images/2.72.0/global-assets/ds-logo-default.svg HTTP/1.1\r\nHost: docucdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\netag: \"55acf27e6b517af140d1c9fb147e31e8:1724885284.41283\"\r\nlast-modified: Wed, 28 Aug 2024 18:36:21 GMT\r\nserver: AkamaiNetStorage\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=4704440\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 1312\r\naccess-control-allow-origin: *\r\nakamai-grn: 0.1c0a655f.1783887929.579d6a8\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2940,"size_decoded":1804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55acf27e6b517af140d1c9fb147e31e8","sha1":"fd74318612d950ae56b82776d4507a703e2745ef","sha256":"769113eed5abf2bb8e472a29d439cc73ca6bccfa82e3d8f0b36d6f7d9fd740b6","sha512":"ef85f9034de1d6f0c04e7dd24f9743d39d63d2273884c1f46f744d4514e25569f07a7e7d9dbd8f644f6ae0b80e383c91954629356bfffec06746947645008826","ssdeep":"","tlshash":"b351217cc39da3788c1e93b486319864384f52aea4d0b239fba5dcb037520dc665d4ab","first_seen":"2024-06-11T08:17:02Z","last_seen":"2026-07-17T08:49:01.924468Z","times_seen":983,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":38,"connect":15,"send":0,"wait":12,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seeklogo.com/images/R/rackspace-logo-0D6979FEF6-seeklogo.com.png","fqdn":"seeklogo.com","domain":"seeklogo.com","tld":"com"},"ip":{"addr":"172.67.164.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.096Z","timestamp":1783887929096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seeklogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 20:05:08 GMT","end":"Fri, 02 Oct 2026 21:03:27 GMT"},"fingerprint":{"sha1":"BE:0D:E2:41:C3:EA:A7:56:91:25:89:FA:8E:BC:93:EF:DB:4C:EC:90","sha256":"DA:CE:04:8B:C0:2E:FC:39:31:77:3F:3A:5F:DF:7B:E1:CE:0F:23:4A:34:CA:02:77:B9:14:23:53:1E:F5:5D:B7"}}},"request":{"raw":"GET /images/R/rackspace-logo-0D6979FEF6-seeklogo.com.png HTTP/1.1\r\nHost: seeklogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nlocation: https://images.seeklogo.com/logo-png/27/1/rackspace-logo-png_seeklogo-273838.png\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-download-options: noopen\r\ncontent-security-policy: upgrade-insecure-requests; frame-ancestors 'self'\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhAm%2BwaLgStu55IHUF%2FzIMx1BqLlUWEa7CAXOnWTmBseTGy550y0z%2BxPVJbHzpOXKHIhRqEX%2Bc8W%2FWzE7OLt8eDMqzhJwp8JpHrFjnRiAim5ptQn1iP9V%2BmsU3SMNBA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a2c7053ba60b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":23,"connect":27,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.in2tech.com.au/wp-content/uploads/2019/01/owa.png","fqdn":"www.in2tech.com.au","domain":"in2tech.com.au","tld":"com.au"},"ip":{"addr":"103.146.112.110","port":443,"asn":136557,"as":"Host Universal Pty Ltd","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.107Z","timestamp":1783887929107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.in2tech.com.au","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:42:12 GMT","end":"Sun, 30 Aug 2026 10:42:11 GMT"},"fingerprint":{"sha1":"0A:65:FC:D4:E6:F9:2E:EB:22:00:11:BE:33:E8:FF:8C:3E:10:76:EA","sha256":"FA:8A:03:37:77:B2:9F:84:37:21:A9:BB:72:40:17:60:D5:CE:48:E3:77:12:93:54:64:9A:B4:2C:C6:A3:AA:D6"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/owa.png HTTP/1.1\r\nHost: www.in2tech.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 20:25:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 Feb 2019 00:27:10 GMT\r\netag: \"a26e-5c60c15e-bfd3c44315819b92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 41582\r\ndate: Sun, 12 Jul 2026 20:25:31 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41582,"size_decoded":42107,"mime_type":"image/png","magic":"PNG image data, 306 x 305, 8-bit/color RGBA, non-interlaced","md5":"19f61966f681742892120b619962f1a3","sha1":"dea063aeed0fd630125e31732fc2501379bf3a6d","sha256":"74f5a3fbfa87ce7333aefde497bc7bff81c5e1aaa21d2a7fd93dd0847ddc15f4","sha512":"2f3650cf48624cf8adb856c9a2ad3af0fcc4d57a1abcb8abe848f4a99e490209e5b100d9cc1d02ae96ed1909d7bc9fd18acd28a2ab2ff8fbf83933aa37696178","ssdeep":"768:wTiDmrLxGmA2fxmmOyDT5xUYGucXZPpqKhKOWj44JCm0Oa:wTgkNGmAPmOexUYGu4xPhB4EmS","tlshash":"5a130180d35ec8e1999882ff82ba79f074f0facbcc512919a860ea35156e857f797d10","first_seen":"2023-09-17T13:42:37Z","last_seen":"2026-07-14T14:53:55.88628Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2710,"timings":{"blocked":-1,"dns":928,"connect":293,"send":0,"wait":586,"receive":293,"ssl":609},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.crunchbase.com/image/upload/c_pad,h_160,w_160,f_auto,b_white,q_auto:eco,dpr_2/g3nygszgct3ekiiejuln?ik-sanitizeSvg=true","fqdn":"images.crunchbase.com","domain":"crunchbase.com","tld":"com"},"ip":{"addr":"3.167.2.92","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.102Z","timestamp":1783887929102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crunchbase.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2A:2E:75:40:A5:7C:97:DF:7D:2F:97:C0:49:14:AF:6D:F2:9F:F2:9A","sha256":"F9:45:F1:25:F2:4D:C3:4E:B4:60:BA:89:CF:F5:29:6E:BD:AC:10:0C:AD:5F:B9:2F:52:5B:2F:A3:D7:B9:63:E5"}}},"request":{"raw":"GET /image/upload/c_pad,h_160,w_160,f_auto,b_white,q_auto:eco,dpr_2/g3nygszgct3ekiiejuln?ik-sanitizeSvg=true HTTP/1.1\r\nHost: images.crunchbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\ncontent-length: 736\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: *\r\ntiming-allow-origin: *\r\nx-server: ImageKit.io\r\nx-request-id: 4b743089-136f-42d2-b93b-06c78ce2518e\r\ncache-control: public, s-maxage=31536000, max-age=31536000, must-revalidate\r\netag: W/\"2e0-yC5EkjZqOAu2DtTfTSzME4R+S+s\"\r\ndate: Sat, 11 Jul 2026 03:04:30 GMT\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nage: 148859\r\nx-amz-cf-id: UmfdHVFh4NzvzLXCQ97fQXzAw-xcpQ8KLQN5xX5CuwjvAS_M6eAh4w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":736,"size_decoded":1407,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0eacaa3d2cc15476ef7ca3aba653c38c","sha1":"c82e4492366a380bb60ed4df4d2ccc13847e4beb","sha256":"2fb085f551418341afb12fe0716de779ed7a174fa1bba4e302efe28c6c661361","sha512":"56b1cef8c47e1af48b4ebbede3784921516489fe199e3f370342f79a3be31fefd7b6457973e02cbece9715853f0fd831502690977cddf61504651cb3e6e0c3ef","ssdeep":"","tlshash":"1f01288567525d61dd5c0133581d43412f714375014ab31badd7f755ac399d8fd12c1d","first_seen":"2026-07-11T03:05:05.188845Z","last_seen":"2026-07-12T20:25:59.246992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":70,"connect":19,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"controlpanel.serverdata.net/content/images/icons/custom/aduser.svg","fqdn":"controlpanel.serverdata.net","domain":"serverdata.net","tld":"net"},"ip":{"addr":"104.18.40.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.104Z","timestamp":1783887929104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverdata.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 08:23:31 GMT","end":"Sun, 06 Sep 2026 08:23:30 GMT"},"fingerprint":{"sha1":"55:1F:C8:46:F8:00:53:3B:F8:29:74:5E:94:D4:F1:B8:23:90:60:69","sha256":"1F:0D:79:EF:C8:0C:23:39:82:76:08:0A:B4:9E:CB:24:FB:F9:55:38:96:59:22:40:CC:70:88:5B:DE:8B:06:D1"}}},"request":{"raw":"GET /content/images/icons/custom/aduser.svg HTTP/1.1\r\nHost: controlpanel.serverdata.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=172800\r\nlast-modified: Fri, 03 Jul 2026 09:23:52 GMT\r\nserver: cloudflare\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV\"\r\nx-powered-by: ASP.NET, ARR/3.0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=4Bfl0Ao9vc3Jnu98sdQLNLI5UU1BhTYJtZa8ks5uRhU-1783887929.277852-1.0.1.1-fWby1wyEwIcMpD6FFMOkN.gM29mZFbhltgYz49FysB_t0bP8mnJ7Et1EDmnObS_H5utdRhWHMTwiTx9pccVKZ90V94rBiAYYWU5nmdDMTye2EYqVRNmZZnMB6XI2_FsJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=serverdata.net; Expires=Sun, 12 Jul 2026 20:55:29 GMT\r\ncf-cache-status: HIT\r\netag: W/\"0c48aa9cdadd1:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a1a2c705fd8ab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1256,"size_decoded":1437,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a588d6da68b70306f3ab2cfa21f4f9b3","sha1":"3dcc2cf3854e85b6b8049814d7289bbebc48dbd3","sha256":"36f53d513f4ade6962ea9b5342113dfb07037c5c22252338ebecc6d20d4dd11e","sha512":"cec8a3695b1b2cb35f1f5fb67f82b0bc5e2f1415cd37a1095babec017a7ccfce7a7f488a0083ed5750253469b9588a3bd915499e796b4bfb1be632c1f312406f","ssdeep":"","tlshash":"8f21ddfeb264b4fa4d6a8bf88efef0c470a260dd918642dd3290082156067df3d456a4","first_seen":"2023-05-15T16:01:13Z","last_seen":"2026-07-16T06:43:35.102695Z","times_seen":170,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":133,"connect":11,"send":0,"wait":714,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.freeiconspng.com/uploads/webmail-icon-15.png","fqdn":"www.freeiconspng.com","domain":"freeiconspng.com","tld":"com"},"ip":{"addr":"78.46.22.9","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.110Z","timestamp":1783887929110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeiconspng.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 02:51:02 GMT","end":"Mon, 14 Sep 2026 02:51:01 GMT"},"fingerprint":{"sha1":"77:70:42:52:85:26:1B:3B:ED:EB:D2:38:E6:80:C4:A1:60:7F:62:76","sha256":"D6:AD:AD:7D:FD:21:45:79:2D:E2:83:75:4E:31:10:2A:5F:1E:B5:2E:98:CA:FA:A9:0A:DC:A1:E6:8D:DA:81:E9"}}},"request":{"raw":"GET /uploads/webmail-icon-15.png HTTP/1.1\r\nHost: www.freeiconspng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 45970\r\nlast-modified: Tue, 14 Mar 2017 23:16:09 GMT\r\netag: \"58c879b9-b392\"\r\ncache-control: no-cache, must-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":45970,"size_decoded":46254,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"0e0ef73176b4f970a86f0e70d560dec1","sha1":"ff4b869d440abd0385235d83353e8a67674b0803","sha256":"f7af6ac19feb9a23cdfd1a06dd6d48aec7aab1b91370c4a84ba9b59ab60e214c","sha512":"c5b0875311d4b066948e992c343629c1e0ba301b5ce9d8ae38251f31ea13141518b15b629c14031dc6bb022b8689839ccbefc329dac19b786943c06d3891ae7d","ssdeep":"768:8jUX9E5Ow+qjSL+9odv2SbWeh4EF6zbCHplTTsv2o8T2sb4ch869DNvvky/XbzpX:TN4zjS69oJ2M7h4EMnCH7TwP8T2Qn1vx","tlshash":"7423f1a2d224ccfa0af7244dd4782867e7d903be155d0bfcf3864de214a90d294ba8cd","first_seen":"2023-09-17T13:42:37Z","last_seen":"2026-07-14T14:53:55.887676Z","times_seen":11,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":109,"connect":45,"send":0,"wait":93,"receive":39,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/d/da/GoDaddy_Logo_-_The_GO.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.111Z","timestamp":1783887929111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/d/da/GoDaddy_Logo_-_The_GO.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: jawgt7shpgxoh9c5t0arap5zb58g6y5\r\nlast-modified: Sun, 21 Aug 2022 12:55:31 GMT\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9962\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/a3419a7babc6604800eb39cbf7dbe79a\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 hit, cp3077 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=c4bJMsyKm_-i8He8lg_3tQObAAAAAFvdL2Zkd_o-HEILuTd_ghSAgDHRBLUOaBbE;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 12 Jul 2027 00:00:00 GMT\r\nx-request-id: ead6810a-e35a-48b6-af28-9df546c56f7c\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2577,"size_decoded":3502,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3419a7babc6604800eb39cbf7dbe79a","sha1":"a53f88001a4fd8ec466d11e2c61e39b1f09f332d","sha256":"0fb9ee73f361cabd6f4fb132f2d5eb5e8eeb74474fcbd975f8c8208530be9e39","sha512":"b66ec4ec34440e1b411d0ccffb1cde55acc18db6ba7e531ec4ab5fd3d2e561be8ff725a358b1d7d7bd40a4788b394b4a237056144cad0c4c97d66f81f67102e3","ssdeep":"","tlshash":"db51d9835274a2f4f43dc7a7d46ac9518b5238ff7a6610cc55f7fe44eb5a24005054f8","first_seen":"2023-09-17T13:42:37Z","last_seen":"2026-07-14T14:53:55.878422Z","times_seen":6,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":162,"receive":0,"ssl":334},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/5/57/Zimbra-logo-color.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.112Z","timestamp":1783887929112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/5/57/Zimbra-logo-color.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nx-object-meta-sha1base36: l3ycxtbwkxswzhl5pybiu183hjay77c\r\netag: 06c9823ecd2f54ac11d9572a67e46450\r\nlast-modified: Sat, 10 Oct 2015 17:13:56 GMT\r\ncontent-length: 37097\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\nage: 0\r\naccept-ranges: bytes\r\nx-cache: cp3077 miss, cp3077 miss\r\nx-cache-status: miss\r\nserver-timing: cache;desc=\"miss\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=gJ5bofiMG5xnFlQYufheugObAAAAAFvdxAiW6wtER0TJNzkLc4-fVct164jhLi-K;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 12 Jul 2027 00:00:00 GMT\r\nx-request-id: a17f16c4-8b2f-4ceb-ad76-07b10be28092\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":37097,"size_decoded":39172,"mime_type":"image/png","magic":"PNG image data, 1500 x 329, 8-bit/color RGBA, non-interlaced","md5":"06c9823ecd2f54ac11d9572a67e46450","sha1":"b4b7bc4c799940e22d60dafe855f38e702699ef8","sha256":"ea0b848ab3d1e8c71600ef03f5135ff7330b653223cd5b7143381278b2aa6214","sha512":"8482c42e029b69b3ff5071a58da5f029155aaf11d992bdb287a4889ad0ad9fc8d6d5d98a78a0c16dda8c8b4f869c78edf1a992185836c53aca3499a0c92c643f","ssdeep":"768:Dr0MtLJPo/MZJAR9n2JMJ7ELREZeSGKJeTqcO:DYMXwUZAcOyEZeSGKeqH","tlshash":"7ef2e10bf72184d6cb50c176e146ad3eb45f09c5bbb9f13a38230618ec726db742989b","first_seen":"2026-02-11T09:46:05.71134Z","last_seen":"2026-07-12T20:25:59.251831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":235,"receive":25,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oj.jo/favicon.ico","fqdn":"oj.jo","domain":"oj.jo","tld":"jo"},"ip":{"addr":"192.250.239.61","port":443,"asn":51713,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oj.jo/internal/web-sso/","date":"2026-07-12T20:25:29.938Z","timestamp":1783887929938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.oj.jo","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 04:57:57 GMT","end":"Thu, 01 Oct 2026 04:57:56 GMT"},"fingerprint":{"sha1":"7B:DD:0C:12:1A:E9:67:09:0D:64:1F:04:B6:64:E9:A7:13:32:91:6D","sha256":"75:47:D8:15:7C:50:BF:70:5D:6E:FF:F2:BD:FE:95:82:11:A0:D3:FA:D0:F4:75:F5:27:EB:54:48:0D:AC:34:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oj.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=ec4c40dc6691ba4f508fa7b9544a33ee6186ee99.1783891528.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 12 Jul 2026 20:25:29 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-17T14:42:19.874573Z","times_seen":141320,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"oj.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"oj.jo","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}