r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13726
Expires: Tue, 21 Mar 2023 04:00:28 GMT
Date: Tue, 21 Mar 2023 00:11:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28774b36cf8bb6b054329393a33f6239
728313ddff6d5ceb6db3eb8445f039779616a140
08378fe6a897ab5a9c8d3bc2748c9670659d0d0d164317fdfac88d23fee78fa0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08378FE6A897AB5A9C8D3BC2748C9670659D0D0D164317FDFAC88D23FEE78FA0"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11960
Expires: Tue, 21 Mar 2023 03:31:02 GMT
Date: Tue, 21 Mar 2023 00:11:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Mar 2023 23:14:55 GMT
content-type: application/json
age: 3407
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15143
Expires: Tue, 21 Mar 2023 04:24:05 GMT
Date: Tue, 21 Mar 2023 00:11:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zZ2x2Qedfkyayo3bhHo6mmwAV7A6MApsJMD6jVtLEsM+H9NuZJHfKIouhRO9ccCqoLfM2BoD4wY=
x-amz-request-id: SE14XH0GT6T23GTA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Mar 2023 23:52:57 GMT
age: 1125
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 21 Mar 2023 00:11:42 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Mar 2023 23:14:32 GMT
age: 3431
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7219
Expires: Tue, 21 Mar 2023 02:12:02 GMT
Date: Tue, 21 Mar 2023 00:11:43 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Zb6GrPpSZT42ivkg4suAdA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YofQof4cRng5PONIb9UXJEZsEJg=
jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
301 Moved Permanently 0 B URL HTTP/1.1 jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso= HTTP/1.1
Host: jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 21 Mar 2023 00:11:42 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Expires: Tue, 21 Mar 2023 01:11:44 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Set-Cookie: qtrans_front_language=en; expires=Thu, 21-Mar-2024 00:11:43 GMT; Max-Age=31622400; path=/; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Vary: Accept-Encoding
Content-Length: 0
Keep-Alive: timeout=5
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17948
Expires: Tue, 21 Mar 2023 05:10:52 GMT
Date: Tue, 21 Mar 2023 00:11:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17948
Expires: Tue, 21 Mar 2023 05:10:52 GMT
Date: Tue, 21 Mar 2023 00:11:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17948
Expires: Tue, 21 Mar 2023 05:10:52 GMT
Date: Tue, 21 Mar 2023 00:11:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F450a7216-1468-4600-bf16-dcda5d72733e.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F450a7216-1468-4600-bf16-dcda5d72733e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 07b787370d844cd515ddd9fa2f18dd2f
05af207b7d57654a46bcbaa335b05b05cdc03d48
37064c2c7234ff6172959969ba6d56decc8e8900c9a8f7ef177db7198144a7ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F450a7216-1468-4600-bf16-dcda5d72733e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: dabbce3d-fb36-404d-8b37-3bafed979062
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWjFFfBIAMFdMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d146-5cdf621e6196e46f7a1e849c;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:33:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Anx47g-q0flhxg1Cl9SwKS3vGlWvQb_0TE74szKGGTiB6oY-QFsDPA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 22:02:19 GMT
age: 7765
etag: "05af207b7d57654a46bcbaa335b05b05cdc03d48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b5e25da-048a-413a-a665-a2f7722e7a8b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b5e25da-048a-413a-a665-a2f7722e7a8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e14006bd4b8766e373bc11e21bba6c42
70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4
31c962ccd63afaa71a162c7f8b0b259347bd52630427f2387dcdd46ca2bf062f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b5e25da-048a-413a-a665-a2f7722e7a8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5906
x-amzn-requestid: aa937d0b-da54-4bf4-a47f-662bea154a65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CEYMXEk7oAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418071b-63ccde3f35f1d1496cc313f4;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 07:11:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: JjQvye-Y8ibUfYdT-xhMX-VqJ-tI8cuGtZsYXoiM5aodryC7FSZs1g==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 07:30:42 GMT
age: 60062
etag: "70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30f3b190-942a-4719-9acd-24de4ce3cffb.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30f3b190-942a-4719-9acd-24de4ce3cffb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d65964786df6f0974add4e6e1557e8b
b0516c8fc89a28344607b18953f4ca6a47f3a766
13b494cee4481fda312d2496d64e6bf538af3560c3147e6d4644a55b53b03874
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30f3b190-942a-4719-9acd-24de4ce3cffb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5250
x-amzn-requestid: e58ccd5e-c06b-4151-a89d-e5be457173a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5YtUFCwoAMF_zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6413a188-2b2a7f1d27d6e0572129b0e6;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 23:08:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zQ6L2s3xwbvsONs5XOxEPgdkEJK-TkmYfs1JesWRj4uY1PVayfSJRA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 08:32:32 GMT
age: 56352
etag: "b0516c8fc89a28344607b18953f4ca6a47f3a766"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b8211ace94cc818c0b092a0f8c24c7e
785e7ca94d770a89c2d738d38c880d676bf14652
f14171e1bf278f881e63d81884e84b0395f37871bfdad187c57ee8b1c337602d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10326
x-amzn-requestid: 21739424-faef-436b-9024-5354854b622c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI8E4poAMFsvg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-1627c1db7ff0c2f05f9c4e6e;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Of4HaJ0jyQi4UtDzfCkHvtGbM96VDYUBzPhhf2icz-g47rIM9Zdz7Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:43 GMT
age: 8761
etag: "785e7ca94d770a89c2d738d38c880d676bf14652"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67a217c6c45d72018d90227abf59bc56
6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0
a62f8a087ec5ea1e758857cc64b53478f26a9fad180fc16191b12017fc5b59e4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7254
x-amzn-requestid: 478965d1-a7ad-45a5-bff2-c08d81bf6bd7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6evIEwPoAMF-Pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141193-0f83de050b14ff0d420bb74d;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:06:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RZ17RxytmDO8a0hosUh9GqkpSbEHpMo1L0hRjWx5yTbRFGWzBAVN6Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 f958a3846d80a3925f664b320dfad9c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 04:51:56 GMT
age: 69588
etag: "6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80b8965f-0f1d-477d-b284-4d1e59649cf0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80b8965f-0f1d-477d-b284-4d1e59649cf0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 549399285b0e626c036b5a3f7923acb7
47fc867d2850248a0cf58ffe6344bc723c567a92
ebee0635c9e51d080a113627a278b1af7f6e440754a1a43a201dc5e3e2392d5d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80b8965f-0f1d-477d-b284-4d1e59649cf0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12272
x-amzn-requestid: 92cdffc1-5ab5-4579-99ae-8f8d7fe7453d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWjFFxfIAMF7UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d146-3e0b9ead0718e199373ff06a;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:33:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 408SujdURTeUV20k71o-5tJ-ZwsNmGfqLdZtj7GTnoaPAv3MCcVN5g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 22:02:12 GMT
age: 7772
etag: "47fc867d2850248a0cf58ffe6344bc723c567a92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
301 Moved Permanently 1 B URL HTTP/2 jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
GET /online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso= HTTP/1.1
Host: jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.33
expires: Tue, 21 Mar 2023 01:11:46 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
set-cookie: qtrans_front_language=en; expires=Thu, 21-Mar-2024 00:11:46 GMT; Max-Age=31622400; path=/; HttpOnly
location: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Tue, 21 Mar 2023 00:11:45 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
404 Not Found 11 kB URL HTTP/2 www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 76a9e7d1162a56461fbc068dd9f82b98
8b707bf998f3a23c1036a7c890859820e7844db8
39add17ef598426aa1b398f2da6f8efbaefbf5799b20f450614d1a644b51f287
GET /online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso= HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.jkcementuae.com/wp-json/>; rel="https://api.w.org/"
set-cookie: qtrans_front_language=en; expires=Thu, 21-Mar-2024 00:11:47 GMT; Max-Age=31622400; path=/; HttpOnly
vary: Accept-Encoding
content-encoding: br
content-length: 10923
content-type: text/html; charset=UTF-8
date: Tue, 21 Mar 2023 00:11:46 GMT
server: Apache
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animate.css
200 OK 3.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animate.css
IP
Hash 2a8a053b69fc4e42676179931d3119a0
e2064b43e9cee2974d954500703ce44b053d42ea
4f4c6fab8c6a4d0075a86aee9bf13665c5343d4f6b381b2404c702e83738aea7
GET /ajax/libs/animate.css/3.5.2/animate.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 00:11:48 GMT
content-type: text/css; charset=utf-8
content-length: 3541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d2a-11a43"
last-modified: Mon, 04 May 2020 16:04:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1756643
expires: Sun, 10 Mar 2024 00:11:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2FZHDSkeSUPYbKz220nLq0QzTJTBeU3HSNQu2lYths8ApWflfg8wcKbofdydeKVdaNulZ0UReqZrO023IuP7%2BOvOci%2BBVMhW%2Fu%2FffwV25NkdUbnvgrtYChjFdB8XplrQF3GEnh5O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ab1facbddb4b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js
200 OK 2.3 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js
IP
File type ASCII text, with very long lines (8152)
Hash 97c687af34ccd69fdfe48fbca70afec2
ab75720b2143215335378849e4f295a290d4d41f
748b1da138fb49f26c67ae1eaa8908da0b8c9625ad0ece81d704a7fb9a7d07b5
GET /ajax/libs/wow/1.1.2/wow.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 00:11:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 2346
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04033-1ff6"
last-modified: Mon, 04 May 2020 16:17:55 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 502215
expires: Sun, 10 Mar 2024 00:11:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6b24Gr8js38W4S0zkltbz4Nzp1OL5PBaZguDboOzpThllmGOa9kbrVlb7gotadXJlBISnylS9Q9ZE1pdfpiSShAypbfLhg2shW7t3GuDy1hG5fWFiQpzGMHiV9848zBoS64qJgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ab1facbddb8b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ac4671deeca3302950bd5fce7f4ce3f
62b5d0c548949ee8d932231fcd01196cefc896aa
e4adf52f426f89cbc5a61507b21d33c817e5b8cee1e2709fe3ffecc1ec0c8731
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8252dadd968ec1f294252ff1328a1f08
8612446f27ae9ce296270c969845a784dcc7569b
84717d4c360be2750d3e28827fa865c9616395cd3463ac03245b57baa8887e35
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ac4671deeca3302950bd5fce7f4ce3f
62b5d0c548949ee8d932231fcd01196cefc896aa
e4adf52f426f89cbc5a61507b21d33c817e5b8cee1e2709fe3ffecc1ec0c8731
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-1.11.3.min.js
200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-1.11.3.min.js
IP
File type ASCII text, with very long lines (32038)
Hash 1c8acbf5f411ace3b76578a1fd1a603e
b1bbee9db24d885c25afd2e5a7720e4f79b6b991
e37464521b5447580a641b775ddb258a76f3bc7a3ca5a34eb452b12908b350a9
GET /jquery-1.11.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 00:11:48 GMT
content-encoding: gzip
content-length: 33261
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-176d5"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679357508.dop009.sk1.t,1679357508.cds260.sk1.hn,1679357508.cds216.sk1.c
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-188447533-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-188447533-1
IP
File type ASCII text, with very long lines (2206)
Hash 4d530b1825619cb469b055f0fd145208
8f9c6c48af2cb7937fd3df770ebc47ed22ca8d6e
a58fd41b0e9f6abec668eb7b93c0d0cd33a68d1835d9ab503ab278688eca0145
GET /gtag/js?id=UA-188447533-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 21 Mar 2023 00:11:48 GMT
expires: Tue, 21 Mar 2023 00:11:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800&display=swap
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800&display=swap
IP
Hash 91d2263d8c8ebd673328d68b97a0e0a6
d763dc0e4ef3f7caf3be0470e7e5e6ea99f0be89
b6f37f5be6429e7e7457daf0a86f9d687299be479714ce0786a33cd2ac63424a
GET /css?family=Open+Sans:300,400,600,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 21 Mar 2023 00:11:48 GMT
date: Tue, 21 Mar 2023 00:11:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Kulim+Park:200,300,400,600,700&display=swap
200 OK 919 B URL HTTP/2 fonts.googleapis.com/css?family=Kulim+Park:200,300,400,600,700&display=swap
IP
Hash 068ffcb2f0237b95a633afe16e625032
e32d0c900ceddfc27af43cb35b504237d5bd16ad
8ba4dde072d361611b4ac149d5f0e0ba5b7e956a61c2563f31f81c77fac571ee
GET /css?family=Kulim+Park:200,300,400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 21 Mar 2023 00:11:48 GMT
date: Tue, 21 Mar 2023 00:11:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2.21
200 OK 995 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2.21
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (4684)
Hash 5786602b171af40acd5b7aa4fd701683
c9857fc2ed2072de5475b66216174d9d212d436c
e24529d8d5341871fcd1c24fb76a70484efbfdf40168a28ffe3102fcd16ec4e1
GET /wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2.21 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:57:20 GMT
etag: "a9e0160-124d-5e0dbf7a0d76a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 995
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/searchbtninner.png
200 OK 1.3 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/searchbtninner.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a3b17758be7c23d5aac0dbf3ec32044
0f2f61f59fae5de5b1cb1c5d7fd4dd3b2aa020af
a80d0c0e315b7e0f4fdd3403ba9b646c8c9c737574b14387dc6e1409c794e87d
GET /wp-content/themes/jkcement/images/searchbtninner.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Jan 2020 06:17:43 GMT
etag: "a520836-4ff-59b0e08cc2fc0"
accept-ranges: bytes
content-length: 1279
content-type: image/png
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 www.jkcementuae.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (11126)
Hash 1fbb59519536e28eeb7ae7173973c39f
f6542c5d0f96f621eea4f3cb442021dfe33863fa
b1b54befd52c3605721bf8b5a6c0290c572929138358738826873751256b191c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 31 Jan 2021 05:41:59 GMT
etag: "a5438f4-2bd8-5ba2bb2307807-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3998
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/style.css
200 OK 12 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/style.css
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 512a761330aee07a23974bcb9454ce1d
ea1b41e96faeba49e22d2e6ba6264bc97714df4e
a8d2f1205310d6482f5787c9aebfa7f2beeacc44a597c9a977071bad007e5298
GET /wp-content/themes/jkcement/style.css HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Jun 2020 10:36:29 GMT
etag: "a520947-f933-5a8e62a4ba85f-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 12420
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 11 kB URL HTTP/2 www.jkcementuae.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (43771)
Hash 069a79d16ded6a02071f286cd2025c44
dd5970e01b8a10dadcf074f72a1c8095f25e947a
78261bccee805c6913bf7e23e2e25314f05f690300a77a40ca36e1e516b20203
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:11:56 GMT
etag: "a541f40-15b64-5e770ef0c47ca-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 10912
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24
200 OK 970 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (4058), with no line terminators
Hash be25d71f0b2d83c4b0905c1dc7506c31
485b50f80b90e1904172d8f82945636815b9fc85
fbcc5e878dafb7ff3f1bfc130c9157fd19acff79a6cc0c14f4e4c08cdd94ceb0
GET /wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:02:25 GMT
etag: "a4e0c49-fda-5e770cd0551b5-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 970
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
200 OK 849 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 206db6362f8b7f33b19b3cdbd3a9d057
8985a296fa427906875c57f2725c5b44488a7ab3
649ae4ae461fd7aadfc63f0cb914cb996e2559778721f82dc40daacc06c595d2
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 12:47:15 GMT
etag: "a4a189f-aab-5e8019888766f-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 849
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 30 kB URL HTTP/2 www.jkcementuae.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65447)
Hash d5935cacfd471ce64891335a0e163f0f
883b406801168b978994e8d8c7f252a31321cf61
caea13ed31fcdedf7f54e2383e8a64c1d86d6767c11f227c046ab2952a7d3ce9
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:11:57 GMT
etag: "a542a5b-15db1-5e770ef1b1cb0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 30310
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/css/jquery.powertip.min.css?ver=1.2.0
200 OK 340 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/css/jquery.powertip.min.css?ver=1.2.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1805), with no line terminators
Hash fa7f9bb8a9ad092ff899d347299f9a45
e86603d039a7c6c5fdd92c6d1a50922c08d49d89
a53a711a0881bb6574523a6bcf3ce18c585d803b7826c000b8c308e03dcd8d80
GET /wp-content/plugins/devvn-image-hotspot/frontend/css/jquery.powertip.min.css?ver=1.2.0 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:56:40 GMT
etag: "a720198-70d-5e0dbf53ee1f5-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 340
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/css/maps_points.css?ver=1.2.2
200 OK 1.4 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/css/maps_points.css?ver=1.2.2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash a9b762c322ab962fc41bf80e98dc3dad
0a4b2190bd57c81bfae3f13c102d757edcc9f1b7
33bab7ce8d5597374545ef11afbf15c617a689f4dcf2a974b936531a3838f1ae
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/devvn-image-hotspot/frontend/css/maps_points.css?ver=1.2.2 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:56:40 GMT
etag: "a720197-1c2f-5e0dbf53ee1f5-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1364
content-type: text/css
date: Tue, 21 Mar 2023 00:11:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/langinner.png
200 OK 1.4 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/langinner.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 53 x 21, 8-bit/color RGB, non-interlaced\012- data
Hash 33d41d10d512e9233c6432684ef76f0d
4c3cb78f1322337c6e7addd0593d7e5fff5d7ded
74ecb7c7970dd468652f43b3ca7b739cfe3fe9556df734dc359d5a34bab23508
GET /wp-content/themes/jkcement/images/langinner.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Jan 2020 06:17:17 GMT
etag: "a520939-592-59b0e073f7540"
accept-ranges: bytes
content-length: 1426
content-type: image/png
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/uploads/wpmss/wpmssab.min.js?ver=1578639131
200 OK 53 B URL HTTP/2 www.jkcementuae.com/wp-content/uploads/wpmss/wpmssab.min.js?ver=1578639131
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with no line terminators
Hash 8cbb53a26c4562a4993dd9fed96c4ea1
ca1f1057e1a0df118c962ee39cd54f886b7dc22a
3e904028092753ca54c0c88ea0ba12c03b0470f3032560a43791a4bd4350de43
GET /wp-content/uploads/wpmss/wpmssab.min.js?ver=1578639131 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Jun 2020 12:05:33 GMT
etag: "a4a0e0e-31-5a8e768d9dd77-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 53
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/js/maps_points.js?ver=1.2.2
200 OK 255 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/js/maps_points.js?ver=1.2.2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash 51d4c9aec6e014e0683be70964214c6a
151ab2eccf32db282094c730532494833ba95dab
7a8ef15c1e922d781fb1a518275adabdb38adbfabea8c7a8053489e7bc648439
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/devvn-image-hotspot/frontend/js/maps_points.js?ver=1.2.2 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:56:40 GMT
etag: "a72019a-274-5e0dbf53ee9c5-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 255
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/uploads/wpmss/wpmss.min.js?ver=1578639131
200 OK 140 B URL HTTP/2 www.jkcementuae.com/wp-content/uploads/wpmss/wpmss.min.js?ver=1578639131
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with no line terminators
Hash 422930bfa71c582896b1af2abb83b793
0b215dc5aeff304f628088c60a05b8a4edf303bd
9f06dee0d3e6172251b6c9c0277bb422566d134b869ac6b3a235ee69109df2ac
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/wpmss/wpmss.min.js?ver=1578639131 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Jun 2020 12:05:33 GMT
etag: "a4a0e0f-c6-5a8e768d9ed17-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 140
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.easing.min.js?ver=1.4.1
200 OK 734 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.easing.min.js?ver=1.4.1
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2301)
Hash 5c5f8c08d60c6c86526cc23d1d6a9590
c7702c9901c40e904b1af9d8df9fa7711de60621
47c06302408ada24b594778e38360eff83553b1b83be06a9fa446389bcb25fcb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-fancybox/js/jquery.easing.min.js?ver=1.4.1 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:02:25 GMT
etag: "a4e0c56-8fe-5e770cd055d6d-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 734
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.mousewheel.min.js?ver=3.1.13
200 OK 1.1 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.mousewheel.min.js?ver=3.1.13
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2608)
Hash a5c999dde8262b71dac9b50b7685ba4d
2c52007196da4b268ef0d3f3243878804220ef9c
0aeb0620b9abf488ea96c7223ce6665a9ae9582454b0b4ff198e82d3dfa55c1b
GET /wp-content/plugins/easy-fancybox/js/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:02:25 GMT
etag: "a4e0c55-a31-5e770cd055d6d-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1051
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/mousewheel-smooth-scroll/js/SmoothScroll.min.js?ver=1.4.10
200 OK 3.0 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/mousewheel-smooth-scroll/js/SmoothScroll.min.js?ver=1.4.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (7551), with no line terminators
Hash abb5e6fd31a40b84f0e853ff13761b7f
3ce91cd3fba2fa758f9a1364244d4ad35cb34109
c21e6dfc397de03fd5f768d2457ef5d8799fd20a8b8a3a86e6947921df64179f
GET /wp-content/plugins/mousewheel-smooth-scroll/js/SmoothScroll.min.js?ver=1.4.10 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:56:51 GMT
etag: "a72012d-1d7f-5e0dbf5e4a7bb-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3035
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/validate/languages/jquery.validationEngine-en.js?ver=2.21
200 OK 2.4 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/validate/languages/jquery.validationEngine-en.js?ver=2.21
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1219), with CRLF line terminators
Hash 1fb6f7cc6300f59b7947b8223044b5b7
0196e5cdde477f30d5da697a2f94ec2e968f6dd0
be9837b37947d1596ef14e016bb06534016078cc162c99c22f39c02e8a64e58b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wysija-newsletters/js/validate/languages/jquery.validationEngine-en.js?ver=2.21 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:57:20 GMT
etag: "a9e02b6-2c88-5e0dbf7a1546a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2396
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
200 OK 3.7 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash c08a16213ed1832b05b8110d7b1a7a9c
24e2988f443274c1c88e6215e47206b785297a33
1344f4ec6912a35edd4bfe2c9a2ae0021f1a8bb4f4c8cb1fdda2a116c52512d3
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 12:47:15 GMT
etag: "a4a2c33-2fb3-5e8019888c48f-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3691
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/front-subscribers.js?ver=2.21
200 OK 930 B URL HTTP/2 www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/front-subscribers.js?ver=2.21
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3177), with no line terminators
Hash 29ec2ea60f7a98d676485f92c04ea06b
2a5d79782e1557981f53d010c2c460be9007930d
0e7162e2bc7e0c54e0d74f10a7fe4f8b14fcfce7fc60f3ea59b2d055224dd2d7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wysija-newsletters/js/front-subscribers.js?ver=2.21 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:57:24 GMT
etag: "a9e0398-c69-5e0dbf7d88d39-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 930
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.fancybox.min.js?ver=1.3.24
200 OK 6.0 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/easy-fancybox/js/jquery.fancybox.min.js?ver=1.3.24
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document, ASCII text, with very long lines (19791), with no line terminators
Hash fa46c6f33521b896c206c0cb79851ca7
882429e77c1368778d1efbb8fc8c625de5b49e69
79692ee0463928088f4594172b2162937f47eac9cb6093f4babb5e057119c7f8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-fancybox/js/jquery.fancybox.min.js?ver=1.3.24 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:02:25 GMT
etag: "a4e0c52-4d4f-5e770cd055d6d-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 5953
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/js/jquery.powertip.min.js?ver=1.2.0
200 OK 3.8 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/devvn-image-hotspot/frontend/js/jquery.powertip.min.js?ver=1.2.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (10731)
Hash 148a490e450583da3a851fe22376351c
aefbd657694abec30d6b296b8bd8958de67da792
42d57e243b0a8591fcbd73d94bdb89f281d1f4c7de25098c3c1b61c940c6415e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/devvn-image-hotspot/frontend/js/jquery.powertip.min.js?ver=1.2.0 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:56:40 GMT
etag: "a7201c1-2ae5-5e0dbf53ee9c5-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3816
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
200 OK 2.8 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (9680), with no line terminators
Hash 7645c326acd4c17501ecf4a6057b8676
81c59d61795c5c52394866f826ea111407e521fe
e780028e160e689527fe0040bfb6b7cbb3665ac56fe2464e965678dd0c12becd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 12:47:15 GMT
etag: "a4a185e-25d0-5e80198887287-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2798
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c26dba42c0d5a8ae943ac677b38929ea
21c68777a8249158f53f6f1bbf33d12769146cec
a890859401ea2f9079622841f24a700215fcab7fe291d0b1f581e675ae130342
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c26dba42c0d5a8ae943ac677b38929ea
21c68777a8249158f53f6f1bbf33d12769146cec
a890859401ea2f9079622841f24a700215fcab7fe291d0b1f581e675ae130342
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/kulimpark/v14/fdN79secq3hflz1Uu3IwhFks5A.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/kulimpark/v14/fdN79secq3hflz1Uu3IwhFks5A.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16372, version 1.0\012- data
Hash 89ad2581ab8f13d2070589df29a20b81
51ec1c4ef801ddfb3576fdbb19e12476e9ad489f
f422e23ef80dafac79c3b8e259d306145f42cf213bde2502e6fd5f79eb3750f6
GET /s/kulimpark/v14/fdN79secq3hflz1Uu3IwhFks5A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jkcementuae.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:34:07 GMT
expires: Thu, 14 Mar 2024 11:34:07 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 16:43:26 GMT
content-type: font/woff2
age: 477462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/kulimpark/v14/fdN49secq3hflz1Uu3IwjOIJ8alQZA.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/kulimpark/v14/fdN49secq3hflz1Uu3IwjOIJ8alQZA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16124, version 1.0\012- data
Hash bf84c0e29ca41356daca2e41899ed85f
6d74f6bc9cd74af2f10bffd5ccbfe4eefc4e0cdd
aefa82840baaf1713eacbf6761c032086d1eae752eef3810aa1dbc19b060a15a
GET /s/kulimpark/v14/fdN49secq3hflz1Uu3IwjOIJ8alQZA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jkcementuae.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 12:26:22 GMT
expires: Fri, 15 Mar 2024 12:26:22 GMT
cache-control: public, max-age=31536000
age: 387927
last-modified: Tue, 26 Apr 2022 15:46:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c26dba42c0d5a8ae943ac677b38929ea
21c68777a8249158f53f6f1bbf33d12769146cec
a890859401ea2f9079622841f24a700215fcab7fe291d0b1f581e675ae130342
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.jkcementuae.com/wp-content/themes/jkcement/js/main.js
200 OK 2.8 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/js/main.js
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 22b257a90b7163e4f70675e72bd3c09c
885f71688c581c285877edfc294b7e6d7d6b38d4
00f49c99525bc5c2f0b9fa8b44251d7bfb3e3a64407d66ebfd3e0a1bb0e62c0a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jkcement/js/main.js HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jun 2020 07:54:28 GMT
etag: "a520a82-31a8-5a78deb9941f1-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2844
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/css/library.css
200 OK 26 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/css/library.css
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65321)
Hash 653d9eb6c6d9b7d54459da474612628f
47826239165ecac457131b5df788872fcb26035d
a98f6fd30914fdde579b659499fc0ffce43ff4f0ab3c3094423dbc824788fa46
GET /wp-content/themes/jkcement/css/library.css HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Jan 2020 07:29:20 GMT
etag: "a520a7d-2b4f7-59d424c79b400-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 25493
content-type: text/css
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/validate/jquery.validationEngine.js?ver=2.21
200 OK 16 kB URL HTTP/2 www.jkcementuae.com/wp-content/plugins/wysija-newsletters/js/validate/jquery.validationEngine.js?ver=2.21
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (474), with CRLF line terminators
Hash 43281d9277cf2cbbbc51c9e3f453efca
99c786be081551cb2dd1e49f92dbd602379cdb68
700500ccafa276fbdf88d4c411dcb7876b999cdb6ea0acc9ce90a9aa4437d17f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wysija-newsletters/js/validate/jquery.validationEngine.js?ver=2.21 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 13:57:20 GMT
etag: "a9e02d4-11841-5e0dbf7a15852-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 16208
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/js/library.js
200 OK 46 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/js/library.js
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (48664), with CRLF line terminators
Hash ffed34ebe240743b72ab5a3a8307b730
51649b6cb38bfd36e44b6b3444419e322906fca9
cb3312869af0392d62fb84efb5e3ddd6e63c5f6388aabdefff42831fe7647c12
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jkcement/js/library.js HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Dec 2019 10:59:44 GMT
etag: "a520a81-2c08e-59a994651e800-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 45725
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 4.6 kB URL HTTP/2 www.jkcementuae.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15660)
Hash a0083d25b89ea80ecd2393db9f865d62
24eaf2df7c722fb13f2b5bf77ada5ee446720c25
f7533cb93f2efbb9e3bccfa9ff4036a2cafa7dd1bd4d66bea4833306b321e957
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 08:12:08 GMT
etag: "a5439be-48b9-5e770efc39dad-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4614
content-type: application/javascript
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/default.jpg
200 OK 31 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/default.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x348, components 3\012- data
Hash 56147a67258510d10f3c7d67f6b7c119
3c55a90edd012cfc432e2808515017db58a50cee
c172e444f6f3a86a2bbfb5075b228ebb257d95aad892c93a09c17cd3673b7db9
GET /wp-content/themes/jkcement/images/default.jpg HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Jan 2020 06:21:07 GMT
etag: "a520865-7ac2-59b0e14f4fac0"
accept-ranges: bytes
content-length: 31426
content-type: image/jpeg
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/footerdots.png
200 OK 3.9 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/footerdots.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 135 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash 85ba52e1f6407c79986f31ffc627650e
d91c87fe40862f6c88f964ffa0dc18f3972b97a2
010a66eda3b177e88015906befd3414bfc20ec5cf23b826429864a71021c2946
GET /wp-content/themes/jkcement/images/footerdots.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Dec 2019 05:10:30 GMT
etag: "a5208c2-f0a-59aa883349d80"
accept-ranges: bytes
content-length: 3850
content-type: image/png
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/subscribebtn.png
200 OK 1.3 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/subscribebtn.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 25 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 08b2a5abfcf8d41b71c20e8cdeca00ac
49cba1d9d463cb8efafe5e55e6144bc71171aecd
b45ecebbf3bd4ea447accd11f5e284a4d875ba1e6c25df71def79449fc87ad18
GET /wp-content/themes/jkcement/images/subscribebtn.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Dec 2019 05:11:46 GMT
etag: "a520913-535-59aa887bc4880"
accept-ranges: bytes
content-length: 1333
content-type: image/png
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/images/footerbgrihgt.png
200 OK 7.8 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/images/footerbgrihgt.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 254 x 259, 8-bit/color RGBA, non-interlaced\012- data
Hash 39af25751c908b670d16dc1f02ed7464
98be35169955d445ae18ae6cf3ef92d49b129316
67d0423d0f72e64de44a57bf23524b3141cde920e5542f0a194823ae07a90593
GET /wp-content/themes/jkcement/images/footerbgrihgt.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Dec 2019 05:11:10 GMT
etag: "a5208f8-1e8c-59aa88596f780"
accept-ranges: bytes
content-length: 7820
content-type: image/png
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/fonts/montserret/montserrat-extrabold-webfont.woff2
200 OK 27 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/fonts/montserret/montserrat-extrabold-webfont.woff2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 26780, version 1.0\012- data
Hash 7fbce0b3d575319a08a5efb27990aa2f
ee815f5d5d2b4336b9b33df0498cc0e71e504c44
d82b7148d488bfea3146bceb7a731768ca752af8ee218a0af5fa295f0f27b351
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jkcement/fonts/montserret/montserrat-extrabold-webfont.woff2 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Dec 2019 20:03:44 GMT
etag: "a520a37-689c-59aa0dfd0c800"
accept-ranges: bytes
content-length: 26780
vary: Accept-Encoding
content-type: font/woff2
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/fonts/montserret/montserrat-semibold-webfont.woff2
200 OK 26 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/fonts/montserret/montserrat-semibold-webfont.woff2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 25956, version 1.0\012- data
Hash 770e1993d33a9d4cfc695f42a1377b8a
16004c8b00e5ea8b8485fe873515639a30368292
7311bedf20ef49c75dcc669d01fc9874d8d9eff93d5afe20ace2f8f4cf56685b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jkcement/fonts/montserret/montserrat-semibold-webfont.woff2 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Dec 2019 20:03:44 GMT
etag: "a520a6d-6564-59aa0dfd0c800"
accept-ranges: bytes
content-length: 25956
vary: Accept-Encoding
content-type: font/woff2
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/uploads/2019/12/logo-1.png
200 OK 6.8 kB URL HTTP/2 www.jkcementuae.com/wp-content/uploads/2019/12/logo-1.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 67 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 1002965f4025fae3e2d27681d2c5a454
39217fc1115d0520acf7a96fdb6727fc65f91385
5b86e9047a51ce7a28748644cd68b27edeace889854d4d75db8dd5b496b1482f
GET /wp-content/uploads/2019/12/logo-1.png HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Dec 2019 06:57:58 GMT
etag: "a4a1948-1a6f-59aaa03894980"
accept-ranges: bytes
content-length: 6767
content-type: image/png
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 20 Mar 2023 23:53:25 GMT
expires: Tue, 21 Mar 2023 01:53:25 GMT
cache-control: public, max-age=7200
age: 1105
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4599403a49a361c750d6c7d8a410c743
a9bbdec66280f7ee5c4766ccc45fddbad16af2c3
80a17a133e51c6dadd6dc8f6b72dc3d6088110cd12de5fdf1a8286be09207e22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2111
Cache-Control: max-age=133595
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:50 GMT
Etag: "641854e2-1d7"
Expires: Wed, 22 Mar 2023 13:18:25 GMT
Last-Modified: Mon, 20 Mar 2023 12:43:14 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: VqANiTXKlICH0XAL7D8BtHdxJyC4mTRLAvp6Gr/aSXGkKANviZSz4YD+rp3YVIjUS7+M1ZSTfLoytkggXHMvIw==
content-length: 27907
x-fb-trip-id: 1679558926
date: Tue, 21 Mar 2023 00:11:50 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4599403a49a361c750d6c7d8a410c743
a9bbdec66280f7ee5c4766ccc45fddbad16af2c3
80a17a133e51c6dadd6dc8f6b72dc3d6088110cd12de5fdf1a8286be09207e22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2111
Cache-Control: max-age=133595
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:50 GMT
Etag: "641854e2-1d7"
Expires: Wed, 22 Mar 2023 13:18:25 GMT
Last-Modified: Mon, 20 Mar 2023 12:43:14 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
www.jkcementuae.com/wp-content/themes/jkcement/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jkcement/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jkcementuae.com/wp-content/themes/jkcement/css/library.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 22 Dec 2016 10:50:34 GMT
etag: "a5209ca-12d68-5443d09f07280"
accept-ranges: bytes
content-length: 77160
vary: Accept-Encoding
content-type: font/woff2
date: Tue, 21 Mar 2023 00:11:49 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43229f902489cc88a3b8f77dea901852
28e63d8d5a952b9e568cad6feda0e211e1fbfdda
245bfd30b6d87d590e50452fd8672d82d9d441242b4603fcc007e70b6a56685b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-188447533-1&cid=1335732312.1679357512&jid=92195288&gjid=1160443882&_gid=164080553.1679357512&_u=YEBAAUAAAAAAACAAI~&z=1805460318
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-188447533-1&cid=1335732312.1679357512&jid=92195288&gjid=1160443882&_gid=164080553.1679357512&_u=YEBAAUAAAAAAACAAI~&z=1805460318
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-188447533-1&cid=1335732312.1679357512&jid=92195288&gjid=1160443882&_gid=164080553.1679357512&_u=YEBAAUAAAAAAACAAI~&z=1805460318 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.jkcementuae.com
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.jkcementuae.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 21 Mar 2023 00:11:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.jkcementuae.com/wp-content/themes/jkcement/favicon.ico
200 OK 3.2 kB URL HTTP/2 www.jkcementuae.com/wp-content/themes/jkcement/favicon.ico
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash 9b6b9f6a00a85f72f47c846c85745ff2
b870c411dcf736d9436caf0bca63d892832317ac
238f0e2a22f36445cfdfbac8166d08b3cf344fe1802e791fab9ad46fb89a8a85
GET /wp-content/themes/jkcement/favicon.ico HTTP/1.1
Host: www.jkcementuae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/online/login.php?online_id=5858e5badbb73944258c1f82a&country=&iso=
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Dec 2019 05:23:54 GMT
etag: "a520a88-1536-59aa8b320ae80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3245
content-type: image/x-icon
date: Tue, 21 Mar 2023 00:11:50 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43229f902489cc88a3b8f77dea901852
28e63d8d5a952b9e568cad6feda0e211e1fbfdda
245bfd30b6d87d590e50452fd8672d82d9d441242b4603fcc007e70b6a56685b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 21 Mar 2023 00:11:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=283365779307531&ev=PageView&dl=https%3A%2F%2Fwww.jkcementuae.com%2Fonline%2Flogin.php%3Fonline_id%3D5858e5badbb73944258c1f82a%26country%3D%26iso%3D&rl=&if=false&ts=1679357512226&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679357512225.499416545&it=1679357511847&coo=false&exp=b2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=283365779307531&ev=PageView&dl=https%3A%2F%2Fwww.jkcementuae.com%2Fonline%2Flogin.php%3Fonline_id%3D5858e5badbb73944258c1f82a%26country%3D%26iso%3D&rl=&if=false&ts=1679357512226&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679357512225.499416545&it=1679357511847&coo=false&exp=b2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=283365779307531&ev=PageView&dl=https%3A%2F%2Fwww.jkcementuae.com%2Fonline%2Flogin.php%3Fonline_id%3D5858e5badbb73944258c1f82a%26country%3D%26iso%3D&rl=&if=false&ts=1679357512226&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679357512225.499416545&it=1679357511847&coo=false&exp=b2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jkcementuae.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 21 Mar 2023 00:11:50 GMT
X-Firefox-Spdy: h2
43.255.154.24
34.160.144.191
104.17.25.14
157.240.205.35
23.36.76.226