Report - fulsar.blogspot.mk/

Report Overview

Submitted URL
fulsar.blogspot.mk/
IP
216.58.207.193
ASN
#15169 GOOGLE
Submitted
2024-05-04 07:41:28
Access
public
Website Title
ALDO VIEWER I
Final URL
ald.my.id/#gsc.tab=0
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lawyer99firm.blogspot.com	unknown	unknown	No data	No data	2.9 kB	28 kB	216.58.207.193
cdn.rawgit.com	8186	2014-03-20	2017-01-30	2024-05-02	844 B	2.2 kB	194.242.11.186
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-03	1.3 kB	7.8 kB	151.101.1.229
fulsar.blogspot.mk	unknown	unknown	No data	No data	473 B	684 B	216.58.207.193
fulsar.blogspot.com	unknown	2000-07-31	2023-09-17	2024-02-12	1.5 kB	31 kB	216.58.207.193
ald.my.id	unknown	2022-02-08	2022-02-11	2024-02-13	9.2 kB	28 kB	198.252.106.147
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-03	1.3 kB	94 kB	172.217.21.170
cse.google.com	2642	1997-09-15	2015-03-18	2024-05-04	1.7 kB	94 kB	142.250.74.174
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	6.4 kB	374 kB	216.58.211.4
clients1.google.com	415	1997-09-15	2013-02-01	2024-05-02	1.3 kB	560 B	142.250.74.110
via.placeholder.com	26595	2002-05-05	2017-06-01	2024-05-03	900 B	5.7 kB	34.201.194.142

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed
2024-05-04	medium	ald.my.id	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js	87 kB	2023-03-07	2024-05-18
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 172.217.21.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-18 07:42:58 Times Seen113912 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

		Size	First Seen	Last Seen
	#1 Eval - abb2da8333bdd9f232a5b185daee7819	4.8 kB	2023-03-07	2024-05-15
Pretty Observations First Seen2023-03-07 01:18:33 Last Seen2024-05-15 01:23:10 Times Seen625 Hash abb2da8333bdd9f232a5b185daee7819 0c76f30986ee8e90603ce64c3583d3ac3541e056 b2dd79e3325a0c86f34c8c0a9f140f71bf89f6202ea374ed47ce6824025476a3 Loading...

	#2 Eval - 79e3b33c06b4988150c8ced2bf9be155	973 B	2023-03-07	2024-05-15
Pretty Observations First Seen2023-03-07 01:18:33 Last Seen2024-05-15 01:23:10 Times Seen624 Hash 79e3b33c06b4988150c8ced2bf9be155 dfd7a43b10df0e8f08458669099485b0f7c0e91d 4a8f17f9c22cc1b235128099f5f1c7eb84f13bb6fe3ba37dfc7266618a2075b5 Loading...

HTTP Transactions (58)

URL IP Response Size

fulsar.blogspot.mk/

216.58.207.193

195 B

URL
fulsar.blogspot.mk/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
195 B (195 bytes)
Hash
60201e4f1d8f0d339620f2c998b56668
b7a3d6dfb9494004e2675f15865909f2dc360ece
659c0749e6ff0ca0a825fbb8be3f18d45a23fc0ccef0247a4650688c2784ee08

HTTP Headers

GET / HTTP/1.1
Host: fulsar.blogspot.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://fulsar.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 04 May 2024 07:41:02 GMT
expires: Sat, 04 May 2024 07:41:02 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 195
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fulsar.blogspot.com/

216.58.207.193

9.9 kB

URL
fulsar.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (6027)
Size
9.9 kB (9949 bytes)
Hash
c5f3d2b8f2d117abebc6da4f5493acd5
49cbb5b05b84db6f556d8245abb8c663646e1dd3
e415d4aa5746adf0beca9bb63644a493a8a7c69e2a04264ae0268688bacaa8a7

HTTP Headers

GET / HTTP/1.1
Host: fulsar.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:03 GMT
date: Sat, 04 May 2024 07:41:03 GMT
cache-control: private, max-age=0
last-modified: Sat, 23 Mar 2024 22:53:04 GMT
etag: W/"8f1585ebb38d6e008fa23250cdce57ffe82d8fec01d4c2c229d65e23fcaecb5b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9949
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lawyer99firm.blogspot.com/

216.58.207.193

7.8 kB

URL
lawyer99firm.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (4579)
Size
7.8 kB (7794 bytes)
Hash
6f0bf0a1246b411b828a8431b2458c53
2e879c05b948c4870b270832a530571cf85b7348
d1be65293330069dbc1456e03fed25c221fae39ce85b2f96932266b8d12d7ad3

HTTP Headers

GET / HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fulsar.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:04 GMT
date: Sat, 04 May 2024 07:41:04 GMT
cache-control: private, max-age=0
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 7794
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F

198.252.106.147

0 B

URL
ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lawyer99firm.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: https://ald.my.id
content-type: text/html; charset=UTF-8
content-length: 0
date: Sat, 04 May 2024 07:41:05 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

ald.my.id/

198.252.106.147

131 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
e3bb1032a1d85b42811038bd726f0fa9
3e99edad00cff1444567c9fbd6b7c98c43f430fe
6278b778324719e367c0750110781b6743351b33b4d0838ee4f82c2d7efd00ab

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawyer99firm.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 131
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:05 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

ald.my.id/

198.252.106.147

132 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
132 B (132 bytes)
Hash
6bf2ee5d8ab99ddd54e161113dd6203c
29ef9bd263fc68d47a7f8ff27952c955176f1e0e
7aa28ef8ec612938c2bcca609f21ac3e3c6e114d14835cc225af4cf2c5681f55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 132
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:06 GMT
server: LiteSpeed

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:06 GMT
server: LiteSpeed

cdn.rawgit.com/igniel/blogger/master/iglo/v2.js

194.242.11.186

94 B

URL
cdn.rawgit.com/igniel/blogger/master/iglo/v2.js
IP
194.242.11.186:0
ASN
#34989 ServeTheWorld AS

File type
ASCII text, with no line terminators
Size
94 B (94 bytes)
Hash
bb3bef3cb74da96a0a341aabdde38344
e5269cb6b5ad33476b5d589d12219e09fcbd2ce7
0237e8f517fa8f08f8a517834d47ba9957ec5075eb09a9ac6be8fe29bb6c8b20

HTTP Headers

GET /igniel/blogger/master/iglo/v2.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 07:41:08 GMT
content-type: text/plain; charset=utf-8
content-length: 94
location: https://cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 8176
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 05/04/2024 07:41:08
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-etou8220086-FRA, cache-chi-kigq8000168-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: eb1a8b8b07210f2111f6c9268196ff5a
cdn-cache: EXPIRED
X-Firefox-Spdy: h2

cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js

151.101.1.229

1.9 kB

URL
cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js
IP
151.101.1.229:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (4182)
Size
1.9 kB (1859 bytes)
Hash
914bb22428e0c51d8aa70b4e8ee31da0
36aa8446a4857b47e54fdd7635fb9e8552e51a4c
cfac6379159622c5669df9729c10cd6a801886ad458533283d9e19ba84107ebe

HTTP Headers

GET /gh/igniel/blogger@master/iglo/v2.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ald.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"1057-NqqERqSFe0flT912NfuehVLlGkw"
content-encoding: br
accept-ranges: bytes
age: 24419
date: Sat, 04 May 2024 07:41:08 GMT
x-served-by: cache-fra-eddf8230107-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1859
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js

172.217.21.170

30 kB

URL
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
30 kB (30399 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:40:41 GMT
expires: Sat, 03 May 2025 00:40:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 111627
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cse.google.com/cse.js?cx=07de9c2ca0b684168

142.250.74.174

3.1 kB

URL
cse.google.com/cse.js?cx=07de9c2ca0b684168
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (3486)
Size
3.1 kB (3131 bytes)
Hash
8225ae6a8f24b81c7b9739d8a6eea8d2
f1c14f9e90c79e68b89e95ebcad0dbba7b8f498d
e29f98e9d989b4cd00764427b8955530ecdcd51d44fa2ddc3140de0d789c182c

HTTP Headers

GET /cse.js?cx=07de9c2ca0b684168 HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-J2vqLWviio_aNS5Ysh94hQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 04 May 2024 07:41:08 GMT
server: gws
content-length: 3131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ald.my.id/

198.252.106.147

9.9 kB

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text, with very long lines (4579)
Size
9.9 kB (9903 bytes)
Hash
d3b15a51f4e49091badfec2eb851de67
1897afddb812953d898f5716a12a0b19bbbe51c1
ad4fb8a8399c5fc4d2ecb889ef1476985d8a97d042dbdbf67fa5328b198d193f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:07 GMT
server: LiteSpeed

www.google.com/cse/static/element/8435450f13508ca1/default+en.css

216.58.211.4

200 OK

9.1 kB

URL GET HTTP/3
www.google.com/cse/static/element/8435450f13508ca1/default+en.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
9.1 kB (9068 bytes)
Hash
baccb7180fe061b63ed061ec10c3b0c8
bfb31590ba6e758eb8f25735b564d7e4a0919025
a5402de70228d4bf5379b518225b702918f6ae277e9293f9d16334c2b1fa31e3

HTTP Headers

GET /cse/static/element/8435450f13508ca1/default+en.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9068
date: Sat, 04 May 2024 07:41:08 GMT
expires: Sat, 04 May 2024 07:41:08 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/cse/static/style/look/v4/default.css

216.58.211.4

200 OK

1.3 kB

URL GET HTTP/3
www.google.com/cse/static/style/look/v4/default.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
1.3 kB (1345 bytes)
Hash
c14e45e189f801818b14f1315605a632
dd7e7fb9d156b343beef0155b41da1c847d69e41
dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89

HTTP Headers

GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 07:04:56 GMT
expires: Sat, 04 May 2024 07:54:56 GMT
cache-control: public, max-age=3000
age: 2172
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D

216.58.211.4

108 kB

URL GET
www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
JavaScript source, ASCII text, with very long lines (1648)
Size
108 kB (108214 bytes)
Hash
894cb0d707be015fef54157044f1e257
3301ae907d36859699c3a7f264e2888f3d0f79af
1c8cc3cef0d65c2d9912b24f27bd2f42a79d10be8e00439562a3984f90f05bdd

HTTP Headers

GET /cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 108214
date: Sat, 04 May 2024 07:41:08 GMT
expires: Sat, 04 May 2024 07:41:08 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/images/1x/en/branding.png

216.58.211.4

1.6 kB

URL
www.google.com/cse/static/images/1x/en/branding.png
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
PNG image data, 123 x 15, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1556 bytes)
Hash
9a63187ccc27d018cedb3a932f5aa9aa
5a59b006635e93492bfd06a5c26f8b6e4181dc71
6ca8050d203fbcb8613c5b13d0bf8cfccb60e97f82334702edd7a48d09489d68

HTTP Headers

GET /cse/static/images/1x/en/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1556
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:09:54 GMT
expires: Sat, 03 May 2025 06:09:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 07 Dec 2023 21:00:00 GMT
content-type: image/png
age: 91875
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/css/v2/clear.png

216.58.211.4

1.0 kB

URL
www.google.com/cse/static/css/v2/clear.png
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1018 bytes)
Hash
2df778bf2e22d52fe849babb330ec977
0f833f030bb43f282473bddd3a33b5f8cba7a845
329d1a750114920332eadc55c129957d9dbe5a1b25745e2f7e0ed4fad75e04cd

HTTP Headers

GET /cse/static/css/v2/clear.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/cse/static/element/8435450f13508ca1/default+en.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:01:53 GMT
expires: Fri, 02 May 2025 02:01:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 May 2020 08:30:00 GMT
content-type: image/png
age: 193156
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

clients1.google.com/generate_204

142.250.74.110

0 B

URL
clients1.google.com/generate_204
IP
142.250.74.110:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 04 May 2024 07:41:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lawyer99firm.blogspot.com/favicon.ico

216.58.207.193

412 B

URL
lawyer99firm.blogspot.com/favicon.ico
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Size
412 B (412 bytes)
Hash
59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sat, 04 May 2024 07:41:09 GMT
date: Sat, 04 May 2024 07:41:09 GMT
cache-control: private, max-age=86400
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fulsar.blogspot.com/?redirected

216.58.207.193

9.9 kB

URL
fulsar.blogspot.com/?redirected
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (6027)
Size
9.9 kB (9949 bytes)
Hash
5f56906b0c1db3ad4d4fc9d41098d579
b283d2a34ccbd34be6cc3b69c3025c88c1c3582e
5393771a4fe342bb88a2dfe2b1a3e83b9100feea8df7cae2369b0aadb57cb4a3

HTTP Headers

GET /?redirected HTTP/1.1
Host: fulsar.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:13 GMT
date: Sat, 04 May 2024 07:41:13 GMT
cache-control: private, max-age=0
last-modified: Sat, 23 Mar 2024 22:53:04 GMT
etag: W/"8f1585ebb38d6e008fa23250cdce57ffe82d8fec01d4c2c229d65e23fcaecb5b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9949
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lawyer99firm.blogspot.com/

216.58.207.193

7.8 kB

URL
lawyer99firm.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (4579)
Size
7.8 kB (7794 bytes)
Hash
6f0bf0a1246b411b828a8431b2458c53
2e879c05b948c4870b270832a530571cf85b7348
d1be65293330069dbc1456e03fed25c221fae39ce85b2f96932266b8d12d7ad3

HTTP Headers

GET / HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fulsar.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:13 GMT
date: Sat, 04 May 2024 07:41:13 GMT
cache-control: private, max-age=0
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 7794
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F

198.252.106.147

0 B

URL
ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lawyer99firm.blogspot.com/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: https://ald.my.id
content-type: text/html; charset=UTF-8
content-length: 0
date: Sat, 04 May 2024 07:41:14 GMT
server: LiteSpeed

ald.my.id/

198.252.106.147

131 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
e3bb1032a1d85b42811038bd726f0fa9
3e99edad00cff1444567c9fbd6b7c98c43f430fe
6278b778324719e367c0750110781b6743351b33b4d0838ee4f82c2d7efd00ab

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawyer99firm.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 131
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:14 GMT
server: LiteSpeed

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:14 GMT
server: LiteSpeed

ald.my.id/

198.252.106.147

132 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
132 B (132 bytes)
Hash
6bf2ee5d8ab99ddd54e161113dd6203c
29ef9bd263fc68d47a7f8ff27952c955176f1e0e
7aa28ef8ec612938c2bcca609f21ac3e3c6e114d14835cc225af4cf2c5681f55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 132
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:15 GMT
server: LiteSpeed

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:15 GMT
server: LiteSpeed

ald.my.id/

198.252.106.147

7.3 kB

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text, with very long lines (4579)
Size
7.3 kB (7345 bytes)
Hash
d3b15a51f4e49091badfec2eb851de67
1897afddb812953d898f5716a12a0b19bbbe51c1
ad4fb8a8399c5fc4d2ecb889ef1476985d8a97d042dbdbf67fa5328b198d193f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:16 GMT
server: LiteSpeed

cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js

151.101.1.229

1.9 kB

URL
cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js
IP
151.101.1.229:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (4182)
Size
1.9 kB (1859 bytes)
Hash
914bb22428e0c51d8aa70b4e8ee31da0
36aa8446a4857b47e54fdd7635fb9e8552e51a4c
cfac6379159622c5669df9729c10cd6a801886ad458533283d9e19ba84107ebe

HTTP Headers

GET /gh/igniel/blogger@master/iglo/v2.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ald.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1859
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"1057-NqqERqSFe0flT912NfuehVLlGkw"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 07:41:17 GMT
age: 24428
x-served-by: cache-fra-eddf8230107-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

via.placeholder.com/300x250?text=responsive.txt

34.201.194.142

2.7 kB

URL
via.placeholder.com/300x250?text=responsive.txt
IP
34.201.194.142:0
ASN
#14618 AMAZON-AES

File type
PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced
Size
2.7 kB (2652 bytes)
Hash
08ed6bf36dbc95771ca4e7746909b0ed
133857e0f8f85ffac086c0213e8a4297dbfe3683
123b6a9bcff9422ee69678bc75291c946192a034941d4f8e73a52ecf1e2cd197

HTTP Headers

GET /300x250?text=responsive.txt HTTP/1.1
Host: via.placeholder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 07:41:17 GMT
content-type: image/png
content-length: 2652
server: Werkzeug/2.2.2 Python/3.9.16
cache-control: public, max-age=31557600
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js

172.217.21.170

30 kB

URL
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
30 kB (30399 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:40:41 GMT
expires: Sat, 03 May 2025 00:40:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 111636
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cse.google.com/cse.js?cx=07de9c2ca0b684168

142.250.74.174

3.1 kB

URL
cse.google.com/cse.js?cx=07de9c2ca0b684168
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (3486)
Size
3.1 kB (3131 bytes)
Hash
46a4502123ade9195b8412896fd4408f
810e737114b28502ef086164dea2b878feb6df5e
9ba4fe1d144a5d0af4d74f3dc24c016673929556c070d001115e72cd34ee92f0

HTTP Headers

GET /cse.js?cx=07de9c2ca0b684168 HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-oF4yf-htiKnF2QgiDcr3uA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 04 May 2024 07:41:17 GMT
server: gws
content-length: 3131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/style/look/v4/default.css

216.58.211.4

200 OK

1.3 kB

URL GET HTTP/3
www.google.com/cse/static/style/look/v4/default.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
1.3 kB (1345 bytes)
Hash
c14e45e189f801818b14f1315605a632
dd7e7fb9d156b343beef0155b41da1c847d69e41
dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89

HTTP Headers

GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 07:04:56 GMT
expires: Sat, 04 May 2024 07:54:56 GMT
cache-control: public, max-age=3000
age: 2181
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/element/8435450f13508ca1/default+en.css

216.58.211.4

200 OK

9.1 kB

URL GET HTTP/3
www.google.com/cse/static/element/8435450f13508ca1/default+en.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
9.1 kB (9068 bytes)
Hash
baccb7180fe061b63ed061ec10c3b0c8
bfb31590ba6e758eb8f25735b564d7e4a0919025
a5402de70228d4bf5379b518225b702918f6ae277e9293f9d16334c2b1fa31e3

HTTP Headers

GET /cse/static/element/8435450f13508ca1/default+en.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9068
date: Sat, 04 May 2024 07:41:17 GMT
expires: Sat, 04 May 2024 07:41:17 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lawyer99firm.blogspot.com/favicon.ico

216.58.207.193

412 B

URL
lawyer99firm.blogspot.com/favicon.ico
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Size
412 B (412 bytes)
Hash
59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon
expires: Sat, 04 May 2024 07:41:17 GMT
date: Sat, 04 May 2024 07:41:17 GMT
cache-control: private, max-age=86400
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D

216.58.211.4

108 kB

URL GET
www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
JavaScript source, ASCII text, with very long lines (1648)
Size
108 kB (108214 bytes)
Hash
894cb0d707be015fef54157044f1e257
3301ae907d36859699c3a7f264e2888f3d0f79af
1c8cc3cef0d65c2d9912b24f27bd2f42a79d10be8e00439562a3984f90f05bdd

HTTP Headers

GET /cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 108214
date: Sat, 04 May 2024 07:41:17 GMT
expires: Sat, 04 May 2024 07:41:17 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/images/1x/en/branding.png

216.58.211.4

1.6 kB

URL
www.google.com/cse/static/images/1x/en/branding.png
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
PNG image data, 123 x 15, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1556 bytes)
Hash
9a63187ccc27d018cedb3a932f5aa9aa
5a59b006635e93492bfd06a5c26f8b6e4181dc71
6ca8050d203fbcb8613c5b13d0bf8cfccb60e97f82334702edd7a48d09489d68

HTTP Headers

GET /cse/static/images/1x/en/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1556
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:09:54 GMT
expires: Sat, 03 May 2025 06:09:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 07 Dec 2023 21:00:00 GMT
content-type: image/png
age: 91883
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/css/v2/clear.png

216.58.211.4

1.0 kB

URL
www.google.com/cse/static/css/v2/clear.png
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1018 bytes)
Hash
2df778bf2e22d52fe849babb330ec977
0f833f030bb43f282473bddd3a33b5f8cba7a845
329d1a750114920332eadc55c129957d9dbe5a1b25745e2f7e0ed4fad75e04cd

HTTP Headers

GET /cse/static/css/v2/clear.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/cse/static/element/8435450f13508ca1/default+en.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:01:53 GMT
expires: Fri, 02 May 2025 02:01:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 May 2020 08:30:00 GMT
content-type: image/png
age: 193164
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

clients1.google.com/generate_204

142.250.74.110

0 B

URL
clients1.google.com/generate_204
IP
142.250.74.110:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 04 May 2024 07:41:17 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fulsar.blogspot.com/?redirected

216.58.207.193

9.9 kB

URL
fulsar.blogspot.com/?redirected
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (6027)
Size
9.9 kB (9949 bytes)
Hash
5f56906b0c1db3ad4d4fc9d41098d579
b283d2a34ccbd34be6cc3b69c3025c88c1c3582e
5393771a4fe342bb88a2dfe2b1a3e83b9100feea8df7cae2369b0aadb57cb4a3

HTTP Headers

GET /?redirected HTTP/1.1
Host: fulsar.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:21 GMT
date: Sat, 04 May 2024 07:41:21 GMT
cache-control: private, max-age=0
last-modified: Sat, 23 Mar 2024 22:53:04 GMT
etag: W/"8f1585ebb38d6e008fa23250cdce57ffe82d8fec01d4c2c229d65e23fcaecb5b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9949
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lawyer99firm.blogspot.com/

216.58.207.193

7.8 kB

URL
lawyer99firm.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (4579)
Size
7.8 kB (7794 bytes)
Hash
6f0bf0a1246b411b828a8431b2458c53
2e879c05b948c4870b270832a530571cf85b7348
d1be65293330069dbc1456e03fed25c221fae39ce85b2f96932266b8d12d7ad3

HTTP Headers

GET / HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fulsar.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 04 May 2024 07:41:21 GMT
date: Sat, 04 May 2024 07:41:21 GMT
cache-control: private, max-age=0
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 7794
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F

198.252.106.147

0 B

URL
ald.my.id/?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?arsae=https%3A%2F%2Flawyer99firm.blogspot.com%2F&arsae_ref=https%3A%2F%2Ffulsar.blogspot.com%2F HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lawyer99firm.blogspot.com/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: https://ald.my.id
content-type: text/html; charset=UTF-8
content-length: 0
date: Sat, 04 May 2024 07:41:22 GMT
server: LiteSpeed

ald.my.id/

198.252.106.147

131 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
e3bb1032a1d85b42811038bd726f0fa9
3e99edad00cff1444567c9fbd6b7c98c43f430fe
6278b778324719e367c0750110781b6743351b33b4d0838ee4f82c2d7efd00ab

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawyer99firm.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 131
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:22 GMT
server: LiteSpeed

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:22 GMT
server: LiteSpeed

ald.my.id/

198.252.106.147

132 B

URL
ald.my.id/
IP
198.252.106.147:0
ASN
#20068 HAWKHOST

File type
HTML document, ASCII text
Size
132 B (132 bytes)
Hash
6bf2ee5d8ab99ddd54e161113dd6203c
29ef9bd263fc68d47a7f8ff27952c955176f1e0e
7aa28ef8ec612938c2bcca609f21ac3e3c6e114d14835cc225af4cf2c5681f55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 132
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 07:41:23 GMT
server: LiteSpeed

ald.my.id/favicon.ico

198.252.106.147

404 Not Found

796 B

URL GET HTTP/3
ald.my.id/favicon.ico
IP
198.252.106.147:443
ASN
#20068 HAWKHOST

Requested by
https://ald.my.id/
Certificate
IssuerLet's Encrypt
Subject*.ald.my.id
FingerprintA0:82:BD:4A:9E:DF:DC:E5:CA:F3:37:B5:59:BA:D1:7A:27:A2:07:A0
ValidityWed, 03 Apr 2024 14:25:44 GMT - Tue, 02 Jul 2024 14:25:43 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ald.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Cookie: PHPSESSID=6997f837d18031066a4c92126335c3ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Sat, 04 May 2024 07:41:23 GMT
server: LiteSpeed

via.placeholder.com/300x250?text=responsive.txt

34.201.194.142

2.7 kB

URL
via.placeholder.com/300x250?text=responsive.txt
IP
34.201.194.142:0
ASN
#14618 AMAZON-AES

File type
PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced
Size
2.7 kB (2652 bytes)
Hash
08ed6bf36dbc95771ca4e7746909b0ed
133857e0f8f85ffac086c0213e8a4297dbfe3683
123b6a9bcff9422ee69678bc75291c946192a034941d4f8e73a52ecf1e2cd197

HTTP Headers

GET /300x250?text=responsive.txt HTTP/1.1
Host: via.placeholder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 07:41:24 GMT
content-type: image/png
content-length: 2652
server: Werkzeug/2.2.2 Python/3.9.16
cache-control: public, max-age=31557600
X-Firefox-Spdy: h2

cdn.rawgit.com/igniel/blogger/master/iglo/v2.js

194.242.11.186

94 B

URL
cdn.rawgit.com/igniel/blogger/master/iglo/v2.js
IP
194.242.11.186:0
ASN
#34989 ServeTheWorld AS

File type
ASCII text, with no line terminators
Size
94 B (94 bytes)
Hash
bb3bef3cb74da96a0a341aabdde38344
e5269cb6b5ad33476b5d589d12219e09fcbd2ce7
0237e8f517fa8f08f8a517834d47ba9957ec5075eb09a9ac6be8fe29bb6c8b20

HTTP Headers

GET /igniel/blogger/master/iglo/v2.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 07:41:25 GMT
content-type: text/plain; charset=utf-8
content-length: 94
location: https://cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 8190
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 05/04/2024 07:41:25
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-etou8220086-FRA, cache-chi-kigq8000168-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 6a6a3b0f6f14215d7d4c23f61d6e38c4
cdn-cache: EXPIRED
X-Firefox-Spdy: h2

cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js

151.101.1.229

1.9 kB

URL
cdn.jsdelivr.net/gh/igniel/blogger@master/iglo/v2.js
IP
151.101.1.229:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (4182)
Size
1.9 kB (1859 bytes)
Hash
914bb22428e0c51d8aa70b4e8ee31da0
36aa8446a4857b47e54fdd7635fb9e8552e51a4c
cfac6379159622c5669df9729c10cd6a801886ad458533283d9e19ba84107ebe

HTTP Headers

GET /gh/igniel/blogger@master/iglo/v2.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ald.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1859
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"1057-NqqERqSFe0flT912NfuehVLlGkw"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 07:41:25 GMT
age: 24436
x-served-by: cache-fra-eddf8230107-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

cse.google.com/cse.js?cx=07de9c2ca0b684168

142.250.74.174

3.1 kB

URL
cse.google.com/cse.js?cx=07de9c2ca0b684168
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (3486)
Size
3.1 kB (3132 bytes)
Hash
dd04728bcb272dbbc170a368662b8c83
3dc29d6690d94ab4098726d86312ade3fd9ce490
3d0e4166a0e0f67d2e19864c2260ff5d01dd1866cb30f2a7b4dbf2baca7b69ac

HTTP Headers

GET /cse.js?cx=07de9c2ca0b684168 HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-bjRNt-Fqj29VYXaf92BNGg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 04 May 2024 07:41:25 GMT
server: gws
content-length: 3132
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js

172.217.21.170

30 kB

URL
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
30 kB (30399 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:40:41 GMT
expires: Sat, 03 May 2025 00:40:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 111644
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/style/look/v4/default.css

216.58.211.4

200 OK

1.3 kB

URL GET HTTP/3
www.google.com/cse/static/style/look/v4/default.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
1.3 kB (1345 bytes)
Hash
c14e45e189f801818b14f1315605a632
dd7e7fb9d156b343beef0155b41da1c847d69e41
dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89

HTTP Headers

GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 07:04:56 GMT
expires: Sat, 04 May 2024 07:54:56 GMT
cache-control: public, max-age=3000
age: 2189
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/element/8435450f13508ca1/default+en.css

216.58.211.4

200 OK

9.1 kB

URL GET HTTP/3
www.google.com/cse/static/element/8435450f13508ca1/default+en.css
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
ASCII text
Size
9.1 kB (9068 bytes)
Hash
baccb7180fe061b63ed061ec10c3b0c8
bfb31590ba6e758eb8f25735b564d7e4a0919025
a5402de70228d4bf5379b518225b702918f6ae277e9293f9d16334c2b1fa31e3

HTTP Headers

GET /cse/static/element/8435450f13508ca1/default+en.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9068
date: Sat, 04 May 2024 07:41:25 GMT
expires: Sat, 04 May 2024 07:41:25 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

lawyer99firm.blogspot.com/favicon.ico

216.58.207.193

412 B

URL
lawyer99firm.blogspot.com/favicon.ico
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Size
412 B (412 bytes)
Hash
59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lawyer99firm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon
expires: Sat, 04 May 2024 07:41:25 GMT
date: Sat, 04 May 2024 07:41:25 GMT
cache-control: private, max-age=86400
last-modified: Sat, 06 Apr 2024 01:30:42 GMT
etag: W/"ca438e1d5c2dffbaa9dd9ba5b4836df443a3c67483100c080283c202cb638b08"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D

216.58.211.4

108 kB

URL GET
www.google.com/cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Requested by
https://ald.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
JavaScript source, ASCII text, with very long lines (1648)
Size
108 kB (108214 bytes)
Hash
894cb0d707be015fef54157044f1e257
3301ae907d36859699c3a7f264e2888f3d0f79af
1c8cc3cef0d65c2d9912b24f27bd2f42a79d10be8e00439562a3984f90f05bdd

HTTP Headers

GET /cse/static/element/8435450f13508ca1/cse_element__en.js?usqp=CAI%3D HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 108214
date: Sat, 04 May 2024 07:41:25 GMT
expires: Sat, 04 May 2024 07:41:25 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 10 Jan 2024 16:43:07 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/cse/static/images/1x/en/branding.png

216.58.211.4

1.6 kB

URL
www.google.com/cse/static/images/1x/en/branding.png
IP
216.58.211.4:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type
PNG image data, 123 x 15, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1556 bytes)
Hash
9a63187ccc27d018cedb3a932f5aa9aa
5a59b006635e93492bfd06a5c26f8b6e4181dc71
6ca8050d203fbcb8613c5b13d0bf8cfccb60e97f82334702edd7a48d09489d68

HTTP Headers

GET /cse/static/images/1x/en/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1556
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:09:54 GMT
expires: Sat, 03 May 2025 06:09:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 07 Dec 2023 21:00:00 GMT
content-type: image/png
age: 91891
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cse.google.com/adsense/search/async-ads.js

142.250.74.174

81 kB

URL
cse.google.com/adsense/search/async-ads.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
81 kB (81372 bytes)
Hash
7f7f3f1dfeab0f9feded803069ab915a
e85c90813131dc99324d1fdc55be85200cb825da
e371739096263622c7b24e5ff7bfbf569642139272fb3acd833ca31db4fb0e15

HTTP Headers

GET /adsense/search/async-ads.js HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 04 May 2024 07:41:17 GMT
expires: Sat, 04 May 2024 07:41:17 GMT
cache-control: private, max-age=3600
etag: "5082555386172584292"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

clients1.google.com/generate_204

142.250.74.110

0 B

URL
clients1.google.com/generate_204
IP
142.250.74.110:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ald.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 04 May 2024 07:41:25 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (58)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate