Report - apply.recruitment-bn.art/

Report Overview

Submitted URL
apply.recruitment-bn.art/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 13:09:41
Access
public
Website Title
Jawatan Kosong
Final URL
apply.recruitment-bn.art/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-06	419 B	7.5 kB	151.101.65.229
apply.recruitment-bn.art	unknown	unknown	No data	No data	7.3 kB	994 kB	188.114.96.1
i.ibb.co	13485	2010-07-20	2018-11-25	2024-05-06	918 B	139 kB	162.19.58.157
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-07	559 B	14 kB	142.250.74.131
denbagus.radenalifwijaya.com	unknown	2022-12-28	2023-10-16	2023-12-05	1.7 kB	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	radenalifwijaya.com	Sinkholed
2024-05-07	medium	radenalifwijaya.com	Sinkholed
2024-05-07	medium	radenalifwijaya.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/disable-devtool	17 kB	2023-12-22	2024-05-19
Pretty URL cdn.jsdelivr.net/npm/disable-devtool IP 151.101.65.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-22 04:40:27 Last Seen2024-05-19 14:02:37 Times Seen228 Hash f71da0117b47fe056c382d44f7c1af53 c384c695d7a74e1e4272b13f9d5942d0f24d099d 2a741550c18b132b0ef573f818fc79d6c09169be71d538b968ceac551c178ad3 Loading...

	apply.recruitment-bn.art/	6.2 kB	2024-02-21	2024-05-07
Pretty URL apply.recruitment-bn.art/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-21 14:35:52 Last Seen2024-05-07 15:09:48 Times Seen6 Hash 85205eb294bc463c682a6ecda36520f6 fad84fd61561918a39cffd3aca13aea38274de46 80c67bf65d540c45896af31c45a30e99c9e4020925137f73f42e75a73c3c0204 Loading...

	apply.recruitment-bn.art/	1.4 kB	2024-02-21	2024-05-17
Pretty URL apply.recruitment-bn.art/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-21 14:35:52 Last Seen2024-05-17 04:42:22 Times Seen9 Hash 85c91a1ac60c70212666ca6c26dedd3e 000cad92cdf667596fa1d2e3eddbd72fa4ab5a90 bbb35c29678de8a5b731d9d082fc103c786ab0480e2d2d9b4650897f017886aa Loading...

	apply.recruitment-bn.art/	4.8 kB	2024-02-21	2024-05-17
Pretty URL apply.recruitment-bn.art/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-21 14:35:52 Last Seen2024-05-17 04:42:22 Times Seen9 Hash 12387ad0614d9cfaee12153098b389aa 93d8ffc5507a8a54281b8d81b81da2a373f6f110 2d2543c11e17455f15e997a554edcd5ed387ae6b0ec50aa63a48d99b9730a13a Loading...

	apply.recruitment-bn.art/	5.1 kB	2024-02-21	2024-05-17
Pretty URL apply.recruitment-bn.art/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-21 14:35:52 Last Seen2024-05-17 04:42:22 Times Seen9 Hash 52823d1ec6e537b4cc76b4979eee7150 75ee697f08413c009b07a91ea1a06c914433fb36 9a9953a5e133168321a0f4f5e3658491fadf996d26f55e9a11f13ca4ada5d896 Loading...

HTTP Transactions (23)

URL IP Response Size

cdn.jsdelivr.net/npm/disable-devtool

151.101.65.229

200 OK

6.7 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/disable-devtool
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)
Size
6.7 kB (6741 bytes)
Hash
f71da0117b47fe056c382d44f7c1af53
c384c695d7a74e1e4272b13f9d5942d0f24d099d
2a741550c18b132b0ef573f818fc79d6c09169be71d538b968ceac551c178ad3

HTTP Headers

GET /npm/disable-devtool HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.3.7
x-jsd-version-type: version
etag: W/"4372-w4TGldenTh5CcrE/nVlC0PJNCZ0"
content-encoding: br
accept-ranges: bytes
date: Tue, 07 May 2024 13:09:16 GMT
age: 37516
x-served-by: cache-fra-eddf8230052-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6741
X-Firefox-Spdy: h2

apply.recruitment-bn.art/file/img/2.jpg

188.114.96.1

200 OK

150 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/img/2.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Size
150 kB (149996 bytes)
Hash
4737d2abd51adc72b78ca16fe5ff81d8
202c18052bf9543e7003fd3f307ffc844bbb13b5
e79023126a3a47aafc8c7970e51dcd5c0f8c439b6a3672a019df7a63feaed0a9

HTTP Headers

GET /file/img/2.jpg HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: image/jpeg
content-length: 149996
last-modified: Fri, 16 Feb 2024 11:29:20 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LV6tlO4bJ11dMvKTEh57PbNmPsAHy%2BelI1HlmgXrDdo2n6SzFJ01dWN1u6D050F4bpct1lVpLYa4iiqcivBE%2FujWHs0TxA%2BR2aeBMKHUeRj5Ve5SpbO%2FsjXyUzurXNrx%2BORKuAIlfv7D68c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d4356c0-OSL
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/img/1.jpg

188.114.96.1

200 OK

100 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/img/1.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Size
100 kB (100354 bytes)
Hash
eb79bf544c4c2c440f69fb85504ee057
1b2b077efa3d7c46c575ec75aca41dceacc2bf33
e00d994aa758d17dc65a5518839c3beff5112592ea14bce7e3735c59486e32d3

HTTP Headers

GET /file/img/1.jpg HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: image/jpeg
content-length: 100354
last-modified: Fri, 16 Feb 2024 11:29:14 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SL5aE9EH0DNpYXVBCcR43UmLKhRh23trPf1%2FtlYbgWM0Grspsqy8pfMGNwp1jePnpUGRNlegSbGJYbyRtqEeYE4TopKNKGWxOu35mWD7QVftLJy%2Fy73pLSgSrU6Qx%2BEA5H7xIabeZ0HD3Uk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d3d56c0-OSL
alt-svc: h3=":443"; ma=86400

i.ibb.co/9GnZJFY/IMG-20240216-WA0015-removebg-preview.png

162.19.58.157

200 OK

117 kB

URL GET HTTP/2
i.ibb.co/9GnZJFY/IMG-20240216-WA0015-removebg-preview.png
IP
162.19.58.157:443
ASN
#16276 OVH SAS

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectibb.co
Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D
ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT

File type
PNG image data, 900 x 232, 8-bit/color RGBA, non-interlaced
Size
117 kB (116733 bytes)
Hash
7ef46609356319a2a47a88b7c4226650
1efb9d159ebe8e083e1175d02763586d06ee2ca9
508881d7dc77cea466d653796adca4dabce30bb7851b2a48e9abdceb7e66ac69

HTTP Headers

GET /9GnZJFY/IMG-20240216-WA0015-removebg-preview.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 13:09:16 GMT
content-type: image/png
content-length: 116733
last-modified: Fri, 16 Feb 2024 11:30:49 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

apply.recruitment-bn.art/file/css/frontend-lite.min.css

188.114.96.1

200 OK

15 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/frontend-lite.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with very long lines (65495), with CRLF line terminators
Size
15 kB (14810 bytes)
Hash
172606297b65584b653a4eef199eb9d1
1a6840799d034c52e0979b9f6e13f0172e79d293
d6fcc2c89b73c8e3c4adc4475e159de2d59ee0305112f362d4e4f749057dda05

HTTP Headers

GET /file/css/frontend-lite.min.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:39 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EizF%2FL6JEgeUbVrnIifyqK6E%2BjM7df5y05IXbyXuqkq2sfrTMDDj2XtOBd%2BySyK2e920wkniGspxPTCNxGiP9eZvWB2p1gZvZMBkIWM%2BupzvFq0sza9GM5vaVhK8BLxT%2FI1eN01be%2BkTHDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d2756c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/ea/opensanshebrewcondensed/v3/OpenSansHebrewCondensed-Regular.woff2

142.250.74.131

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/ea/opensanshebrewcondensed/v3/OpenSansHebrewCondensed-Regular.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 13608, version 2.65
Size
14 kB (13608 bytes)
Hash
aec2ca334699e92297b17384f8fb0d5c
3813bd51d408f4a7600bb5efcc7fdd057f500c1f
7e2098a754aeafad56059e3d36d8a857ebd0fab45d448b3955353026da56f010

HTTP Headers

GET /ea/opensanshebrewcondensed/v3/OpenSansHebrewCondensed-Regular.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://apply.recruitment-bn.art
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13608
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:18:28 GMT
expires: Sat, 03 May 2025 01:18:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Aug 2014 16:50:04 GMT
content-type: font/woff2
vary: Accept-Encoding
age: 388248
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

apply.recruitment-bn.art/file/img/3.jpg

188.114.96.1

200 OK

127 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/img/3.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Size
127 kB (126864 bytes)
Hash
85a10116102d2f23cfe02d101532ab05
2363b6e4f9237016c556a3ae0ea9f0f78f494f4e
7ece36873ff599b010c96195e3e92a1af251a38c5c6aa2363416b2a55d25a1fb

HTTP Headers

GET /file/img/3.jpg HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: image/jpeg
content-length: 126864
last-modified: Fri, 16 Feb 2024 11:29:24 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=filHJk%2BsNfeMbDhn4XmMl7Nh%2F8dUGha1LjPdfBw%2Fh9rL%2FT7jVkWG87DB%2F8Bot%2B5mpH844PUp9w3sVvoUCfIOLprxB19kODZSXfCMfstMldWY55mYIFxygGmZrcIlrgr2eZIhP%2FF5psV9kyU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d4956c0-OSL
alt-svc: h3=":443"; ma=86400

i.ibb.co/5MZMqfz/logo.png

162.19.58.157

200 OK

21 kB

URL GET HTTP/2
i.ibb.co/5MZMqfz/logo.png
IP
162.19.58.157:443
ASN
#16276 OVH SAS

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectibb.co
Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D
ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT

File type
PNG image data, 124 x 121, 8-bit/color RGBA, non-interlaced
Size
21 kB (21327 bytes)
Hash
40f54430cdce79f64832ce243725a13c
b3b1bf3c72d684c4c0443ac9f45387073052b43a
82ca55ab832659e1b692276662a8052616b9b0362a96f0873fe6a491450dddf4

HTTP Headers

GET /5MZMqfz/logo.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 13:09:17 GMT
content-type: image/png
content-length: 21327
last-modified: Fri, 16 Feb 2024 11:01:04 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

apply.recruitment-bn.art/file/css/post-7.css

188.114.96.1

200 OK

22 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/post-7.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with CRLF line terminators
Size
22 kB (21702 bytes)
Hash
b7d46dabc8efed1cc3d1bf4ad415923a
7d28e1e7765587711d11ede46e87c4bf3e200dfe
d4b6aaaa2499f80c64b9118e96ca1214c14bfdbaf8c4168d7949529a00509f3d

HTTP Headers

GET /file/css/post-7.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:55 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qidnf0%2FrMPTNYrf6XxHbmepnTIuniXW9iN8zrhEg%2FGjzWZK1Zhjo4eyIPeNmcdQTCFz%2BbboTQjfTY9Kd1J8qEbVGI%2FfnYz5ve0u8bRsb%2BKwVS3Q8WpuXeol%2Blz%2BnbKaYWrZtfiVPEgbse6M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d2956c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/img/4.jpg

188.114.96.1

200 OK

75 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/img/4.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x666, components 3
Size
75 kB (75166 bytes)
Hash
8b95b09c97ab61c6cfde650cdab653d5
6b87309d8defb388d322d770c11abf3efcb36ea8
6414fafa2edfeafa012c35b2b9bd62427aaa88903b27014f406219d77ec151c0

HTTP Headers

GET /file/img/4.jpg HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:18 GMT
content-type: image/jpeg
content-length: 75166
last-modified: Sun, 10 Mar 2024 04:44:46 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2FlNEDKcvGrc%2BQmgHw7CBPm5UF98ZYoYmoSTY%2Fm1survVhgQcQy%2BIWAMLCrrr%2FGw8fOssKxWZNlmIiUFEqrz4vYEHc%2FocpmTnPDN%2B2z3K49eJ2PU7%2BcXBxrfL0Sk0Ixdlu6hDs1gpPWfVo0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d4b56c0-OSL
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/css/global.css

188.114.96.1

200 OK

10 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/global.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with CRLF line terminators
Size
10 kB (10030 bytes)
Hash
14231c9286898018052a7cd591fcb670
051a8580d8338e911f3bc7204c3b3c1d3a49edcd
19d108f67159ca3107e0c43289ba95cb81fe215e62da031a7f44cd5b508dee71

HTTP Headers

GET /file/css/global.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:41 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qapglwKGrt0k1O7%2BEl%2Fj%2FZuRYLfY7ZV%2BcNU839R3mIESgy4Vjjikb4QMlAJbziXEMkori0Ei54bbvdWqV1dFbJKoHfz6y3YxQ8dfxEOx%2BPrqxNCEK5Ucs4B%2BPo9XjDt%2BdWYdfO45sXxptKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d2b56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/

188.114.96.1

200 OK

325 kB

URL User Request GET HTTP/2
apply.recruitment-bn.art/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JavaScript source, ASCII text, with very long lines (19760), with CRLF line terminators
Size
325 kB (325304 bytes)
Hash
e394434e52578cf4e15161d517859d73
419149a5cc8ff581341706eb47aa772d801d4d22
57a6aa5306869fe0bc45b558babdd051291afd99b3a75b611c1b12a4858d538f

HTTP Headers

GET / HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 13:09:15 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dq9x0RIc4ofk6G1PvzwAyxxDIzsy9FrvM3mEt94peWp8vmiU8hhM0ph%2FyVOJODPipJTxyRbLZtCanzASBIrhXy%2FI5d8Og59vgbNcEC3japiPYdMUSzCa9WfIasC0%2BuUbUffh11l9DElvBeM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88017184e907b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

apply.recruitment-bn.art/file/css/elementor-icons.min.css

188.114.96.1

200 OK

20 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/elementor-icons.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with very long lines (19487), with CRLF line terminators
Size
20 kB (19534 bytes)
Hash
66ff4c860ae7e9d46df4ecb590248f84
f3a5db60b21640b7baeb64cf44ac8c35fb81fa5d
600031f551915c64a21a362823a3c4162b2ae5ffdffe523a1712047496e300e6

HTTP Headers

GET /file/css/elementor-icons.min.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:36 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I9uHEmjd9DDsO5R5YzRWQLUNqq%2FIKEIeFCw2peHiXgZjwNUgQfvBGsUwWQXHgIXei2jP4knolb7QDE%2BMWFZGk7WDsRGW29YtaZhVgHlgsHgZqMbna1%2Fsn01HFxjS2kCNADAc0jWMlmXY6P0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d1f56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/css/post-222.css

188.114.96.1

200 OK

8.3 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/post-222.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with very long lines (8747), with no line terminators
Size
8.3 kB (8271 bytes)
Hash
81fb22962903ef77b767839edce8358f
6c48096b851dda2282147ed4c25e79101e8d51cd
e18bcac7eda55104dd378b7c41aa342bd479a643c9d415739b4d51376b5e7c5e

HTTP Headers

GET /file/css/post-222.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:52 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rJEXoEHh%2Fgo%2BIX1Z9fXhJppcP5JF7df6cZTZHKZaWMI%2FfemNKuj%2FI1%2Bbro5BVfsesp91Cu%2FNTGNLompvFBUb95h20hmav77iqn3IEDcZHhTn%2BLqqZVeGv%2B4mRFSdf%2BLmT0i1gzpGlqfZt8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d3056c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/css/robot.css

188.114.96.1

200 OK

69 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/robot.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with CRLF line terminators
Size
69 kB (68637 bytes)
Hash
52e72fc84cfb3de7f1550c0b8fcb3be4
463a3559f4d4f684a8b4ed7b9f1eb793029927c8
22fc9b35a2580b62d9a827531e09e42404bf3b106a2c1f45e24d3ae0fe8aac55

HTTP Headers

GET /file/css/robot.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:17 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:58 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8NSUyWOtQZmoIhqoLXS2YJQg3gLo6iAurXhvQx2ZIZi9FJ4%2Fr0cYtc1sVuqEG9IOOklJ2mJC1mVgvhucksmIdTQScZ%2FCvzMPsk7J7DL1Flw%2BAyyXm4lsAtZ7znrJNO57WzMnzPdrq5YMZm8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d3456c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

0.0.0.0

0 B

URL GET
denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
0.0.0.0:0
ASN
#0

Requested by
https://apply.recruitment-bn.art/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: denbagus.radenalifwijaya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://apply.recruitment-bn.art
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

apply.recruitment-bn.art/file/img/logo.png

188.114.96.1

200 OK

21 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/img/logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
PNG image data, 124 x 121, 8-bit/color RGBA, non-interlaced
Size
21 kB (21327 bytes)
Hash
40f54430cdce79f64832ce243725a13c
b3b1bf3c72d684c4c0443ac9f45387073052b43a
82ca55ab832659e1b692276662a8052616b9b0362a96f0873fe6a491450dddf4

HTTP Headers

GET /file/img/logo.png HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:18 GMT
content-type: image/png
content-length: 21327
last-modified: Fri, 16 Feb 2024 09:13:28 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6boAZFTzfz5UZsxD6GnTH3xtoLm9%2Fb54EQZcBJYFjKHKsbBP8fc6j3HIRbbpQhq0WcJq7krVuLgBBUhZnv6hHz%2BZcKU%2FbEUyi5EW6clmrHDHlxSc%2Bt6IJWC3z5XEa%2FOoWfusKiicdzQ2PFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8801718a18fa56c0-OSL
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/css/swiper.min.css

188.114.96.1

200 OK

16 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/swiper.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with very long lines (16214), with CRLF line terminators
Size
16 kB (16483 bytes)
Hash
e8de7a495c46b1ecb80704fa6c06fc8e
7940b1751bad6290b3fe9d7cbc13ecbe23878933
5476e4bc4034564d8663c6ed6becf647197b6de78c586ac139983a4d34d237c2

HTTP Headers

GET /file/css/swiper.min.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:23:02 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ray%2FvILHeyjhYm1%2F9EhQlHMQHjOCCuc%2FM%2FpGh7gZd20ksce3DoXTXvL41FXjJv8WfDy0LE24mJtyQs0nl1f4umKdvbRq6C9pyG%2BTDUSDJRYLrgeQLKUed9K%2BprgMvHAgwJR5ZINu8uL7Hao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d2856c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/file/css/opensanshebrewcondensed.css

188.114.96.1

200 OK

5.7 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/css/opensanshebrewcondensed.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
ASCII text, with very long lines (5866), with no line terminators
Size
5.7 kB (5702 bytes)
Hash
f95ee358c2b4858a8930fbfad78f74fa
a07992f99c1a9e3bad92420fe7d6c1435d2fc1be
96ebcd67f912672829cc5bbc1899a52ffd4d4ebc844eef32056e3715266f025c

HTTP Headers

GET /file/css/opensanshebrewcondensed.css HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:17 GMT
content-type: text/css
last-modified: Mon, 15 Jan 2024 13:22:49 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WclIkJ2igVq642x0gX8hk8P6DLQmhdWk%2BqIY%2FKVKdYuY05xXRUFaEdpMeCSlq%2BgCTtMnfYLvibAiqkDc5N5dIcM4msNbc0%2FqB2AFGavQiPLPBuGqNFSXvDU5t%2BropgT5RT3IW5lCvfrCGf4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d3556c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

apply.recruitment-bn.art/austin-fireworks.jpg

188.114.96.1

404 Not Found

315 B

URL GET HTTP/3
apply.recruitment-bn.art/austin-fireworks.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /austin-fireworks.jpg HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 07 May 2024 13:09:18 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtf4CNq2ZRGjRK%2B4T2XSBB8sgldjTq3PgetVsOGVzuWW30ZER7%2BndZwsMCW7TG8N%2FUovqJuRgTVa%2Bzw9PIHcnYxT8IQGn5M8UsmiVz0isB7nkkWvBvqWeCbOpwZIz6a33PENmJvMJtVWUbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171884d4e56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

0.0.0.0

0 B

URL GET
denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
0.0.0.0:0
ASN
#0

Requested by
https://apply.recruitment-bn.art/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cloudme.fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: denbagus.radenalifwijaya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://apply.recruitment-bn.art
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

0.0.0.0

0 B

URL GET
denbagus.radenalifwijaya.com/cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
0.0.0.0:0
ASN
#0

Requested by
https://apply.recruitment-bn.art/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cloudme.fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: denbagus.radenalifwijaya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://apply.recruitment-bn.art
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

apply.recruitment-bn.art/file/js/wp-emoji-release.min.js

188.114.96.1

200 OK

19 kB

URL GET HTTP/3
apply.recruitment-bn.art/file/js/wp-emoji-release.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://apply.recruitment-bn.art/
Certificate
IssuerLet's Encrypt
Subjectrecruitment-bn.art
Fingerprint50:61:B9:F1:DF:AA:5D:2B:B1:13:98:6A:91:55:D0:36:9F:5E:E8:D9
ValiditySun, 21 Apr 2024 09:18:20 GMT - Sat, 20 Jul 2024 09:18:19 GMT

File type
JavaScript source, ASCII text, with very long lines (15718), with CRLF line terminators
Size
19 kB (18696 bytes)
Hash
9a758de047f3241aace96f3ad9b332d7
2c88579e5e89e29e55490590edffc0b93fbd7cd0
45d8a1a78e09dc19640bee61d9fec0518cd055cdd9acb0d6d6697186c2a0bd41

HTTP Headers

GET /file/js/wp-emoji-release.min.js HTTP/1.1
Host: apply.recruitment-bn.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.recruitment-bn.art/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 13:09:16 GMT
content-type: text/javascript
last-modified: Mon, 15 Jan 2024 13:21:17 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsAv%2FPI2ZhyIO0SkC5nWLY65DUgaw5vP4WJ%2BMm1XR41cWTl4VhWS%2BEqlH5K96qHg%2Fgepny3PkfhJBYbRjXExSOzktjIf83rHegvkYD7tPoNXz%2FKLIKrEFQDsukaeAUyCC15mlOabhC%2FN2uM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880171883d1a56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers