Report - bdocaresloginverification.page.link/Verify

Report Overview

Submitted URL
bdocaresloginverification.page.link/Verify
IP
142.250.74.65
ASN
#15169 GOOGLE
Submitted
2023-06-09 23:20:04
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-09	1.3 kB	2.8 kB	142.250.74.3
bdocaresloginverification.page.link	unknown	unknown	No data	No data	498 B	1.5 kB	142.250.74.65
v.ht	698706	2009-10-23	2012-06-25	2023-06-09	469 B	1.9 kB	69.61.26.122
www.googletagmanager.com	75	2011-11-11	2013-05-22	2023-06-09	414 B	48 kB	142.250.74.168
biroekbang.sulbarprov.go.id	unknown	2007-08-07	2019-08-08	2023-06-09	3.6 kB	42 kB	36.88.112.238
online.bdo.com.ph	403417	unknown	2013-07-12	2023-06-08	2.1 kB	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-06-09	medium	bdocaresloginverification.page.link/Verify
2023-05-30	medium	v.ht/alertbdo
2023-06-02	medium	biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

PhishTank

Scan Date	Severity	Indicator	Alert
2023-06-05	medium	biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (18)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b9385c929b601d930b3c5f536aac09d1
9a1988349002870a20e310deeedc966c5e513c3b
0024c7d008bc40a0c82c0b36898b49cc99d8aee177db4adbc1616e16d6c5030f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 23:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bdocaresloginverification.page.link/Verify

142.250.74.65

0 B

URL
bdocaresloginverification.page.link/Verify
IP
142.250.74.65:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
openphish	BDO Unibank

HTTP Headers

GET /Verify HTTP/1.1
Host: bdocaresloginverification.page.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: application/binary
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 Jun 2023 23:19:47 GMT
location: https://v.ht/alertbdo
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: same-site
content-security-policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport, script-src 'nonce-fHyi7aLhqRfJ33XOstBs4A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b9385c929b601d930b3c5f536aac09d1
9a1988349002870a20e310deeedc966c5e513c3b
0024c7d008bc40a0c82c0b36898b49cc99d8aee177db4adbc1616e16d6c5030f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 23:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

v.ht/alertbdo

69.61.26.122

1.5 kB

URL
v.ht/alertbdo
IP
69.61.26.122:0
ASN
#141518 Subhosting Innovations Pvt Ltd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2908)
Size
1.5 kB (1480 bytes)
Hash
b7ef21c730c70362a92b1520d325b17d
d90864a762f39fa76a25374cf8436f6a48b26265
7da418f0ca2c435299b950f59de134cc92c89c12726f446b3b626db09bf6e097

Detections

Analyzer	Verdict	Alert
openphish	BDO Unibank

HTTP Headers

GET /alertbdo HTTP/1.1
Host: v.ht
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Hotcores.com
Date: Fri, 09 Jun 2023 23:13:35 GMT
Content-Type: text/html; Charset=UTF-8;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
I-AM: Beta
Strict-Transport-Security: max-age=31536000; includeSubdomains;
Content-Encoding: gzip

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fc8e1ec54c50413f6e09e63a85414e7c
929ef6a2a5150200fe2bacfc03245b53be30e46f
9441071bcc600b4efd8d0e6f03237f7cccb737b30125bd1095051a5acdf23ec6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 23:19:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-31510493-3

142.250.74.168

48 kB

URL
www.googletagmanager.com/gtag/js?id=UA-31510493-3
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2271)
Size
48 kB (47574 bytes)
Hash
4cf9d084457e87b893cd710ede4d61c5
10b58ed471fe6ad1b6b63cf0a6d599d7baae485b
932c70fe077b98751b99cde43264775ada855fb2aa91c936632aa59cda8ffbdd

HTTP Headers

GET /gtag/js?id=UA-31510493-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v.ht/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Jun 2023 23:19:48 GMT
expires: Fri, 09 Jun 2023 23:19:48 GMT
cache-control: private, max-age=900
last-modified: Fri, 09 Jun 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fc8e1ec54c50413f6e09e63a85414e7c
929ef6a2a5150200fe2bacfc03245b53be30e46f
9441071bcc600b4efd8d0e6f03237f7cccb737b30125bd1095051a5acdf23ec6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 23:19:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

36.88.112.238

200 OK

5.7 kB

URL User Request GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (453), with CRLF line terminators
Size
5.7 kB (5707 bytes)
Hash
8eb2ec05b39c85dfbb4ccd80fc884247
bd9388228147a01ac7a09b5190af541cf65be17d
4b887df12cbdbdabee4e66cc62c6fce84830a19f811d5de4bf2e4b7a9f5b49af

Detections

Analyzer	Verdict	Alert
openphish	BDO Unibank
phishtank	Other

HTTP Headers

GET /wp-content/uploads/2018/12/sso/login.php HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://v.ht/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:45 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/7.4.33
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5707
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/jquery-1.4.2.min.js

36.88.112.238

200 OK

24 kB

URL GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/jquery-1.4.2.min.js
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
ASCII text, with very long lines (820)
Size
24 kB (24391 bytes)
Hash
cc00cbf5f25117bf25173cb4bc083b5e
8c10d7fe0fd2288334d253b063cf365d1044f1c2
877a35ef37e3b8581c24f44fb4af98a7482926be7c77e887dbc7311544efbbae

HTTP Headers

GET /wp-content/uploads/2018/12/sso/assets/jquery-1.4.2.min.js HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:45 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
Last-Modified: Mon, 15 May 2023 08:35:17 GMT
ETag: "1187d-5fbb7559cb6d0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 24391
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/ccti.js

36.88.112.238

200 OK

3.4 kB

URL GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/ccti.js
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
ASCII text
Size
3.4 kB (3354 bytes)
Hash
90f6e6572eda7c64d33ecd8f369f0033
e4e906ccc3ebacbdd7c972f157d11e16b00002b6
bc4b5cb744834a94ab5969d234f4449a6bef21a89dbaed9b687bea28f123c114

HTTP Headers

GET /wp-content/uploads/2018/12/sso/assets/ccti.js HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:46 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
Last-Modified: Mon, 15 May 2023 08:35:17 GMT
ETag: "3220-5fbb7559cab18-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3354
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/base.css

36.88.112.238

200 OK

1.7 kB

URL GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/base.css
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
ASCII text
Size
1.7 kB (1715 bytes)
Hash
ce24542679dad5e575f2ee924d9a8970
7a05bbcb26a766617c3206a340f049ca682a5165
401c2fcfcf9fb260a7c6f94da2b665847a4c6951d6b22f5f85977cff1d7111e9

HTTP Headers

GET /wp-content/uploads/2018/12/sso/assets/base.css HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:46 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
Last-Modified: Mon, 15 May 2023 08:35:17 GMT
ETag: "1883-5fbb7559ca730-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1715
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/jquery.rc4.js

36.88.112.238

200 OK

1.5 kB

URL GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/jquery.rc4.js
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
ASCII text
Size
1.5 kB (1463 bytes)
Hash
1c2778f7746fdc472dd72b41e9dab54b
57e930bc70eeb944b009ad70a12a849196b9d6ab
328d300e2048d2554bee8bd5a6e157eef91c5b24bc518fd67546c1cbd6e0efe4

HTTP Headers

GET /wp-content/uploads/2018/12/sso/assets/jquery.rc4.js HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:46 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
Last-Modified: Mon, 15 May 2023 08:35:17 GMT
ETag: "142a-5fbb7559cb2e8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1463
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/ui.core.min.js

36.88.112.238

200 OK

2.9 kB

URL GET HTTP/1.1
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/assets/ui.core.min.js
IP
36.88.112.238:443
ASN
#7713 PT Telekomunikasi Indonesia

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type
ASCII text, with very long lines (7893), with CR line terminators
Size
2.9 kB (2894 bytes)
Hash
a0d1f24f4c039341cdc1060926b23a49
0f893db5a052b15a4bf730efdc5c8a42d9962f04
ae4a14a8f46d78af8b4c94f2f41bcac73ca0499f6a0e46f403849c55eb6351b7

HTTP Headers

GET /wp-content/uploads/2018/12/sso/assets/ui.core.min.js HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 09 Jun 2023 23:18:46 GMT
Server: Apache/2.4.56 (Unix) OpenSSL/1.0.2k-fips
Last-Modified: Mon, 15 May 2023 08:35:17 GMT
ETag: "1ed6-5fbb7559cca58-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2894
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/css/component.style.css

0.0.0.0

0 B

URL GET
online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/css/component.style.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/css/component.style.css HTTP/1.1
Host: online.bdo.com.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/Login_Advisory_1.png

0.0.0.0

0 B

URL GET
online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/Login_Advisory_1.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/Login_Advisory_1.png HTTP/1.1
Host: online.bdo.com.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/favicon.ico

0.0.0.0

0 B

URL GET
biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Certificate
IssuerLet's Encrypt
Subjectbiroekbang.sulbarprov.go.id
Fingerprint59:6E:FC:42:68:57:5F:8D:C0:CA:AB:B1:DB:C8:5D:CB:47:D9:AF:81
ValiditySat, 29 Apr 2023 02:55:33 GMT - Fri, 28 Jul 2023 02:55:32 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2018/12/sso/favicon.ico HTTP/1.1
Host: biroekbang.sulbarprov.go.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/loginid.css

0.0.0.0

0 B

URL GET
online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/loginid.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sso/resources/com.ccti.citrine.sso.web.login.LoginUnifiedPage/css/loginid.css HTTP/1.1
Host: online.bdo.com.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/themes/theme-bdo/jquery-ui-1.8.2.custom.css

0.0.0.0

0 B

URL GET
online.bdo.com.ph/sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/themes/theme-bdo/jquery-ui-1.8.2.custom.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://biroekbang.sulbarprov.go.id/wp-content/uploads/2018/12/sso/login.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sso/resources/com.ccti.citrine.sso.CitrineUnifiedLoginApplication/web/themes/theme-bdo/jquery-ui-1.8.2.custom.css HTTP/1.1
Host: online.bdo.com.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biroekbang.sulbarprov.go.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP