WEBSITE ANALYSIS REPORT

https://produklokal.palukota.go.id/app

19 Jun 2026 · 13:27:45.000 UTCpublic

Report tags: fedex logistics phishing
Submit tags: openphish

Request review

Phishing detected

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:27:13.135 GET 301 document 0 B 1601 ms 1 alerts

13:27:14.742 GET 200 document 32.1 KB 224 ms 1 alerts

13:27:15.221 GET 200 stylesheet 188.5 KB 452 ms 1 alerts

13:27:15.223 GET 200 stylesheet 1.7 KB 223 ms 1 alerts

13:27:15.227 GET 200 script 2.7 KB 445 ms 1 alerts

13:27:15.423 GET 200 script 4.5 KB 250 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://produklokal.palukota.go.id/app/js/respond.min.js

IP / ASN

103.160.152.179

AS141603 · Pemerintah Kota Palu

Requested by: https://produklokal.palukota.go.id/app/

Resource information

File type: JavaScript source, ASCII text, with very long lines (4453)
MIME type: text/javascript
First seen (UTC): 07 Mar 2023 · 12:03:04.000 UTC
Last seen (UTC): 12 Oct 2026 · 03:26:56.858 UTC
Times seen: 500

Size: 4.5 KB (4593 bytes)
MD5: 78915bb8b3dd6696d3842d82ed48b104
SHA1: 504cce482567765d63843d7b9d00c4195109c449
SHA256: 1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e

Certificate information

Issuer: Sectigo Limited · Sectigo Public Server Authentication CA DV R36
Subject: *.palukota.go.id
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: F3:07:B3:80:0C:F2:93:7E:90:B8:69:F4:A4:8F:E7:90:9E:DB:B6:AE
Valid from: Fri, 21 Nov 2025 00:00:00 GMT
Valid until: Sat, 21 Nov 2026 23:59:59 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - FedEx	medium	Phishing

HTTP headers

Request headers

GET /app/js/respond.min.js HTTP/1.1
Host: produklokal.palukota.go.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://produklokal.palukota.go.id/app/
Cookie: PHPSESSID=sph3pke67bg2kjom8iijgo58f3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
last-modified: Fri, 27 Jan 2017 06:50:18 GMT
etag: "11f1-5470de0f73e80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2218
content-type: text/javascript
date: Fri, 19 Jun 2026 13:27:15 GMT
server: Apache
X-Firefox-Spdy: h2

13:27:15.425 GET 200 stylesheet 152.6 KB 6469 ms —

13:27:15.427 GET 200 script 87.4 KB 469 ms 1 alerts

13:27:15.429 GET 200 script 60.9 KB 467 ms 1 alerts

13:27:15.435 GET 200 img 3.7 KB 463 ms 1 alerts

13:27:15.436 GET 200 img 1.1 KB 461 ms 1 alerts

13:27:15.440 GET 200 img 2.1 KB 458 ms 1 alerts

13:27:15.441 GET 200 img 1.5 KB 457 ms 1 alerts

13:27:15.442 GET 200 img 964 B 456 ms 1 alerts

13:27:17.107 GET 200 img 5.3 KB 4819 ms —

https://produklokal.palukota.go.id/app

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://produklokal.palukota.go.id/app

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://produklokal.palukota.go.id/app

Domain graph

Network requests