Report - klp49.erl3.biz.id/

Report Overview

Visited public
2023-12-05 10:47:33
Tags
URL
klp49.erl3.biz.id/
Finishing URL
klp49.erl3.biz.id/verify.php
IP / ASN
172.67.155.51
#13335 CLOUDFLARENET
Title
Confirmation: You are Not a Robot!

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-12-05 05:10:30	985 B	61 kB	151.101.1.229
klp49.erl3.biz.id	unknown	unknown	No data	No data	1.5 kB	7.2 kB	104.21.88.254
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17 07:36:13	2023-12-04 05:28:09	2.0 kB	123 kB	172.64.204.20
file.gifan.id	unknown	2020-09-05	2022-05-27 01:39:42	2023-12-04 22:42:46	418 B	12 kB	104.21.234.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js	ScriptElement	81 kB	2023-08-05	2025-05-10
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-05 00:21 Last Seen2025-05-10 21:22 Times Seen2062 Hash e2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5 Loading...

	file.gifan.id/fontawesome.js	ScriptElement	11 kB	2023-07-20	2024-08-21
Pretty URL file.gifan.id/fontawesome.js IP 104.21.234.34 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-20 17:19 Last Seen2024-08-21 08:31 Times Seen403 Hash 7653d4719abf98a98d6e9412e33976e6 0b4414adc9da488b97830ce789a79994ba55aa23 051afcaea280590a5c6a5c472ad0852783d794a8923c4d26e388656fc9dcd791 Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css	151.101.1.229	200 OK	35 kB
URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css IP 151.101.1.229:443 ASN #54113 FASTLY Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type Unicode text, UTF-8 text, with very long lines (65342) Size 35 kB (34728 bytes) Hash 896192cc65e20f1fcc6d792b5b9a4626 b13ef70543d70c1ec7fdd56a5ebc9d7d64023851 d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6 HTTP Headers `GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Referer: https://klp49.erl3.biz.id/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: text/css; charset=utf-8 x-jsd-version: 5.3.1 x-jsd-version-type: version etag: W/"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE" content-encoding: br accept-ranges: bytes date: Tue, 05 Dec 2023 10:47:17 GMT age: 6955072 x-served-by: cache-fra-eddf8230044-FRA, cache-bma1648-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 34728 X-Firefox-Spdy: h2

	cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js	151.101.1.229	200 OK	25 kB
URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP 151.101.1.229:443 ASN #54113 FASTLY Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type ASCII text, with very long lines (65299) Size 25 kB (25082 bytes) Hash e2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5 HTTP Headers `GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Referer: https://klp49.erl3.biz.id/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 5.3.1 x-jsd-version-type: version etag: W/"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g" content-encoding: br accept-ranges: bytes date: Tue, 05 Dec 2023 10:47:17 GMT age: 10909861 x-served-by: cache-fra-eddf8230033-FRA, cache-bma1648-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 25082 X-Firefox-Spdy: h2

	klp49.erl3.biz.id/	104.21.88.254	302 Found	1.9 kB
URL User Request GET HTTP/2 klp49.erl3.biz.id/ IP 104.21.88.254:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjecterl3.biz.id Fingerprint9B:4D:4C:74:4E:01:3D:FE:E5:68:55:12:37:B4:A0:33:54:D3:93:6B ValidityMon, 20 Nov 2023 21:09:38 GMT - Sun, 18 Feb 2024 21:09:37 GMT File type Size 1.9 kB (1898 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: klp49.erl3.biz.id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Tue, 05 Dec 2023 10:47:16 GMT content-type: text/html; charset=UTF-8 location: verify.php cache-control: no-cache, no-store, must-revalidate, max-age=0 x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zDVxvBEC9xTZ8643oL1ayGvcVQ5Gl2AFuVeiLRQNBpirpwIoYF9bgWUntpiP6NGd%2B3dxXctJDiX28rjqj0j9lLoc%2BB8cGUeqoneJh27T8POVyLhLvYnFhoSMsjwYXHdyBYaMNA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5c68becb503-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803	172.64.204.20	200 OK	823 B
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 IP 172.64.204.20:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81 ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT File type ASCII text, with very long lines (845), with no line terminators Size 823 B (823 bytes) Hash 1af9af6e84d6fcbedffbf79321ca46b2 0f8c679ef763d2ecdc4d775dbe9af668b2284644 ebb1355be44fef0caf09c3740d278ab9461238e988fd43375d389a16e39bed8a HTTP Headers `GET /releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://klp49.erl3.biz.id/ Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Dec 2023 10:47:18 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Mon, 07 Feb 2022 20:11:39 GMT etag: W/"e8ee688b3310772b65f39c69b76f4720" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token x-cache: Hit from cloudfront via: 1.1 6c20cfa39bd3094f7e3b4598e3d2c402.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: 3Yyhb5X0XyxuqKZ7ZNFBUdbaEybzsHE5njTWDCeVW_SOpH7IYqgHNQ== age: 4507 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VR8aoU6Uv8FTU546CFAO4OBF0hOy4mdsvhy3P3oSQG4ig7RIAKaWcn4L2QgqCktMomiDMPyZkmQArBMGF7CjL1HSHlRM936Q13Q1LltGY4HRj3Lq4LTJlTcL0ypYe8%2BP%2FqFYcvUERQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 830bb5d1afae23db-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803	172.64.204.20	200 OK	1.8 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 IP 172.64.204.20:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81 ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT File type ASCII text, with very long lines (1817), with no line terminators Size 1.8 kB (1789 bytes) Hash 3dedc00973400e03c5ede855beb3e8b5 c72d245eb6fa18840821a7d53634a4f8ac5119d0 a45344d4b89aadfcddc80ff5e6de83bcbb2799a2af99a046e1cea1dd6fe0f28c HTTP Headers `GET /releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://klp49.erl3.biz.id/ Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Dec 2023 10:47:18 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Mon, 07 Feb 2022 20:11:39 GMT etag: W/"369cbeaee8e26da69cc5b0a0700cd62c" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 b25a88361ae631ab0435a1c107ccf948.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: mdgtbzF9c_fZ8hSkwErdCLEb9fBbJjPLlVsQayizg7y7jHE2jbB4hw== age: 4507 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wAa%2ByqZ0IUtFTRp60czPxFAL4CamEVEQmIEaE2ahNZkBKl4QB6UgvXBXiUhRjc2b%2BUeftL4QLnN1WAwMSY6CSUnrTZL7Y4pl0%2BaePu6LRfPKNdz9dYyzmAKxOgL8j0SR3lEUdeG%2Feg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5d1afa223db-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	klp49.erl3.biz.id/verify.php	104.21.88.254	200 OK	1.9 kB
URL User Request GET HTTP/3 klp49.erl3.biz.id/verify.php IP 104.21.88.254:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjecterl3.biz.id Fingerprint9B:4D:4C:74:4E:01:3D:FE:E5:68:55:12:37:B4:A0:33:54:D3:93:6B ValidityMon, 20 Nov 2023 21:09:38 GMT - Sun, 18 Feb 2024 21:09:37 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2066), with no line terminators Size 1.9 kB (1898 bytes) Hash f5333ef0fed59db57ee2b54b73a2cec2 0c72da606d1663602d38b58c451ee44ec6a0e919 e1123b49a5698556c28436b8a1ac9568ed18e676cb50748faa8c381ea4f1da79 HTTP Headers `GET /verify.php HTTP/1.1 Host: klp49.erl3.biz.id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Tue, 05 Dec 2023 10:47:17 GMT content-type: text/html; charset=UTF-8 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=955b20cd2aae9238903e6469c5449fae; path=/; secure vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gmzzEg3pQtne4rv0PYOfpwWMh1K%2BKMMF2ji41VbyC5t17OFaDCTz3nsrtFpsartxgJhzDjqOWcC%2FGdd32h5wosx1PV2SpLvOZ%2BDN7r94brzxsQCxvcaT1Wf4a9AWtzOnB2F4Yw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5c93e5eb503-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	file.gifan.id/fontawesome.js	104.21.234.34	200 OK	11 kB
URL GET HTTP/2 file.gifan.id/fontawesome.js IP 104.21.234.34:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGoogle Trust Services LLC Subjectgifan.id Fingerprint05:08:56:A0:2C:BF:31:A0:4C:D0:5C:0F:18:A3:B9:7D:58:74:03:29 ValidityWed, 29 Nov 2023 03:44:14 GMT - Tue, 27 Feb 2024 03:44:13 GMT File type ASCII text, with very long lines (10594), with CRLF line terminators Size 11 kB (11169 bytes) Hash 7653d4719abf98a98d6e9412e33976e6 0b4414adc9da488b97830ce789a79994ba55aa23 051afcaea280590a5c6a5c472ad0852783d794a8923c4d26e388656fc9dcd791 HTTP Headers `GET /fontawesome.js HTTP/1.1 Host: file.gifan.id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://klp49.erl3.biz.id/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Dec 2023 10:47:17 GMT content-type: application/javascript cache-control: public, max-age=604800 expires: Thu, 07 Dec 2023 09:14:13 GMT last-modified: Tue, 03 Jan 2023 12:39:32 GMT vary: Accept-Encoding,User-Agent x-powered-by: Niagahoster strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-turbo-charged-by: LiteSpeed cf-cache-status: HIT age: 437584 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lP8mcy8OBq9FOJwJ5SKTr%2BOm5VoHPT8vB1MCGakE8izV%2FBQ3n%2Bnjq2zdC2et4jHc1cO1SXS1sfNNRtlOKm2Cq4uyY%2FsQw0qKdnL1OW0TY48s%2BE6XrAdDL8xSj8jk4XnS"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5d0cce0b4f9-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803	172.64.204.20	200 OK	90 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803 IP 172.64.204.20:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81 ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT File type ASCII text, with very long lines (65321) Size 90 kB (89755 bytes) Hash 345f5ecc270c94968998574a2d37e31a 4b1937ca073a8376a07161bc40549585493ffa3d efad9b46d0c00f2562eb53236717ff21ebd474f8d68f69b45f92c424bfd87e9c HTTP Headers `GET /releases/v6.0.0/css/free.min.css?token=869e25b803 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://klp49.erl3.biz.id/ Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Dec 2023 10:47:18 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Mon, 07 Feb 2022 20:11:39 GMT etag: W/"345f5ecc270c94968998574a2d37e31a" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 df14c310a185bf47b230ee58842027fe.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: DqvnezW_ZDaJ72oU5KlZlu136IgUkSsUrO1Y5H18RdsfJ00V1Nt6jw== age: 4507 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WYTmzK0JbhNRsbVOGso2fyrERrpSWUSstMxtPPVoqDqGmRN4ma%2B8mlzYC4IRMISXFPluw1qxGfUSa9tiWl7BkapkNiYarsBKKB7ylXhQ7sNjK5hNUK7CTVVMrmVRuqV%2BWZEYGhu4MA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5d1afad23db-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803	172.64.204.20	200 OK	26 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 IP 172.64.204.20:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81 ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT File type ASCII text, with very long lines (26019) Size 26 kB (26234 bytes) Hash c32e971c7d11c2407f847b61c515f1e2 85ac47a05e49f01cd62301ee121a2ca0dfdc0f83 a7fb3a26d569bec0139baaae950e43c1e10b0afbcf6e9d7654aa1181a8319759 HTTP Headers `GET /releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://klp49.erl3.biz.id/ Origin: https://klp49.erl3.biz.id DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Dec 2023 10:47:18 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Mon, 07 Feb 2022 20:11:39 GMT etag: W/"c32e971c7d11c2407f847b61c515f1e2" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 ce4a706a25130daedebcad96e5386a46.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: 3Cf6PIJv8ZvCewahNhgT1g_NWrAFBsuhOzNOIkFbSFYN9qXXN0leLQ== age: 4507 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4XGyi19uw0pyz97xW0WYKaLDJnXcq1IOmnHVjbuZooaeuC2Wiif82jeKqE%2F9bwxLeIay1dNC%2BRyg58BC1kjOUdxun7TKo4p0bBX1PUoOlRAh8ZygOQI2iRc4z8oDqshf1lc5tIx7aw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 830bb5d1afac23db-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	klp49.erl3.biz.id/favicon.ico	104.21.88.254	404 Not Found	1.2 kB
URL GET HTTP/3 klp49.erl3.biz.id/favicon.ico IP 104.21.88.254:443 ASN #13335 CLOUDFLARENET Requested by https://klp49.erl3.biz.id/verify.php Certificate IssuerLet's Encrypt Subjecterl3.biz.id Fingerprint9B:4D:4C:74:4E:01:3D:FE:E5:68:55:12:37:B4:A0:33:54:D3:93:6B ValidityMon, 20 Nov 2023 21:09:38 GMT - Sun, 18 Feb 2024 21:09:37 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators Size 1.2 kB (1238 bytes) Hash 24b426fea67958554911ff4c943fdfe4 b92889146d4c1bbddccabe58ca15c814ea066f72 335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c HTTP Headers `GET /favicon.ico HTTP/1.1 Host: klp49.erl3.biz.id User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://klp49.erl3.biz.id/verify.php Cookie: PHPSESSID=955b20cd2aae9238903e6469c5449fae Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 404 Not Found date: Tue, 05 Dec 2023 10:47:18 GMT content-type: text/html cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed cf-cache-status: BYPASS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BnCCll0Omn1AJrzLZeM0rTiMh5UZsTHk0O3AyKnwYD9iDWkdwTz%2BXCkYnG2Reuexc1DD7H8wnQEmIa60dzlCuw5UAm%2Fui%2B8K2nBT5CG0QT78kmm3s0xLAO44PsC737jl28HSZA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 830bb5d2cf2fb503-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers