r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 381442da2a14cb93770f4c8f6e19d35b
31c48467751e2450a63004c57eea0c7872023eaf
61b0985f47033bd7020ab3b8cdcbc6c17be6ab9b6feba69e006088b78e21c0f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61B0985F47033BD7020AB3B8CDCBC6C17BE6AB9B6FEBA69E006088B78E21C0F0"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9641
Expires: Thu, 15 Dec 2022 13:38:41 GMT
Date: Thu, 15 Dec 2022 10:58:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4a5e9bc8b7891ac5f4552c29bcbaedb0
39735081eeb64eae477c61c1147daeb68fb37b22
c465efaf205ff2992af02c16187ca14a658cd5335b892903374f3adab32a8cd9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C465EFAF205FF2992AF02C16187CA14A658CD5335B892903374F3ADAB32A8CD9"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Thu, 15 Dec 2022 12:31:31 GMT
Date: Thu, 15 Dec 2022 10:58:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 15 Dec 2022 10:33:53 GMT
content-type: application/json
age: 1447
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51bd0cc75ed746fd33c950eb12936b7e
4a1007ea6c6e4f5e8b4a7d1f85f7a3e329dc8f50
188d4a0d544f40048dc7476cb4f5e478f1eb49a8ef1d51699fb155d2ae258655
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188D4A0D544F40048DC7476CB4F5E478F1EB49A8EF1D51699FB155D2AE258655"
Last-Modified: Tue, 13 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2934
Expires: Thu, 15 Dec 2022 11:46:54 GMT
Date: Thu, 15 Dec 2022 10:58:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DQAKYjB80qZHvVcJ9/xgztGHylDHxrGH57szL1ajfFL6+7V+k5CgqhWaxHmHL+4WVjP9tMrAzoU=
x-amz-request-id: VK09T78W4BA1D8H0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 15 Dec 2022 10:50:53 GMT
age: 427
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 10:58:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 15 Dec 2022 10:33:21 GMT
age: 1480
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 210b7a2584ae55362c4b582e325f37f7
5f1982f961f1c5db96bbb66af075bab3cb535963
cb3767debad90cb8a34ce287de194cdb2a4f7146e7b51560fd2e0eb11fbfbc2f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6320
Cache-Control: max-age=86055
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 10:58:01 GMT
Etag: "63999230-1d7"
Expires: Fri, 16 Dec 2022 10:52:16 GMT
Last-Modified: Wed, 14 Dec 2022 09:06:56 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /9+yMgZa+2qWVGp2TwG/DA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vS78AdTZqwr5GoDkfT0XgHDB2dc=
fonts.googleapis.com/css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=3.0.2
200 OK 482 B URL HTTP/1.1 fonts.googleapis.com/css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=3.0.2
IP
Hash f8cdaf4edadac0a01dd3566948114356
ba7ac8c66b92030423d961e02419c532209f9cb3
cb8b7e0c114d7021cd8151974e98c0afe7558a677a284659273f775410a7023f
GET /css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=3.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 15 Dec 2022 10:58:02 GMT
Date: Thu, 15 Dec 2022 10:58:02 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
seragammempeng.com/author/admin/
200 OK 28 kB URL HTTP/1.1 seragammempeng.com/author/admin/
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (59489), with CRLF, LF line terminators
Hash c3ec53c7a4a00ac2201c6a7ea63b7a09
62812d80bc23510a71bdc5a7405f4f04f9fb8c8b
f3d28da76d71f359f4a27aec32baf58f8d080ba7e1a673615c2013e112293598
Analyzer Verdict Alert fortinet Phishing
GET /author/admin/ HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:00 GMT
Server: Apache
Link: <https://seragammempeng.com/wp-json/>; rel="https://api.w.org/", <https://seragammempeng.com/wp-json/wp/v2/users/3>; rel="alternate"; type="application/json"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e30904bd9b57028f7ba1cc8e04ff08fd
9acb88374abef6387243ce8c5cf1149d73879ac1
be1ece2af7858ffc84e916d4554a805760c13a2eab346ac5a09a232b79116225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 10:58:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-196429993-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-196429993-1
IP
File type ASCII text, with very long lines (1921)
Hash 1673eede6b2e78d6b019c6a7a15c0d61
7ab81ff36ba0d7188201c7d9bbf614ec7eb95cf1
b3b68156c6c7c77ef6451336b68c5115693ac14a7d5e32aab4857513daa08f38
GET /gtag/js?id=UA-196429993-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Dec 2022 10:58:02 GMT
expires: Thu, 15 Dec 2022 10:58:02 GMT
cache-control: private, max-age=900
last-modified: Thu, 15 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e30904bd9b57028f7ba1cc8e04ff08fd
9acb88374abef6387243ce8c5cf1149d73879ac1
be1ece2af7858ffc84e916d4554a805760c13a2eab346ac5a09a232b79116225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 10:58:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
seragammempeng.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 90 kB URL HTTP/1.1 seragammempeng.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 07 Jul 2022 02:41:53 GMT
Accept-Ranges: bytes
Content-Length: 89521
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0
200 OK 24 kB URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
Hash d08a3cb6d4db651b57f356dca09006d6
00f341bd4da1fd216851a8984f88a6f526cae243
43136e0146ea7dce9c600f9e700db8ed44033072861a65bce814972d7514070a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 23537
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
seragammempeng.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.0.2
200 OK 71 kB URL HTTP/1.1 seragammempeng.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.0.2
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (63461)
Hash 1e48c94d0ed6889721a1a291cfb420db
4c82e032bf308e80c6b798e0550422a85a931610
fa4c82f5c8b0c7f26dd47e771d672713d33bea886c7732a3372e88302181d31c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.0.2 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:33:26 GMT
Accept-Ranges: bytes
Content-Length: 71375
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
seragammempeng.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0
200 OK 19 kB URL HTTP/1.1 seragammempeng.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 07 Jul 2022 02:41:53 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10881
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 10:58:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10881
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 10:58:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10881
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 10:58:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 672ae812012d060ba75fbb8cb9d6038c
2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce
cd9c002af775a6ba6ff8902a67e19c2ed2663d23bf8a1c3fe763598a60ba8d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5259
x-amzn-requestid: 21c0e355-e696-4785-a162-5f96e02836f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3fV1HHKIAMFsjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392df58-608335604793d9f46939a81a;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 07:10:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BYwjCf0sQ3F2gNE6x5Q5K6D_PhMXV-T8kPGRpVHIdouM_I9sU7bMOw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 02:09:49 GMT
age: 31693
etag: "2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 651b0f2569cf044585ce4f571cfd89fb
4c5e9db56536dd4145d63200d0fd74e2aa243fbf
c561267909b1e19768a2c11d78bab18faaa0de11d822e56324d7642daf798bf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5820
x-amzn-requestid: 096e8aca-b98f-4994-a084-888e9a03aa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c0NT8HJFIAMFeBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63918f4c-59e8f13b176bb8ae43d2da3d;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 07:16:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QxPGQKNjwH47HMqTzZBBnXl_coIObq0sNoSs8sGA_uMb9O1_77SNIQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 03:16:51 GMT
age: 27671
etag: "4c5e9db56536dd4145d63200d0fd74e2aa243fbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F127c491c-f334-4f88-ab1c-07169225ca7c.gif
200 OK 31 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F127c491c-f334-4f88-ab1c-07169225ca7c.gif
IP
File type GIF image data, version 87a, 296 x 148\012- data
Hash 1a355e31327e2a5f648c36fdc4d2348a
ab6149b7874d751c3b897889902ecf52cbede8e4
cf3fbf211bc15f39efe535bf66a281d124c6254b0b9e641b6ea3c8023ab869dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F127c491c-f334-4f88-ab1c-07169225ca7c.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 30895
x-amzn-requestid: 2d48ad82-6b48-4b9b-9dd0-98afd8b7f9ed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c0NExFi7oAMFuKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63918eeb-6ceedd921e75513b6dfdb084;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 07:14:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Hl0Mdyy9oH1n1LveM7TzD0kSA7NT80XbRiPEAQMbjxmMqRmpwcrG5w==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 15:39:39 GMT
age: 69503
etag: "ab6149b7874d751c3b897889902ecf52cbede8e4"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg
200 OK 3.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e72301b10bca35b0a570adb01aea806
ff5817aecda71a982779d5b12ba19e3264e964a3
3de1caddc5e0214a69e34ecb64be729a70462f8ea1852f2b9b97901bdc0fd3cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3187
x-amzn-requestid: 01e45059-3240-4c5b-bd89-4cce8387e6f4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUX0FUgoAMFYqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6765-1db6a3fd5433985e5f0687a7;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:49:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ab-V5dPQRj6wn9lhjFnS0WCdjKhyKG0S_eXyDQM86Bg-8P4qxvwqQg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 17:09:04 GMT
age: 64138
etag: "ff5817aecda71a982779d5b12ba19e3264e964a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d2294cdacdc84b8b19874ba56035a6d
53009a81b15e464d5529d36b1e04b841b2ae034e
67d59aa026b43ed3f698f3853b986fc7c07e4e6e5f7b3551e59238f79978480a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7616
x-amzn-requestid: 71bbe208-11e3-4280-bf09-bff8bd18fcb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c82fXGmPoAMF3Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63950462-12393ca432808b7f0b2771dc;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 22:12:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7aqhogNxvIgQ_WqzVaVjsoulT568Lgsn_I-nLNpCi_rhcUs7AiCkkQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 17:01:37 GMT
age: 64585
etag: "53009a81b15e464d5529d36b1e04b841b2ae034e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc8ebfc6-61e6-40a2-9330-dccc75c41225.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc8ebfc6-61e6-40a2-9330-dccc75c41225.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86aaca525eba678cdae6480594a8249a
87171c4499e8d82e8ec325e9133c180c0773c1dc
03fb5c8f20a85f301f9bf3096aefb36bbadfdd54d4bdd5227d45fced4ad004d7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc8ebfc6-61e6-40a2-9330-dccc75c41225.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9864
x-amzn-requestid: f4e0138f-d94b-477d-942b-03c475c92c55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3VwGFX3oAMFoXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392d000-5fa027616c6c5617367f2b3f;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 06:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qGQccPI0OykOc__llgZFDZhT7CYWNMSn1SYTcex-1qmT4ZamwUtTHA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 00:28:13 GMT
age: 37789
etag: "87171c4499e8d82e8ec325e9133c180c0773c1dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
seragammempeng.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0
200 OK 89 kB URL HTTP/1.1 seragammempeng.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (43771)
Hash d534fc4463d84fecc2a0b4e847bec46e
a553b04e1476190984e01192467df79f9645ab70
d678ab3b4e7dddf5615012cc1a930e50dfbc967181b8fbeb1b98d61549f5ed08
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 07 Jul 2022 02:41:53 GMT
Accept-Ranges: bytes
Content-Length: 88870
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/dist/libs/njt-whatsapp.js?ver=3.0.5
200 OK 25 kB URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/dist/libs/njt-whatsapp.js?ver=3.0.5
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (24921), with no line terminators
Hash 45460499b78631ee5e94f01a55d5620c
c3ff27fc1424d0dbe3b0198bdf3eccde95d8b090
5fbef90f9c2214e373c09de7a09d7f1e2a48d041f76cfe4e79dee08df0c093c4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/dist/libs/njt-whatsapp.js?ver=3.0.5 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 24921
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-popup.js?ver=6.0
200 OK 340 B URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-popup.js?ver=6.0
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
Hash 810c4f8eaa9c5326582116a87eeafd3b
35917b224eec6c21d93fecc2d76b324967148898
ef5007d0d1260f32576abf54958628d054c756d7f28601cbb27f228ab095ebd5
GET /wp-content/plugins/wp-whatsapp/assets/js/whatsapp-popup.js?ver=6.0 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 340
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-content/uploads/astra-addon/astra-addon-60d970fdb8bff3-49605961.js?ver=3.4.1
200 OK 31 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/astra-addon/astra-addon-60d970fdb8bff3-49605961.js?ver=3.4.1
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (30973), with no line terminators
Hash f2f12137640486ddd06ae5216cabfca9
fbd9ca938820168c7b92669c99f6e0857214dead
14751f03b002934a56328bc190c99aa0cbd1ba14edaf4b8ed8756c41379a1dec
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/astra-addon/astra-addon-60d970fdb8bff3-49605961.js?ver=3.4.1 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Mon, 28 Jun 2021 06:49:33 GMT
Accept-Ranges: bytes
Content-Length: 30973
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.0.2
200 OK 15 kB URL HTTP/1.1 seragammempeng.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.0.2
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (14882), with no line terminators
Hash 6b7c6222435131a580b08a2215200e92
578f706f5374108232874ec0af0a8ab7bd2e84e4
f865a351c01dc0ba00b81ce2c392fd7f47dc0e7af4a8ada49fc86734a2cbf26e
GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.0.2 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:03 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:33:26 GMT
Accept-Ranges: bytes
Content-Length: 14882
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-content/uploads/astra-addon/astra-addon-60d970fdb81026-06706426.css?ver=3.4.1
200 OK 57 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/astra-addon/astra-addon-60d970fdb81026-06706426.css?ver=3.4.1
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (56900), with no line terminators
Hash 918264aaf3da7a0919f29fc6de537bc1
4c1fa6285b9d832ecf71cafcb7ce952fa871d8da
38b3c7643fc7fac3f3aa71e2b9e4894a133e25f6fa64609f4d12de745ebd22c8
GET /wp-content/uploads/astra-addon/astra-addon-60d970fdb81026-06706426.css?ver=3.4.1 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:02 GMT
Server: Apache
Last-Modified: Mon, 28 Jun 2021 06:49:33 GMT
Accept-Ranges: bytes
Content-Length: 56900
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.0.5
200 OK 407 B URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.0.5
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
Hash 82e992b908f0761113e63c62d6b3d600
be3bd872176d7f747fe50995d6680b68de32d7d1
418aba1ca07f7982d6349dc33c7d33528daf8bebb7be0321ebe302083b732474
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.0.5 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:03 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 407
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
seragammempeng.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 seragammempeng.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/author/admin/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:03 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 07:30:39 GMT
Accept-Ranges: bytes
Content-Length: 11224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://seragammempeng.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8000
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 09 Dec 2022 13:35:35 GMT
Expires: Sat, 09 Dec 2023 13:35:35 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 16:59:07 GMT
Content-Type: font/woff2
Age: 508948
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://seragammempeng.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7884
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 12 Dec 2022 22:35:12 GMT
Expires: Tue, 12 Dec 2023 22:35:12 GMT
Cache-Control: public, max-age=31536000
Age: 217371
Last-Modified: Wed, 27 Apr 2022 17:03:52 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://seragammempeng.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7748
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 16:47:18 GMT
Expires: Fri, 08 Dec 2023 16:47:18 GMT
Cache-Control: public, max-age=31536000
Age: 583845
Last-Modified: Wed, 27 Apr 2022 16:21:30 GMT
Content-Type: font/woff2
seragammempeng.com/wp-content/uploads/2021/05/logo-339x97.png
200 OK 24 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/2021/05/logo-339x97.png
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type PNG image data, 339 x 97, 8-bit/color RGBA, non-interlaced\012- data
Hash 76560efdd637dd3b077cfd47af6043f3
70b82fdfeb53296f3a40d222e5a8e3d30b0fc515
24f7743b86d0e776ad2d3e2a10b47dbbac9bb9e3783c0eb3928a2aef21956e46
GET /wp-content/uploads/2021/05/logo-339x97.png HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:03 GMT
Server: Apache
Last-Modified: Mon, 28 Jun 2021 06:49:33 GMT
Accept-Ranges: bytes
Content-Length: 23920
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
seragammempeng.com/wp-content/uploads/2021/06/books-stack-reading-933333-1024x682.jpg
200 OK 88 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/2021/06/books-stack-reading-933333-1024x682.jpg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x682, components 3\012- data
Hash 34f8b9bad2a42b0ca9659bbbd9639d9f
d95fafdfb9c0845a6b747b78a4f84e97bca3d367
d06a6e6d60e8440db67beda6624c682787949a92f6d833d0d088a2a85cfaf60b
GET /wp-content/uploads/2021/06/books-stack-reading-933333-1024x682.jpg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:03 GMT
Server: Apache
Last-Modified: Thu, 17 Jun 2021 15:55:34 GMT
Accept-Ranges: bytes
Content-Length: 88393
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo.svg
200 OK 1.9 kB URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo.svg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1400)
Hash 310fe68c6bca27d00e2ff8588ca59f9f
ccbf23ccc4a4f5609edcd3935f7a6fb79221fe21
0b77afd9a36e0c402703da17857a985da86aad34040afda3da6d7fa42f09a856
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo.svg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:04 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 1853
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo_green.svg
200 OK 1.9 kB URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo_green.svg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1400)
Hash f35b8b0aa43bc80120df759284e57e67
ba6e8c9206a0edf46346c67d91902262ff72a64b
1ca55d16708364416978df51c5feafb94ef3bfe3a00eb246abedf2f7f92712dc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/img/whatsapp_logo_green.svg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:04 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 1853
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 10:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 15 Dec 2022 09:34:02 GMT
expires: Thu, 15 Dec 2022 11:34:02 GMT
cache-control: public, max-age=7200
age: 5042
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 10:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1940624695&t=pageview&_s=1&dl=http%3A%2F%2Fseragammempeng.com%2Fauthor%2Fadmin%2F&ul=en-us&de=UTF-8&dt=admin%20-%20Seragam%20Mempeng&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=79684534&gjid=93442404&cid=1870188122.1671101882&tid=UA-196429993-1&_gid=2099237395.1671101882&_r=1>m=2oubu0&did=dZTNiMT&gdid=dZTNiMT&z=1845123123
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1940624695&t=pageview&_s=1&dl=http%3A%2F%2Fseragammempeng.com%2Fauthor%2Fadmin%2F&ul=en-us&de=UTF-8&dt=admin%20-%20Seragam%20Mempeng&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=79684534&gjid=93442404&cid=1870188122.1671101882&tid=UA-196429993-1&_gid=2099237395.1671101882&_r=1>m=2oubu0&did=dZTNiMT&gdid=dZTNiMT&z=1845123123
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&aip=1&a=1940624695&t=pageview&_s=1&dl=http%3A%2F%2Fseragammempeng.com%2Fauthor%2Fadmin%2F&ul=en-us&de=UTF-8&dt=admin%20-%20Seragam%20Mempeng&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=79684534&gjid=93442404&cid=1870188122.1671101882&tid=UA-196429993-1&_gid=2099237395.1671101882&_r=1>m=2oubu0&did=dZTNiMT&gdid=dZTNiMT&z=1845123123 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://seragammempeng.com
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://seragammempeng.com
date: Thu, 15 Dec 2022 10:58:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
seragammempeng.com/wp-content/uploads/2021/05/icon-100x100.jpeg
200 OK 2.2 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/2021/05/icon-100x100.jpeg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 100x100, components 3\012- data
Hash 6626454a6d8b92cfce6ddaf5fee8c624
8f9c22056b07e7c4eb3c6e15f0b056c4373269b7
09cfeab64979e416367f17eb829c4182f1c43606db108c42f5709fc7a0976d0c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/05/icon-100x100.jpeg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:04 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:54:40 GMT
Accept-Ranges: bytes
Content-Length: 2240
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
0.gravatar.com/avatar/c6683f0590d15eb0f58744449f06bbad?s=120&d=mm&r=g
200 OK 2.6 kB URL HTTP/1.1 0.gravatar.com/avatar/c6683f0590d15eb0f58744449f06bbad?s=120&d=mm&r=g
IP
File type PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash d1e0516a539cb2043efb0c412d9cb456
7cc6676ed00b7677bc9780027a0fb397407567c4
b9217ea7bd51abe07f362285aefcb950537a0bb7010bdad0ef4765c2bfedabc5
GET /avatar/c6683f0590d15eb0f58744449f06bbad?s=120&d=mm&r=g HTTP/1.1
Host: 0.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 10:58:04 GMT
Content-Type: image/png
Content-Length: 2566
Connection: keep-alive
Last-Modified: Tue, 10 Dec 2019 18:34:45 GMT
Link: <https://www.gravatar.com/avatar/c6683f0590d15eb0f58744449f06bbad?s=120&d=mm&r=g>; rel="canonical"
Content-Disposition: inline; filename="c6683f0590d15eb0f58744449f06bbad.png"
Access-Control-Allow-Origin: *
Expires: Thu, 15 Dec 2022 11:03:04 GMT
Cache-Control: max-age=300
X-nc: MISS arn 2
Accept-Ranges: bytes
seragammempeng.com/wp-content/uploads/2021/05/icon-300x300.jpeg
200 OK 6.5 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/2021/05/icon-300x300.jpeg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3\012- data
Hash c07dfae3539967ab42cb8119d15b9dee
9884d14b77ca72f3ece9195f7cff475b54094129
2bbb2eede0e052bc2aab7e953987530b90681dc2b0514b856afb413ccefc2273
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/05/icon-300x300.jpeg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:04 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:54:40 GMT
Accept-Ranges: bytes
Content-Length: 6496
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/x_icon.svg
200 OK 730 B URL HTTP/1.1 seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/img/x_icon.svg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (626)
Hash eae9c993f36d452b7c0425cecbbd312f
e921c015d69dc787e5aa80bf24eb34739121cf88
8b93c3336127ddd433c588dd1033c76449f292475b3bcfe4355eaeecf2641eda
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-whatsapp/assets/img/x_icon.svg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://seragammempeng.com/wp-content/plugins/wp-whatsapp/assets/css/style.css?ver=6.0
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:04 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 07:57:29 GMT
Accept-Ranges: bytes
Content-Length: 730
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
seragammempeng.com/wp-content/uploads/2021/05/compare-fibre-Y8TiLvKnLeg-unsplash-1024x683.jpg
200 OK 70 kB URL HTTP/1.1 seragammempeng.com/wp-content/uploads/2021/05/compare-fibre-Y8TiLvKnLeg-unsplash-1024x683.jpg
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x683, components 3\012- data
Hash 577f2f2152bdf892bb0ef4a6b9489d1e
bce912c555f1d67e2863862d524c9e5b167117ed
9c9dce632f6436606b6b3f3bfd140cb7e3ab895d63f62b9000ae4042cb772f5f
GET /wp-content/uploads/2021/05/compare-fibre-Y8TiLvKnLeg-unsplash-1024x683.jpg HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:05 GMT
Server: Apache
Last-Modified: Fri, 28 May 2021 04:54:17 GMT
Accept-Ranges: bytes
Content-Length: 69822
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
seragammempeng.com/author/admin/page/2/
200 OK 0 B URL HTTP/1.1 seragammempeng.com/author/admin/page/2/
IP
ASN #136851 PT ARDETAMEDIA GLOBAL KOMPUTINDO
Analyzer Verdict Alert fortinet Phishing
GET /author/admin/page/2/ HTTP/1.1
Host: seragammempeng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: http://seragammempeng.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 10:58:05 GMT
Server: Apache
Link: <https://seragammempeng.com/wp-json/>; rel="https://api.w.org/", <https://seragammempeng.com/wp-json/wp/v2/users/3>; rel="alternate"; type="application/json"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
103.131.51.200
34.117.237.239
93.184.220.29
23.36.76.249