Report - baitululum.fah.uinjambi.ac.id/

Report Overview

Submitted URL
baitululum.fah.uinjambi.ac.id/
IP
103.65.236.164
ASN
#135450 PT Berkah Solusi Teknologi Informasi
Submitted
2022-11-22 04:35:43
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	432 B	6.9 kB	104.17.24.14
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	351 B	1.4 kB	142.250.74.10
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
baitululum.fah.uinjambi.ac.id	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.2 kB	1.0 MB	103.65.236.164
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	44.237.163.41
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	57 kB	34.120.237.76
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	653 B	99 kB	142.250.74.138
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	854 B	27 kB	216.58.207.195
s11.flagcounter.com	213070	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	507 B	9.2 kB	45.58.124.226
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/index.php/b_ulum	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/dropdown.js	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/main.js	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/util.js	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/popper/popper.js	Phishing
2022-11-22	medium	baitululum.fah.uinjambi.ac.id/lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/dropdown.js	14 kB	2023-03-07	2024-02-15
Pretty URL baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/dropdown.js IP 103.65.236.164 ASN #135450 PT Berkah Solusi Teknologi Informasi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:06 Last Seen2024-02-15 09:06:01 Times Seen197 Hash 5ea9a5d27044016c2c3a1aaab939dd5f 8dbeb849506799c029da8dce5544ea608809a47c 1a46b251f497d3a96de79d4b5f0fcbc3ee82a5e1514b612ca10e7c04ea3bc4ad Loading...

	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/popper/popper.js	82 kB	2023-03-07	2024-02-15
Pretty URL baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/popper/popper.js IP 103.65.236.164 ASN #135450 PT Berkah Solusi Teknologi Informasi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:06 Last Seen2024-02-15 09:06:00 Times Seen205 Hash 1f1ce65884b4fd568e2a2f974a012cc3 819a52559310765803b1743e9e5429459fc91644 8d49d070ae93a36681f93e53804bad25f1c586a304c895a2565334c4c9f11c7f Loading...

	baitululum.fah.uinjambi.ac.id/lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js	24 kB	2023-03-07	2023-11-04
Pretty URL baitululum.fah.uinjambi.ac.id/lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js IP 103.65.236.164 ASN #135450 PT Berkah Solusi Teknologi Informasi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:06 Last Seen2023-11-04 15:33:00 Times Seen17 Hash b0ea462d35bf9562497345655b1a1a0c bfb7eb5f154a0836d1fb435350dfae98308b2bec 14738dcf75e971581cd5c96ad3b3ae6302a6fa918c89d23fd52eeea2c62cba5a Loading...

	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/util.js	4.2 kB	2023-03-07	2024-02-15
Pretty URL baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/util.js IP 103.65.236.164 ASN #135450 PT Berkah Solusi Teknologi Informasi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:06 Last Seen2024-02-15 09:06:00 Times Seen185 Hash 54b69c1f494c6e370604321b6c929491 2b155314ba4f9fa24848c0e90093a16dd19dcfe8 7b1b77d62bbb36fe167bcc1e6ea3a73052892aac99c1f2e8aeb0e8ce0c475eb4 Loading...

	baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/main.js	4.8 kB	2023-03-07	2023-08-06
Pretty URL baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/main.js IP 103.65.236.164 ASN #135450 PT Berkah Solusi Teknologi Informasi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:53:36 Last Seen2023-08-06 20:31:52 Times Seen3 Hash f868d66c6d5196781d6c8f8250419b61 92197b10fd8303bcfde549af3ec77fd95c251a33 5babc3c638383514b6b32b783fdc937648a016d740369e9f94cd389e042cfdc6 Loading...

	ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js	96 kB	2023-03-07	2024-04-24
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:10 Last Seen2024-04-24 22:31:35 Times Seen18510 Hash 8fc25e27d42774aeae6edbc0a18b72aa b66ed708717bf0b4a005a4d0113af8843ef3b8ff b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682 Loading...

	ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/jquery-ui.min.js	238 kB	2023-03-07	2024-04-22
Pretty URL ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/jquery-ui.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:58 Last Seen2024-04-22 18:34:27 Times Seen1000 Hash 80cbc031ed1ae0bd82c578dd2d6a4ea0 7b6f5c747c19ad6fbe28957e4318559b45d89111 94217ee7990c505fb77ceff70625ee8b87a250a7109adafb79c29278b543c484 Loading...

HTTP Transactions (41)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4677
Expires: Tue, 22 Nov 2022 05:53:29 GMT
Date: Tue, 22 Nov 2022 04:35:32 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1952
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:35:32 GMT
Last-Modified: Tue, 22 Nov 2022 04:03:00 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4330
Expires: Tue, 22 Nov 2022 05:47:42 GMT
Date: Tue, 22 Nov 2022 04:35:32 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 04:09:18 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1574
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: V0j63Utua9dUm/aSSP0e21cV6ljRDNHpdxgHduY6z0WgYyY8Y7B85h3LcLXaqCfOouoBRa0IC9g=
x-amz-request-id: 6DBHG9JZ1QDMFJZM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 03:42:23 GMT
age: 3189
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 04:35:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 04:08:47 GMT
cache-control: public,max-age=3600
age: 1605
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

baitululum.fah.uinjambi.ac.id/

103.65.236.164

302 Moved Temporarily

20 B

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
data
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Date: Tue, 22 Nov 2022 04:35:32 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0; path=/; domain=baitululum.fah.uinjambi.ac.id
Location: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1453
Cache-Control: max-age=104134
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:35:33 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 09:31:07 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

44.237.163.41

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.237.163.41:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f1qfiRC4JjzNK+5TSzLk1g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wrd66Pqc/Bov7SmiQ5V5pEkVjls=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Tue, 22 Nov 2022 05:48:40 GMT
Date: Tue, 22 Nov 2022 04:35:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Tue, 22 Nov 2022 05:48:40 GMT
Date: Tue, 22 Nov 2022 04:35:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Tue, 22 Nov 2022 05:48:40 GMT
Date: Tue, 22 Nov 2022 04:35:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Tue, 22 Nov 2022 05:48:40 GMT
Date: Tue, 22 Nov 2022 04:35:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Tue, 22 Nov 2022 05:48:40 GMT
Date: Tue, 22 Nov 2022 04:35:34 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb52ad6b-bc3e-4cc6-8c74-7f367173fbdc.jpeg

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb52ad6b-bc3e-4cc6-8c74-7f367173fbdc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4269 bytes)
Hash
b52c578c918c74f35f3c0a3f0c5dd2be
39d9b60a2b11b95c0ae37f35deb9a594d8e61d08
48a67feefffe59d04660c0e7de58234f184bded9cbb121da8157387ebd24f8f5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb52ad6b-bc3e-4cc6-8c74-7f367173fbdc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4269
x-amzn-requestid: 9e70b9ad-7fb2-4f2d-bc87-d703abeb4888
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I62ERzIAMFcvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeab-6de953ea2d2aee071fea324b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:31 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9mu3P-liZS9j6mn71xiWE2JRWpZHSans7w-zGZVERGs24wxCkfR5Ww==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:02:57 GMT
etag: "39d9b60a2b11b95c0ae37f35deb9a594d8e61d08"
content-type: image/jpeg
age: 23557
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11793 bytes)
Hash
8b591bcc9d645eed0ea6ebc5dae07d31
97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb
82dde9a4d139bdfae1d8859f4d7a77f92182c65ad630e25d0cc52f346dd1dfad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11793
x-amzn-requestid: 7edbd95e-83c8-4162-886f-b0bf88deee5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oFrQIAMFnYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-4f1317ec61500d713816830d;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hd2a0sbw7fzVnkVpCOEAnu_W-Z0EajArOracSTImr6jbhOFwKbDKpw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:44:56 GMT
age: 24638
etag: "97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10556 bytes)
Hash
0ab62c5a7c3296600de924eb0b283bc1
bc4a2dc43898e3fb78ba7301d8b09b280991d221
f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eHLf2DFK-3yN5dEG22XItPxRzmODRdThIYJI2oZqDJpgTGQGSQnGzQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:46:07 GMT
age: 24567
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4308 bytes)
Hash
bd62f641e9d58eee10e41db0fa00b5f2
4210e5f150a49d6f6ee26cbb11ded8173ab8cf74
5858451bf7cac97b8881dde7e3197110fa8639c1d94b51934859669c51221e1a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4308
x-amzn-requestid: 7db10594-4acc-448d-b724-1c4bc8ec42ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrVFtRoAMFTzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee48-0a466f6b0bd48f3532216bca;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EZ6DqZY1DDMr_jSZs-aGTsD37q6dKLIEk9XJhKRTNOjjxfU-lWh8eg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:46:01 GMT
age: 24573
etag: "4210e5f150a49d6f6ee26cbb11ded8173ab8cf74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8365 bytes)
Hash
03830e3ff377979c234bf37561c54cfd
c18884ce9370c97e6b4e12ab0f827d68a1938bfa
5ba8bfc69c7eba42de4a16bf6d1e1e3570cd3918fe15cb8b2d25950ef791ddbb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8365
x-amzn-requestid: e6c2ec6e-525e-4b9f-a45d-63076580df5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrpFJ3oAMF4mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee4a-576f678b6e364bca09532010;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 89jqCw8OJIxusDPoTi5-HDxWcgCfNvRrku2VFBLcQbFJwLLaZBpHGA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:44:46 GMT
age: 24648
etag: "c18884ce9370c97e6b4e12ab0f827d68a1938bfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11249 bytes)
Hash
481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 03:49:11 GMT
age: 2783
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

104.17.24.14

200 OK

5.9 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
troff or preprocessor input, ASCII text, with very long lines (372)
Size
5.9 kB (5884 bytes)
Hash
aa712f2a9ab349290ddbc871138b13ba
2be3765114dbce70c84786dd7d2838c7edce486c
84dce905b67560d91a9993771337d6e5946c7f1e502b5bf06fb0ef6d34b97b57

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:35:35 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 547478
expires: Sun, 12 Nov 2023 04:35:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6EzUqducmcoI%2BltUR6CZ9U8xlHVEqxPV9Q06rTD1H83nu%2Bu1dRKWDLLFt3BZUz9g6FA2QOzVQiVuV%2FURzxwjoyD%2BnMoSV%2BlbL945sA%2FaEuwxEEseleodMmFlGGKOD051S1JSJWLZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76def5923e5f0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Noto+Sans:400,400italic,700,700italic

142.250.74.10

200 OK

849 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Noto+Sans:400,400italic,700,700italic
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
849 B (849 bytes)
Hash
5c0e107ce75181981f693d9e77630dc2
1cb8455cbdcc4372cf078fd9be91df93f473d8b7
d67fee9658711186e0e47be2c5d6e8a0a0f9bb982d9ff922c8157c4f781009d4

HTTP Headers

GET /css?family=Noto+Sans:400,400italic,700,700italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 22 Nov 2022 04:35:35 GMT
Date: Tue, 22 Nov 2022 04:35:35 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

baitululum.fah.uinjambi.ac.id/index.php/b_ulum

103.65.236.164

200 OK

4.8 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/index.php/b_ulum
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1453), with CRLF, LF line terminators
Size
4.8 kB (4802 bytes)
Hash
37aab019de905ee7719dcdd6deb44d5a
9da93e80de2adec774e199f5f297c70018201b1e
d45aa8bc2672d9852fca80df75790193cf98c71964a5c3927e5c37fc282dc743

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /index.php/b_ulum HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:33 GMT
Server: Apache
Cache-Control: no-store
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js

142.250.74.138

200 OK

34 kB

URL HTTP/1.1
ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
IP
142.250.74.138:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (32341)
Size
34 kB (33576 bytes)
Hash
856f85cc1b07156fa844b44a10c236c2
7cef457c0e1cd0c20f4e699564ea8997f0332021
c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01

HTTP Headers

GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33576
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 15 Nov 2022 10:24:14 GMT
Expires: Wed, 15 Nov 2023 10:24:14 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 583881

ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/jquery-ui.min.js

142.250.74.138

200 OK

64 kB

URL HTTP/1.1
ajax.googleapis.com/ajax/libs/jqueryui/1.11.0/jquery-ui.min.js
IP
142.250.74.138:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (32081)
Size
64 kB (63638 bytes)
Hash
03392666883ab34bbc126cc563eec08f
c47d84daf5c6c3b2fcad1b8b420adc8e5db28b42
4c36d2777427fcf407fbc55c6cda321c88d7833b9a1fe1cf0eedab1066ff0378

HTTP Headers

GET /ajax/libs/jqueryui/1.11.0/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 63638
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 16 Nov 2022 12:35:35 GMT
Expires: Thu, 16 Nov 2023 12:35:35 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 489600
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8

baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/dropdown.js

103.65.236.164

200 OK

14 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/dropdown.js
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text, with very long lines (564)
Size
14 kB (13932 bytes)
Hash
5ea9a5d27044016c2c3a1aaab939dd5f
8dbeb849506799c029da8dce5544ea608809a47c
1a46b251f497d3a96de79d4b5f0fcbc3ee82a5e1514b612ca10e7c04ea3bc4ad

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /plugins/themes/default/js/lib/bootstrap/dropdown.js HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:35 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 13932
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5498effead502a4f65ebdac6e3e6ba46
3d0c30365b96a38dc008a3592baa7b462937e807
708c27fccf3a82df1c5f9354883402200007ac33fab26b3f38fb5cf115b214da

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "708C27FCCF3A82DF1C5F9354883402200007AC33FAB26B3F38FB5CF115B214DA"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11684
Expires: Tue, 22 Nov 2022 07:50:19 GMT
Date: Tue, 22 Nov 2022 04:35:35 GMT
Connection: keep-alive

baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/main.js

103.65.236.164

200 OK

4.8 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/main.js
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text
Size
4.8 kB (4835 bytes)
Hash
f868d66c6d5196781d6c8f8250419b61
92197b10fd8303bcfde549af3ec77fd95c251a33
5babc3c638383514b6b32b783fdc937648a016d740369e9f94cd389e042cfdc6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /plugins/themes/default/js/main.js HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:35 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 4835
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/util.js

103.65.236.164

200 OK

4.2 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/bootstrap/util.js
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text
Size
4.2 kB (4193 bytes)
Hash
54b69c1f494c6e370604321b6c929491
2b155314ba4f9fa24848c0e90093a16dd19dcfe8
7b1b77d62bbb36fe167bcc1e6ea3a73052892aac99c1f2e8aeb0e8ce0c475eb4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /plugins/themes/default/js/lib/bootstrap/util.js HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 4193
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

baitululum.fah.uinjambi.ac.id/public/journals/1/styleSheet.css

103.65.236.164

200 OK

31 B

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/public/journals/1/styleSheet.css
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
0d2efccbe9406f3c4f851c0c761e2649
0c06203e9b05cae97ff8d5f54710d67b16c78714
93328442d03a0006840bc28088d81420ea816a32f33fd296d4f302097d10efcd

HTTP Headers

GET /public/journals/1/styleSheet.css HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Thu, 20 Jan 2022 08:49:21 GMT
Accept-Ranges: bytes
Content-Length: 31
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/popper/popper.js

103.65.236.164

200 OK

82 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/plugins/themes/default/js/lib/popper/popper.js
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
Unicode text, UTF-8 text, with very long lines (337)
Size
82 kB (81675 bytes)
Hash
1f1ce65884b4fd568e2a2f974a012cc3
819a52559310765803b1743e9e5429459fc91644
8d49d070ae93a36681f93e53804bad25f1c586a304c895a2565334c4c9f11c7f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /plugins/themes/default/js/lib/popper/popper.js HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:35 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 81675
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

baitululum.fah.uinjambi.ac.id/index.php/b_ulum/$$$call$$$/page/page/css?name=stylesheet

103.65.236.164

200 OK

62 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/index.php/b_ulum/$$$call$$$/page/page/css?name=stylesheet
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text, with very long lines (41332)
Size
62 kB (62351 bytes)
Hash
063c826838950355dce9025495f7e45f
df57001a61d58f26e95a37cfddba524ac230d864
fe7b839ae92ffa40bed16ab1da093f5609829c2a90d8acfd99b9b6293a138356

HTTP Headers

GET /index.php/b_ulum/$$$call$$$/page/page/css?name=stylesheet HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:35 GMT
Server: Apache
Last-Modified: Thu, 20 Jan 2022 00:18:21 GMT
Content-Length: 62351
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css;charset=UTF-8

baitululum.fah.uinjambi.ac.id/lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js

103.65.236.164

200 OK

24 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
ASCII text
Size
24 kB (23551 bytes)
Hash
b0ea462d35bf9562497345655b1a1a0c
bfb7eb5f154a0836d1fb435350dfae98308b2bec
14738dcf75e971581cd5c96ad3b3ae6302a6fa918c89d23fd52eeea2c62cba5a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /lib/pkp/js/lib/jquery/plugins/jquery.tag-it.js HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:35:28 GMT
Accept-Ranges: bytes
Content-Length: 23551
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2

216.58.207.195

200 OK

13 kB

URL HTTP/1.1
fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Size
13 kB (12684 bytes)
Hash
0c235386bcf6af06f67e6c89fd19e434
10720574d4609322023984a761f32f9518c07bc4
c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac

HTTP Headers

GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://baitululum.fah.uinjambi.ac.id
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 12684
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 16 Nov 2022 08:32:39 GMT
Expires: Thu, 16 Nov 2023 08:32:39 GMT
Cache-Control: public, max-age=31536000
Age: 504177
Last-Modified: Mon, 09 May 2022 18:28:04 GMT
Content-Type: font/woff2

fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2

216.58.207.195

200 OK

13 kB

URL HTTP/1.1
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Size
13 kB (12860 bytes)
Hash
ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265

HTTP Headers

GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://baitululum.fah.uinjambi.ac.id
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 12860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 15 Nov 2022 16:55:55 GMT
Expires: Wed, 15 Nov 2023 16:55:55 GMT
Cache-Control: public, max-age=31536000
Age: 560381
Last-Modified: Mon, 09 May 2022 18:27:55 GMT
Content-Type: font/woff2

s11.flagcounter.com/count2/p1AZ/bg_FFFFFF/txt_000000/border_CCCCCC/columns_2/maxflags_10/viewers_0/labels_0/pageviews_0/flags_0/percent_0/

45.58.124.226

200 OK

9.0 kB

URL HTTP/1.1
s11.flagcounter.com/count2/p1AZ/bg_FFFFFF/txt_000000/border_CCCCCC/columns_2/maxflags_10/viewers_0/labels_0/pageviews_0/flags_0/percent_0/
IP
45.58.124.226:0
ASN
#23470 RELIABLESITE

File type
PNG image data, 162 x 137, 8-bit/color RGB, non-interlaced\012- data
Size
9.0 kB (8971 bytes)
Hash
dacc71d5716b227458776b53fddd6f9c
f281ff3e4075ee1ff8bdd6e8e74ee0e1c89bc066
8b207ff0d61d15f4adaa62eefb68d371454f79ad111bbd8ad92cb7a88531b8d3

HTTP Headers

GET /count2/p1AZ/bg_FFFFFF/txt_000000/border_CCCCCC/columns_2/maxflags_10/viewers_0/labels_0/pageviews_0/flags_0/percent_0/ HTTP/1.1
Host: s11.flagcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Pragma: no-cache
Cache-control: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: image/png

baitululum.fah.uinjambi.ac.id/public/site/images/admin/images_(1)1.png

103.65.236.164

200 OK

3.8 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/public/site/images/admin/images_(1)1.png
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
PNG image data, 289 x 174, 8-bit colormap, non-interlaced\012- data
Size
3.8 kB (3798 bytes)
Hash
d68b251a24589a8c7ad996cbf9d219a5
df26692659046b4a32a51ba454cd9ed64f6b39db
bcd3f5b1cfa9a8e38427a02d508d15792c9d550aed5de043054d69902936588d

HTTP Headers

GET /public/site/images/admin/images_(1)1.png HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Fri, 09 Apr 2021 02:28:25 GMT
Accept-Ranges: bytes
Content-Length: 3798
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

baitululum.fah.uinjambi.ac.id/templates/images/ojs_brand.png

103.65.236.164

200 OK

13 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/templates/images/ojs_brand.png
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
PNG image data, 300 x 195, 8-bit/color RGBA, non-interlaced\012- data
Size
13 kB (13150 bytes)
Hash
09f9ad1b2d255e9413189adbb182026b
21b0f6d8bbcafa999e656cdc36d35ed0154773e7
3b90e3099af18f3134a0139dc2da85567d21106b60e09db3cc3a3d0615a7a744

HTTP Headers

GET /templates/images/ojs_brand.png HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 13150
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

baitululum.fah.uinjambi.ac.id/favicon.ico

103.65.236.164

200 OK

1.2 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/favicon.ico
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
38aa930e2cd559868d5b97aae7e7e2bb
2640b3d817af76f9cd2fd9dac754bf9bda468e99
62ae6128ca87c961400dd580afff54cc51f467f9e89a1f5280b163c70b118a75

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:37 GMT
Server: Apache
Last-Modified: Tue, 24 Oct 2017 01:34:36 GMT
Accept-Ranges: bytes
Content-Length: 1150
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon

baitululum.fah.uinjambi.ac.id/public/journals/1/cover_issue_9_en_US.jpg

103.65.236.164

200 OK

783 kB

URL HTTP/1.1
baitululum.fah.uinjambi.ac.id/public/journals/1/cover_issue_9_en_US.jpg
IP
103.65.236.164:0
ASN
#135450 PT Berkah Solusi Teknologi Informasi

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1241x1755, components 3\012- data
Size
783 kB (782975 bytes)
Hash
db1b31013e8dfcaeb662204744bb6a5b
4fa0f19e8dc6b3d779ec187e8ee3d49a71fc3ccc
a1bccfd2f4acf8873ddab06134f06fc226a1ccc0531494390b1cb3d69c83237a

HTTP Headers

GET /public/journals/1/cover_issue_9_en_US.jpg HTTP/1.1
Host: baitululum.fah.uinjambi.ac.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baitululum.fah.uinjambi.ac.id/index.php/b_ulum
Cookie: OJSSID=p95b2db6ce6hhhu7gns60hjoh0

HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:35:36 GMT
Server: Apache
Last-Modified: Sun, 16 Jan 2022 14:56:46 GMT
Accept-Ranges: bytes
Content-Length: 782975
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

File type

Size