DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://palemsaving.mom
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://palemsaving.mom
- Submitted IP / ASN
104.21.78.123 AS13335 · Cloudflare, Inc.
- Final URL
- https://www.palem4dku.com/
- Final IP / ASN
- 172.67.154.110 AS13335 · CLOUDFLARENET
Final page
- Page title
- PALEM4D - Situs Portal Resmi | Login | Link Alternatif Palem4Dku
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 27.2 KB (27868 bytes)
Detections
Activity
- HTTP requests
- 89
- Observed hosts
- 11
- Script records
- 8
Estimated HTTP data
- Sent
- ~49.4 KB
- Received
- ~3.82 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| idl-cdn.rika.online | 3342199 | 2016-06-28 | 2025-04-20 | 2026-10-11 | 16.5 KB | 1.70 MB | 172.67.178.73 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Google Cloud Storage Miscellaneous Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| palemsaving.mom | N/A | N/A | N/A | N/A | 484 B | 567 B | 172.67.220.249 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.palem4dku.com | N/A | N/A | N/A | N/A | 8.7 KB | 2.05 MB | 172.67.154.110 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. AMP JavaScript frameworks AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster. Socket.io JavaScript frameworks Not recorded Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. |
| palem4dku.com | N/A | N/A | N/A | N/A | 482 B | 570 B | 172.67.154.110 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| palemjaya.net | N/A | 2025-11-14 | 2026-07-01 | 2026-07-01 | 482 B | 559 B | 104.21.80.249 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.cloudflare.com | 26817 | 2009-02-17 | 2012-05-22 | 2026-10-06 | 493 B | 1.2 KB | 104.16.124.96 | Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| embed.tawk.to | 52083 | N/A | 2014-03-19 | 2026-10-05 | 497 B | 393 B | 172.66.161.212 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| 8h7m94co403f-idl-apis.rika.online | N/A | 2016-06-28 | 2026-03-22 | 2026-06-30 | 12.3 KB | 71.5 KB |  47.236.59.87 | |
| idl-socket.rika.online | 3146245 | 2016-06-28 | 2022-09-11 | 2026-06-30 | 7.4 KB | 3.3 KB | 8.219.161.24 | WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. |
| palemjaya.com | N/A | N/A | N/A | N/A | 482 B | 565 B | 172.67.196.123 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| cloudflare-dns.com 1 alerts | 112 | 2018-03-28 | 2015-04-09 | 2026-10-05 | 530 B | 496 B | 104.16.248.249 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |