halocell.com/id/skipdl3/
34.196.195.37302 Found 2.4 kB IP 34.196.195.37:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1131)
Hash 8b0c02dc1f38fb984035c0a1a623041a
983dd4c2f7b260fb1da81d60d7b20227f46fc2ab
1acfafd3d7ee944461fdd0d79c88406d33885fcfbcfc142df00d79126564d02e
GET /id/skipdl3/ HTTP/1.1
Host: halocell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 03 Dec 2022 09:27:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Cache-Control: no-cache, private
Location: http://halocell.com/id/play?token=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
X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 999
Set-Cookie: md5cookie=eyJpdiI6InhPbThrU0Zoa2Z4aGhLcTRoTE9qSEE9PSIsInZhbHVlIjoibk45cWJpSEV6TGJUL3R4ODFGOEoyNkFOY2hydk56WmRMbFJLTi9DcHhyd3U0V2lLclNWNXJERE9STDJiT2VZOWpRWkl1eHVqWVVFelQxQTBNQWE4SDkvblVVSHpJcXNkTUEyT3RyUnNNeW89IiwibWFjIjoiYjNkNjY5OTM4YTAxZTU3ZmMyZDQ5ZTdlZDhjNjEyZDZjZTgyMjEwN2EwYjhhMTVjMTNkZTU1ZGZiZDVlY2YwZSIsInRhZyI6IiJ9; expires=Mon, 05-Dec-2022 09:27:18 GMT; Max-Age=172800; path=/; httponly; samesite=lax
mlp3_session=eyJpdiI6InArbjhiWTlrYmZ1aUQreCsvT0VaVnc9PSIsInZhbHVlIjoiVDgrM1Zqb0pIZUdnZTFodUY3VFkzTmhHS0ladGJmb3NsS2RZZ0g2KzJiR1dqbm9YL0xoZWYyM0o1SGJ4eVBSUU1qNk80VlB0QXc3NDYxdUVaT0VCYXRhbFdsQnJaYmR3bHc1TzZYU3pTM3NNMjl6dW9zS0trM1RhSndoK2ZGNW4iLCJtYWMiOiJjOGE2MjFkYTI2YTA5MzBiNDVhNmU2Y2Y3NTgxYzRmNWJjZmFiOWM0OTM5ZjcxNjliNGY2MmUyZWNmY2Y3MjEyIiwidGFnIjoiIn0%3D; expires=Sat, 03-Dec-2022 11:27:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6402
Expires: Sat, 03 Dec 2022 11:14:00 GMT
Date: Sat, 03 Dec 2022 09:27:18 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 322
Cache-Control: max-age=90559
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:18 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 10:36:37 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2820
Expires: Sat, 03 Dec 2022 10:14:18 GMT
Date: Sat, 03 Dec 2022 09:27:18 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 09:19:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 439
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lgrc+Y/fTGyhRaenk6cv9PvUY2vxgufscumQKDzY6mTitHx7srqSjws0QfAsQuuqWDELZeS9r2w=
x-amz-request-id: C094NNJQ5JZ0PZ8X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 08:46:30 GMT
age: 2448
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 09:27:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
halocell.com/id/play?token=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
34.196.195.37200 OK 5.4 kB URL HTTP/1.1 halocell.com/id/play?token=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
IP 34.196.195.37:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (900)
Hash c5bfa6bd5a14861cd6a3fc4ac286b279
d7f0ccfbb3e0ce6ffaee7dc94cd92fedbcea8e4b
fd37b6a73e06c19a83321716e04e82eef0ef868ed43baeb6530759f10b7f86d1
GET /id/play?token=eHBrcXhwWmRzSlY4SzlMMUVZdlVxd3orem15c0c4KzgxaTQ3SDV5RmRWU3k0b2xwZXd3anVnZm9XeEE2Ymd4OXoxa08yY2FUL0gxY3N0ZkZzQkJJTWZhS283OHBISG02WXJ1RGowMTJsNTZWcmljaC9BbzJsdU54N3hnQmRQdGk2NTZyTjB5dHdjbE12YnRuNEtLQWt5V0ZWK21sT2ozeHRzVnBHMmxmYVhnMkRzQmlqVjdsRm1XVWV1NXU4QjJVNkdVNWV4amlnL20vNmxnT3BrN1ZPQUx1RHJ3L2tyLzhlNm0rNE5xa1hMWWlCSXFSbkxrWEdGU2VNMnVqUHdUNDFyWmNIaFpRSHh4T203ZUQ4anVaOVFKblIrRzltZkFNcDhiMU9wcjE1TTZqNUJ5V2ZqZUp0NktTRm1ZaDBuNVZaTnNmWEk5eG95ZzkzNmNSQkhzTE12bmlJNzZDd3FJNWJMOFdsT3FhOTI1R2p3OVp2SDUwY0poY2d2TG4zdTIz HTTP/1.1
Host: halocell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: md5cookie=eyJpdiI6InhPbThrU0Zoa2Z4aGhLcTRoTE9qSEE9PSIsInZhbHVlIjoibk45cWJpSEV6TGJUL3R4ODFGOEoyNkFOY2hydk56WmRMbFJLTi9DcHhyd3U0V2lLclNWNXJERE9STDJiT2VZOWpRWkl1eHVqWVVFelQxQTBNQWE4SDkvblVVSHpJcXNkTUEyT3RyUnNNeW89IiwibWFjIjoiYjNkNjY5OTM4YTAxZTU3ZmMyZDQ5ZTdlZDhjNjEyZDZjZTgyMjEwN2EwYjhhMTVjMTNkZTU1ZGZiZDVlY2YwZSIsInRhZyI6IiJ9; mlp3_session=eyJpdiI6InArbjhiWTlrYmZ1aUQreCsvT0VaVnc9PSIsInZhbHVlIjoiVDgrM1Zqb0pIZUdnZTFodUY3VFkzTmhHS0ladGJmb3NsS2RZZ0g2KzJiR1dqbm9YL0xoZWYyM0o1SGJ4eVBSUU1qNk80VlB0QXc3NDYxdUVaT0VCYXRhbFdsQnJaYmR3bHc1TzZYU3pTM3NNMjl6dW9zS0trM1RhSndoK2ZGNW4iLCJtYWMiOiJjOGE2MjFkYTI2YTA5MzBiNDVhNmU2Y2Y3NTgxYzRmNWJjZmFiOWM0OTM5ZjcxNjliNGY2MmUyZWNmY2Y3MjEyIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 09:27:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Cache-Control: no-cache, private
X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 998
Set-Cookie: md5cookie=eyJpdiI6IlN1UXowb3VXWTJIM0dUUDhnQzdCMEE9PSIsInZhbHVlIjoiSnFUNStJQzJyY1B6QlcvNWs1Wk44elc5Ukg0ZUlMNDdjQldXZlJVSlFCQ3h0WXVVcWsxY1JxV1ZHMUVkaUY1UFRDZGJTK1VmMmsyUjA3bDBvZ0VVSFFEOCs1OGpNZVFES0RhdWV4RXBDb289IiwibWFjIjoiNjJmZWMwMzhjMjUxNTgwZTNhYmU4YmIzOGM3NDA4NDI0MDIyNDBiOGQwNzhjMjg5NTcxY2VkYTAzMzQ0OTFjYSIsInRhZyI6IiJ9; expires=Mon, 05-Dec-2022 09:27:18 GMT; Max-Age=172800; path=/; httponly; samesite=lax
mlp3_session=eyJpdiI6Inhsd1Niamd6UGE5V01tYnVPaGZ4VWc9PSIsInZhbHVlIjoiMlBGS0dGYzZIV0xXTEdoS2pLUHJkVWg3UnVRUzVRVTRNUUFGRVMwamVjZ0VubStXcEdhUG9CUThiZkh5eG92ZHY4cTJ4UmlES0l2MWl5d3BBUnEwZWlLT2cwMGVTV1B2MjBjL0cwcE5FODhkSGNjTjVsSTA2eVBRODBTcS85a2UiLCJtYWMiOiI1MjNkZjJiOWY1NDlmNmExODFjMDRlMDgzYTVlZmY5MzgxZDc1YzYwOWViNmJjMjU0NTIxZWZjNDg4NzUxY2M4IiwidGFnIjoiIn0%3D; expires=Sat, 03-Dec-2022 11:27:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
e7s4f4h8.stackpathcdn.com/halocell.com/favicon.ico
151.139.128.10200 OK 1.2 kB URL HTTP/1.1 e7s4f4h8.stackpathcdn.com/halocell.com/favicon.ico
IP 151.139.128.10:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 05d695247738237d0b93ffa94c13bc54
6a6ea3d9bf142eefd44d16526a3a8364ebca5751
9722d2d01e93f933881f4b444fc270b99832d403aac769332540ced077540cb4
GET /halocell.com/favicon.ico HTTP/1.1
Host: e7s4f4h8.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://halocell.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 09:27:18 GMT
Cache-Control: max-age=73472
Content-Type: image/x-icon
Last-Modified: Mon, 19 Oct 2020 03:43:38 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "5f8d0b6a-47e"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-HW: 1670059638.cds002.sk1.h2,1670059638.cds250.sk1.c
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 1150
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 09:11:17 GMT
cache-control: public,max-age=3600
age: 961
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
202.70.53.60/API/CGRequest?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1
202.70.53.60302 0 B URL HTTP/1.1 202.70.53.60/API/CGRequest?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /API/CGRequest?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1 HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://halocell.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Date: Sat, 03 Dec 2022 09:27:17 GMT
Server: Apache
Location: /API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Content-Language: id
Content-Length: 0
Set-Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3; Path=/API; HttpOnly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 308
Cache-Control: max-age=171881
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:18 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:11:59 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
202.70.53.60200 6.1 kB URL HTTP/1.1 202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CR, LF line terminators
Hash d8b75571bafa6352f07a2f649aae955c
530ecf89955b4c3319d554fdd614e29cbc1829cf
9e04d9db8d3b88223bf3711be927d19c0ad1c577cf5007099e2c4b71eb448d57
Analyzer Verdict Alert quad9 Sinkholed
GET /API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://halocell.com/
Connection: keep-alive
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache
Expires: Wed, 31 Dec 1969 23:59:59 GMT
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'
vary: accept-encoding
Content-Encoding: gzip
Content-Type: text/html;charset=UTF-8
Content-Language: id
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1377c2956f6d4d989e6fafbe01600b49
7a550dd67e42a8f1ba1468646af02691d0580345
4e0206cd8e1112cdefa7f974876461a968bbcbbf016b1b1c2e3af77346507886
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-148992076-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-148992076-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 67a62757a1cce15948a2ca9c7227740d
6811760c7d9309fcc4e88690d014f15156c60b67
5c4f23377afb439e740fc89aad33dfc50152a5499f5442280fe7e28081fe478e
GET /gtag/js?id=UA-148992076-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 09:27:19 GMT
expires: Sat, 03 Dec 2022 09:27:19 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43579
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?hl=in
216.58.207.228200 OK 552 B URL HTTP/2 www.google.com/recaptcha/api.js?hl=in
IP 216.58.207.228:0
File type ASCII text, with very long lines (850), with no line terminators
Hash f06e4615e84cb33353f3fc7fc1a59aab
2e7760c04df2c2c4e2c3a6e7cdb6da0ebf2863a5
8c42b980b4389397bfb543bcffc120c17bff0e68d46871893060a900ea4b29af
GET /recaptcha/api.js?hl=in HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 03 Dec 2022 09:27:19 GMT
date: Sat, 03 Dec 2022 09:27:19 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 552
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.148.190.4101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.190.4:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7f5aTfiViNlwHmSBmYswEg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zg9CsbZotxLXEToGfW3gIm5MmzU=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f3a4f3edea56419c58836a0c80d5cea
1558a7ad0acc0c09cdf39ec92030f7ee5736e595
70aeda0cb136ac1add86931a338558b9f302576cd65537575d232fda623fe2f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
202.70.53.60/API/css/newUI/style.css
202.70.53.60200 2.3 kB URL HTTP/1.1 202.70.53.60/API/css/newUI/style.css
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type assembler source, ASCII text, with CRLF line terminators
Hash 8c1ea88336dffa30187e77b1af338552
cb434b6a6e22c60b35be75e436ae9c7feca91b87
071c188b0d45d672086cf71d2c4db24335bd4624ce57dec6c15dba8008738902
Analyzer Verdict Alert quad9 Sinkholed
GET /API/css/newUI/style.css HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"9039-1669978335000"
Last-Modified: Fri, 02 Dec 2022 10:52:15 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: text/css
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/css/style_new.css?v=1.6
202.70.53.60200 1.1 kB URL HTTP/1.1 202.70.53.60/API/css/style_new.css?v=1.6
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type ASCII text, with CRLF line terminators
Hash d440600eba6c19acec67481b15a744e6
88e4939140145f6413e643e134244aefa9e1a6bb
ad34beb172a65f3a467c243f5c817e2725dd73ea0b44ba282de86e245b03ca5a
Analyzer Verdict Alert quad9 Sinkholed
GET /API/css/style_new.css?v=1.6 HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"3932-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: text/css
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/javaScript/consentPage.js
202.70.53.60200 853 B URL HTTP/1.1 202.70.53.60/API/javaScript/consentPage.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type ASCII text, with CRLF line terminators
Hash fbf3bde86bd089adb66e2f316d47815d
6b6afade2c5d833457f26772ef9380f719f83d82
b314f52cf299dfecdf43001fecf73ed3bd6455a3a201739aa0c655f48d09fd12
Analyzer Verdict Alert quad9 Sinkholed
GET /API/javaScript/consentPage.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"2124-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/js/pbkdf2.js
202.70.53.60200 2.3 kB URL HTTP/1.1 202.70.53.60/API/js/pbkdf2.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type ASCII text, with very long lines (548)
Hash d472e182eeef26b2f28219f874a07cd4
156f8b346d05c3e9d529c5642bfe78cb0ba96d58
1cbc17205b9f9ad729a85202e718a8313d3b9e96971474fcc9a86300afd081d0
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/pbkdf2.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"5557-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/js/murmurhash3.js
202.70.53.60200 1.8 kB URL HTTP/1.1 202.70.53.60/API/js/murmurhash3.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Hash dbb72d1785a899384234f232aceb0d5a
0b3c5a72b7a7b995430459627552901a3d590ab3
7faaea56accc47d067e6c5c59b24609e3ffcbe0e5955f9bdba2b3b036210d22f
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/murmurhash3.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"1773-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: application/javascript
Content-Length: 1773
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
202.70.53.60/API/js/java_hashcode.js
202.70.53.60200 319 B URL HTTP/1.1 202.70.53.60/API/js/java_hashcode.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Hash f5ff3b3856f0ba3cab54df7673f41718
ec0673d5c4c91cfcfd5b78e2f1bf7741347600a2
202ade7cf2e82a3fc6838ea9935bcc255938474c785c5d4463cb3db5f2ace69c
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/java_hashcode.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"319-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: application/javascript
Content-Length: 319
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
202.70.53.60/API/js/fingerprint.js
202.70.53.60200 1.9 kB URL HTTP/1.1 202.70.53.60/API/js/fingerprint.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Hash 0d676c485ddef0ca1916a2e115fbe189
fab3640db73f052d66c4406b91e0d01507e48717
3c0523ae6c685c44cb01ba8dc215456597c55208a172039b4221d06a4a21a21c
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/fingerprint.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"5883-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/javaScript/jquery-1.7.1.min.js
202.70.53.60200 33 kB URL HTTP/1.1 202.70.53.60/API/javaScript/jquery-1.7.1.min.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators
Hash f10853b79d19302519d0ce6b209e16c6
080ae5fe61a3f8740b57423bdc8c7876d4df4c16
9f3b3451ce90573e4ee860f9d7fc7d77d9cb44f2bdde284551d107eaf329ed7a
Analyzer Verdict Alert quad9 Sinkholed
GET /API/javaScript/jquery-1.7.1.min.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"93872-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/js/jsencrypt.min.js
202.70.53.60200 18 kB URL HTTP/1.1 202.70.53.60/API/js/jsencrypt.min.js
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type Unicode text, UTF-8 text, with very long lines (13814), with CRLF line terminators
Hash 27c19bcd623eccc8214f5612023faeaf
c8852e338473138a293e9d3c8e538b98611f28a9
59b1231cdafe383d391524f762140ea2752fee2847aa25ca82baa086492bc66a
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/jsencrypt.min.js HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"56212-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/js/aes.js?v=1670059637783
202.70.53.60200 4.9 kB URL HTTP/1.1 202.70.53.60/API/js/aes.js?v=1670059637783
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type ASCII text, with very long lines (548)
Hash 967412ee5a6968146161fc9e109553cb
4be78d903c307c7b92abc014082e72eedf4227a0
081f2890b1f380d47cc1be2f125fba4f00a1ad8a5aa7ac99e78f91dbf16c22c5
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/aes.js?v=1670059637783 HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:18 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"13392-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/images/LineCopy.png
202.70.53.60200 135 B URL HTTP/1.1 202.70.53.60/API/images/LineCopy.png
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type PNG image data, 329 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ec1de3ca70cf4c9f100920c5188dbdf8
d2e2f0a2ae2328d3942964bc5d9f560e9b912018
059f726a859343ac9e852cd32d7c502f88726ba481cd50ae50e9344394497d7a
Analyzer Verdict Alert quad9 Sinkholed
GET /API/images/LineCopy.png HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"135-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: image/png
Content-Length: 135
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
202.70.53.60/API/images/Shape.png
202.70.53.60200 175 B URL HTTP/1.1 202.70.53.60/API/images/Shape.png
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type PNG image data, 10 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash b0fa7f0d7164d15e836adf3961221e0f
d8074d1aa5ad7ae589234b9bfbbbd252ac89448e
cc55e5f632319f9ec169b85c7506b7c1a3b974503fbfaefa94b3c0b3be9f5771
Analyzer Verdict Alert quad9 Sinkholed
GET /API/images/Shape.png HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"175-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: image/png
Content-Length: 175
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
202.70.53.60/API/images/smartfrenLogoNew.png?
202.70.53.60200 4.6 kB URL HTTP/1.1 202.70.53.60/API/images/smartfrenLogoNew.png?
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type PNG image data, 250 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 35dfc952e180944671d4079df72be2cd
69ebe9726efe411bcb907cd5f1c2c602a1449c11
9c9b174cfa72e7a3cba2815cc62e76b12d57073a39891af1c9ecca063a94c55f
Analyzer Verdict Alert quad9 Sinkholed
GET /API/images/smartfrenLogoNew.png? HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"4619-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: image/png
Content-Length: 4619
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
202.70.53.60/API/images/Union80.png
202.70.53.60200 187 B URL HTTP/1.1 202.70.53.60/API/images/Union80.png
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 2eceb4e46d5654fdc717a6e23cc888df
3ae6fdf33d7bd60b592e820615e978d0ce003b41
9566378d7af5d88e5c01bad400c5a090adf31f31389e80d71798b41c67d8b039
Analyzer Verdict Alert quad9 Sinkholed
GET /API/images/Union80.png HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"187-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: image/png
Content-Length: 187
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
202.70.53.60/API/js/AesUtil.js?v=1670059637987
202.70.53.60200 1.1 kB URL HTTP/1.1 202.70.53.60/API/js/AesUtil.js?v=1670059637987
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Hash 6d5a54a1af7fe971d5737b77b0e7f384
7b92c0176a8697a266262d0929a0430097cc300a
9d8fa9ba0875a6021d2b8e441e5f7ef0a8e111c2f67560b70b4c34f1545514aa
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/AesUtil.js?v=1670059637987 HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"1082-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: application/javascript
Content-Length: 1082
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6487
Expires: Sat, 03 Dec 2022 11:15:27 GMT
Date: Sat, 03 Dec 2022 09:27:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6487
Expires: Sat, 03 Dec 2022 11:15:27 GMT
Date: Sat, 03 Dec 2022 09:27:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6487
Expires: Sat, 03 Dec 2022 11:15:27 GMT
Date: Sat, 03 Dec 2022 09:27:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6487
Expires: Sat, 03 Dec 2022 11:15:27 GMT
Date: Sat, 03 Dec 2022 09:27:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6487
Expires: Sat, 03 Dec 2022 11:15:27 GMT
Date: Sat, 03 Dec 2022 09:27:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 30596
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ffa12df550123f63b20f67437cd8a04
398fd2d837c73f54c4591b69cd683f29bdf9184a
fd9ac4396488098923c27531295e64475047dd008a901e59915109a73a69f305
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6119
x-amzn-requestid: cac5842e-2b57-4eda-9b09-27ec8a0b1bf8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMiE7Hq0oAMFzHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381b085-151f123551f999a918de8a3a;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 06:21:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mrS561ug59NStQyD3cH4ndqGvY3QiLVeMFOoC86ktj52PghNjeYa5w==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 20:55:39 GMT
age: 45101
etag: "398fd2d837c73f54c4591b69cd683f29bdf9184a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 41774
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash becc8cdba57494c6fe212eb67634e1eb
c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8
fbb25b88b10a818bb0c6ad385b1e5ba54b87672c73bfa8a9c1ecb17dcc689d5a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11942
x-amzn-requestid: ba8a5d03-7796-4c6d-a6df-3cc71b1c5259
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: chqukGmWoAMFtLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a24c3-609dc90d769060d30a16e3df;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 16:16:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m6j_3bDGFIAHQYzrZ1zXqUb-HbEJ8XCoGH5mgBFOWRbLzoSiuNBnhg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:59:25 GMT
age: 41275
etag: "c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcdb77a21f91a4a280ac9a8efbc48bbd
74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d
5ee7c45f21b38c653d03a24b10a190a9e9266226d221b006e787cd3719088d7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11233
x-amzn-requestid: 89afb72e-6967-47d0-a0ad-48cad8cd08e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIpgOEi0oAMFstg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638022ce-1e8087e734e71d611df75830;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 02:05:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d9wLy3xAxK6RiYf25v_GFT1gdezT8IzMxaFyGRuGm2nxOBh6uEOg3w==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:01:29 GMT
age: 41151
etag: "74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 15912
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e7s4f4h8.stackpathcdn.com/boobi.biz/id/web/3g_flow_image/GM01_mgpid_aoc-360x200.jpg
151.139.128.10200 OK 30 kB URL HTTP/2 e7s4f4h8.stackpathcdn.com/boobi.biz/id/web/3g_flow_image/GM01_mgpid_aoc-360x200.jpg
IP 151.139.128.10:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x200, components 3\012- data
Hash dcb2c1135b45a02d8c23be43ba01d8c2
8a1c04591d12ebd3f74943c90270627722feb418
7d24fa5f711f4ec250e9e23c30b664bec354e565f651315d1c710cb0698c592e
GET /boobi.biz/id/web/3g_flow_image/GM01_mgpid_aoc-360x200.jpg HTTP/1.1
Host: e7s4f4h8.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 09:27:20 GMT
accept-ranges: bytes
cache-control: max-age=345600
content-length: 30288
content-type: image/jpeg
x-hw: 1670059639.cds203.sk1.hn,1670059639.cds249.sk1.sc,1670059640.cds249.sk1.p
server: nginx
etag: "61a5f253-7650"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Tue, 30 Nov 2021 09:43:47 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
202.70.53.60/API/js/analytics.js?c=1670059638187
202.70.53.60200 54 kB URL HTTP/1.1 202.70.53.60/API/js/analytics.js?c=1670059638187
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type ASCII text, with CRLF line terminators
Hash df183968de2fc3f05d168fa72d075136
73e0cfce86811cc5fa6aef9b5b6ad348cd92cbca
e9289945111894ef3803274bd4a328592c1300d47378430744fdc71e9bb96d5f
Analyzer Verdict Alert quad9 Sinkholed
GET /API/js/analytics.js?c=1670059638187 HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"262664-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
202.70.53.60/API/css/TruenoRg.otf
202.70.53.60200 35 kB URL HTTP/1.1 202.70.53.60/API/css/TruenoRg.otf
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type OpenType font data\012- data
Hash 7aba95e5ff98d5a275ced8ae58144c5e
946bc9fa7f9a4cfc72834b3f483d18bb2a30cbbb
fd0ce418d5ef822d4723af7c1f72664b7f429deb4a1464a0409337d23236f256
Analyzer Verdict Alert quad9 Sinkholed
GET /API/css/TruenoRg.otf HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/css/style_new.css?v=1.6
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"35120-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: font/otf
Content-Length: 35120
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 08:41:08 GMT
expires: Sat, 03 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 2772
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__id.js
142.250.74.35200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__id.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (739)
Size 164 kB (163815 bytes)
Hash 818d5684a0c523cd1ed01d5fb6ffb964
3c15a822f3936a40c3befc3c0495361f8c7948f0
d3c4c95a65444e2113ddb6c6dd039cd5407a054a0f28adeb8f06dc87f44a12fb
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__id.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://202.70.53.60
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163815
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:02:09 GMT
expires: Wed, 29 Nov 2023 14:02:09 GMT
cache-control: public, max-age=31536000
age: 329111
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
202.70.53.60/favicon.ico
202.70.53.60404 Not Found 209 B IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/CGRequest1;jsessionid=B1BC59411EBCA5B9A6C170EED06616C3?serviceNode=COMVIVA&msisdn=&keyword=7MEGAME_DD&msgCoding=1&sender=99999&hexMsg=7MEGAME_DD&smscId=SMPP&bearerid=106&Wap_mdata=&transID=16700596380206230903&serviceName=7MEGAME&serviceDesc=Rp.2220%2Fhari&subKeyword=7MEGAME_DD&pushType=1&dRcp=DirectCP
HTTP/1.1 404 Not Found
Date: Sat, 03 Dec 2022 09:27:20 GMT
Server: Apache
Content-Length: 209
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 08ca0238100c906a665f21b1caa97f47
3f605891faeafb51a36cecd25d331bcc450d34e9
35dac74d71c723f7a8e7585174fad51a0115e4a294a2c0d80b63026e25825618
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-148992076-1&cid=118561470.1670059639&jid=1579744218&gjid=438600751&_gid=745415954.1670059639&_u=YEBAAUAAAAAAACAAI~&z=725595233
108.177.14.155200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-148992076-1&cid=118561470.1670059639&jid=1579744218&gjid=438600751&_gid=745415954.1670059639&_u=YEBAAUAAAAAAACAAI~&z=725595233
IP 108.177.14.155:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-148992076-1&cid=118561470.1670059639&jid=1579744218&gjid=438600751&_gid=745415954.1670059639&_u=YEBAAUAAAAAAACAAI~&z=725595233 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://202.70.53.60
Connection: keep-alive
Referer: http://202.70.53.60/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://202.70.53.60
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 03 Dec 2022 09:27:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 08ca0238100c906a665f21b1caa97f47
3f605891faeafb51a36cecd25d331bcc450d34e9
35dac74d71c723f7a8e7585174fad51a0115e4a294a2c0d80b63026e25825618
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 09:27:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
202.70.53.60/API/css/TruenoUltLt.otf
202.70.53.60200 0 B URL HTTP/1.1 202.70.53.60/API/css/TruenoUltLt.otf
IP 202.70.53.60:0
ASN #18004 PT WIRELESS INDONESIA WIN
Analyzer Verdict Alert quad9 Sinkholed
GET /API/css/TruenoUltLt.otf HTTP/1.1
Host: 202.70.53.60
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://202.70.53.60/API/css/style_new.css?v=1.6
Cookie: JSESSIONID=B1BC59411EBCA5B9A6C170EED06616C3
HTTP/1.1 200
Date: Sat, 03 Dec 2022 09:27:19 GMT
Server: Apache
Accept-Ranges: bytes
ETag: W/"47192-1666362736000"
Last-Modified: Fri, 21 Oct 2022 14:32:16 GMT
Content-Type: font/otf
Content-Length: 47192
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive