Report - daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/

Report Overview

Submitted URL
daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
IP
172.67.167.26
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 05:48:59
Access
public
Website Title
DANA Kaget buatmu
Final URL
daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
daget-id.pictt.art	unknown	2023-05-21	2023-06-08	2023-12-09	2.9 kB	605 kB	104.21.49.205
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	545 B	49 kB	142.250.74.163
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-23	463 B	50 kB	216.58.207.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/	DANA

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

daget-id.pictt.art/lib/style/kaget.css

104.21.49.205

200 OK

885 B

URL GET HTTP/3
daget-id.pictt.art/lib/style/kaget.css
IP
104.21.49.205:443
ASN
#13335 CLOUDFLARENET

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
ASCII text
Size
885 B (885 bytes)
Hash
d82e7956a4fb41e4176b2e024686d53f
b1fc0b3e00bd1ef8e7bf453ef745af2fc337f3de
472a4476e502009592e1098a333446ca489d81f22f91c98e706e307d50239abb

HTTP Headers

GET /lib/style/kaget.css HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:48:34 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 13:35:46 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vkbC2y7DB6xsEIUZnyGguyUM5RGW8OY5S1x5N4TDK69%2BDtkTAHEmcFnzeqByckfYZadAKSGjJsIKUy9qkRFmeuNjN0LNjSFeZGFBpBfgp948K4XKMVBk7EKcHZmRVTnSwLsYGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793ce18585fb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

daget-id.pictt.art/assets/img/event.png

104.21.49.205

556 kB

URL
daget-id.pictt.art/assets/img/event.png
IP
104.21.49.205:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
PNG image data, 1440 x 2048, 8-bit/color RGBA, non-interlaced
Size
556 kB (555504 bytes)
Hash
2be57b54f4995decb3d27e268e165d40
428c62d540be831592e298a008bc081d8e58fa12
c8457714ef2a3797a4670b0b94d3fb0693986a1bafb54c56ddb7202ba9ab3084

HTTP Headers

GET /assets/img/event.png HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:48:34 GMT
content-type: image/png
content-length: 555504
last-modified: Thu, 18 May 2023 10:58:04 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfmHimEB4E%2BIftqiw56idaapmHlJM9KwrLfXQ02z0dKIiD3O1lTSmiXWS70fLAChhfofRjfPFVeJwB9MzddfnvH4ZRhBsUXAE4ko%2FK003afj1jwEUqk8qTzcoxg2YpC3FEVNNPE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793ce185861b515-OSL
alt-svc: h3=":443"; ma=86400

daget-id.pictt.art/assets/img/dana-logo.fe46647.png

104.21.49.205

200 OK

13 kB

URL GET HTTP/3
daget-id.pictt.art/assets/img/dana-logo.fe46647.png
IP
104.21.49.205:443
ASN
#13335 CLOUDFLARENET

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
Size
13 kB (12786 bytes)
Hash
6fd5a7d18a8f7c04bc5effcdc5235987
c4852c577f44fcdf78fb439a30ea2c6c6983b140
c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853

HTTP Headers

GET /assets/img/dana-logo.fe46647.png HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:48:34 GMT
content-type: image/png
content-length: 12786
last-modified: Sun, 04 Jun 2023 11:28:14 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J5OKFSabodsNkfN5vGrK3d7xpS17ahDvW4bvnW74LLCjrPRe3HUgHtJ6jXv0ln9TZQUL2wH9ebAKCkLm9pl5P2Tm4sKq5c%2BvFtBoDfj1%2BC%2BTTVfpXRCdnJC7vB09VCZM4GXhREc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793ce19c962b515-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.163

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://daget-id.pictt.art
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 78242
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap

216.58.207.234

200 OK

50 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
50 kB (49919 bytes)
Hash
930fa007c079ce204769d4861673a52e
1663a6c791f1a59a229d53615be16f24ae7d636f
356c6739029d6066b69383dfad694d37e72b911784fa5ca25d1a452046a5a7d2

HTTP Headers

GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 05:48:34 GMT
date: Wed, 24 Apr 2024 05:48:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

daget-id.pictt.art/assets/img/favicon/favicon-16x16.png

104.21.49.205

200 OK

768 B

URL GET HTTP/3
daget-id.pictt.art/assets/img/favicon/favicon-16x16.png
IP
104.21.49.205:443
ASN
#13335 CLOUDFLARENET

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
768 B (768 bytes)
Hash
9c237fdaf513b1de8a5c885cc339ab14
99605f4126631e418dd9ae9a0580e229b889f6be
98de91ef2980f306d783292453164b76a7fc9f67f4352d5c82a4827702024388

HTTP Headers

GET /assets/img/favicon/favicon-16x16.png HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:48:34 GMT
content-type: image/png
content-length: 768
last-modified: Wed, 02 Nov 2022 15:48:18 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=80hoIw2b68UbVS4gvJy%2BikbAS%2BR4DS%2B%2BJhufjEDzWtmIWvOOhFzNNBLa3pZA27Iy%2BqQQGRAb1vAGCMToc0qlTGpZlyocVvOZ9qPd%2B0VpwTJsERUKYyk8pjZouBScro0WKk0sJ%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793ce1aba02b515-OSL
alt-svc: h3=":443"; ma=86400

daget-id.pictt.art/assets/img/favicon/apple-touch-icon.png

104.21.49.205

200 OK

25 kB

URL GET HTTP/3
daget-id.pictt.art/assets/img/favicon/apple-touch-icon.png
IP
104.21.49.205:443
ASN
#13335 CLOUDFLARENET

Requested by
https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
25 kB (25146 bytes)
Hash
7f5605d87563fde0035dda6b741020c1
34373fc74f78f5da678f82cf3261dd45aa93a665
21be7b34d93ddd125e009d7b8cd6efa0f7992bc907374ec0887a333c99d212c3

HTTP Headers

GET /assets/img/favicon/apple-touch-icon.png HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 05:48:34 GMT
content-type: image/png
content-length: 25146
last-modified: Wed, 02 Nov 2022 15:48:18 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OnBjMJwuzXpxXjDYMCXeIB%2Fop8f2BL%2BNkHfYpGk%2BDFW5UDPMBullQTxRl80TzlF0NfyvTZXaZ%2FoGeRNiHPkWEPjw4V5dbPsKn7zle8FwtcyoCi3rk5GQXNrrB8MBv5vGISIriKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793ce1aba00b515-OSL
alt-svc: h3=":443"; ma=86400

daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/

104.21.49.205

5.8 kB

URL
daget-id.pictt.art/kaget=s6j7sxzeazg&r=iVlQUs/
IP
104.21.49.205:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectpictt.art
Fingerprint40:C2:EC:49:F2:B5:52:3C:6A:28:79:75:09:8B:1B:E9:A9:03:2F:A2
ValidityMon, 11 Mar 2024 23:10:52 GMT - Sun, 09 Jun 2024 23:10:51 GMT

File type
HTML document, ASCII text
Size
5.8 kB (5772 bytes)
Hash
c389cc603a09f24638d233ef8eb1811e
48e92adc649824d90cb38ece88d2c6ad28a9f0ff
3bda79fed1176800ed248f776d8a412f5bc5fb9b6a8ba192255b88d301ad8dce

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /kaget=s6j7sxzeazg&r=iVlQUs/ HTTP/1.1
Host: daget-id.pictt.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 05:48:33 GMT
content-type: text/html
last-modified: Mon, 05 Jun 2023 01:31:48 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GODVf3f9kMDpUpxq13IBlcAuYQ5oW%2B9AuP2eS8N9nYdogImDKnmaOdnG8f79vBzIWh1zNya9PiUtGfJ57veY1RtIv%2BQiMfeZD9GNd4iIH1DdL1m%2F6MtNp5OnbNScxHcyaEq4788%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793ce16884a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers