| new.infocodashop.my.id/img/medi.png | 172.67.211.5 | 200 OK | 59 kB |
URL GET HTTP/2new.infocodashop.my.id/img/medi.png IP172.67.211.5:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectinfocodashop.my.id FingerprintCA:79:22:8C:58:AE:05:AB:B6:F7:5F:96:B6:3C:05:51:F2:2F:F4:31 ValiditySun, 14 Apr 2024 20:19:58 GMT - Sat, 13 Jul 2024 20:19:57 GMT
File typePNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced Hash7cc76703da0c40d173a70ef5ea4c3d79 4f2f8d71c60f8e8affe1353f106cda1e1f99c077 0448c55bf8dca8847e9de8847328fe19af50eec96c5fc2a40d9f5e7d09bc7357
GET /img/medi.png HTTP/1.1
Host: new.infocodashop.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: image/png
content-length: 59448
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 17:21:09 GMT
last-modified: Tue, 19 Mar 2024 04:37:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 147278
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4hoBX9dVspccwsMzQGCEBdriMD3zWdbGMe0r6Zd0%2F59Izbay4awi8meOSPG4zmtu%2FjDqLQjgsbXKJGYIHqWfULo9%2Fpr8tZs3L5KoRRDKyk0EsiNwnJ1bNCEEa2fj1CtCwfhUGLGuwiS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8774600b68c6b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js | 151.101.129.229 | 200 OK | 25 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP151.101.129.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hashe2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5
GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 10:15:47 GMT
age: 9287114
x-served-by: cache-fra-etou8220068-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25082
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css | 151.101.129.229 | 200 OK | 35 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css IP151.101.129.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hash896192cc65e20f1fcc6d792b5b9a4626 b13ef70543d70c1ec7fdd56a5ebc9d7d64023851 d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6
GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 10:15:47 GMT
age: 6267638
x-served-by: cache-fra-eddf8230044-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34728
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803 | 104.21.26.223 | 200 OK | 19 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803 IP104.21.26.223:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (65321) Hash345f5ecc270c94968998574a2d37e31a 4b1937ca073a8376a07161bc40549585493ffa3d efad9b46d0c00f2562eb53236717ff21ebd474f8d68f69b45f92c424bfd87e9c
GET /releases/v6.0.0/css/free.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"345f5ecc270c94968998574a2d37e31a"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ElNftZHO7Mn2JCItwtd183IIG5wUFmnhPrfppvRFCxnt5tQiToOUyw==
age: 140890
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q8RZYyoghudmWOFzwVCpOa2WzOdL4wTrvbQpCkrwed3YDGt0UOIE9z1VayNOrmKzc7Vrm3Y5Lf06BjI8IjypDktXpHUY5eBbeBWZcAvBZN%2BR%2BuTVhRrmHP9Jb%2Fmn4KO7hORk1NYQEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774600cdc5056c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 | 104.21.26.223 | 200 OK | 9.4 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 IP104.21.26.223:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (608) Hashe8ee688b3310772b65f39c69b76f4720 d57c6b7957aabb07762d473ea0b4bd3462f1175e 0e751f751587617116614deaf11f087ea82f7644196c1d0571f71fd549b556b5
GET /releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"e8ee688b3310772b65f39c69b76f4720"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WDu93bbiVm-Ry2qwvrp56EiFU1NkshMQlBqNA3PFXMRfegoDiJ5fCA==
age: 140890
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBwjLtkD7c9taSGOxj8oKaySqXcjdvqFLew0TUZDQIcdnuSFlgIGrUQzpQ3ETZgUNLuIyKeIGF%2B4NIce6Po72Fqm1Vwu1wmlq8GV5pKzXO%2F4PhlL4qVaNpTPeayMIdcJcJK8UhlMaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8774600cdc5856c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php | 172.67.219.11 | 302 Found | 13 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php IP172.67.219.11:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
Hashf63a9579c078d99f08547ac56a2bb02f 737a76c19060561b9074f65f47a9ba3c8b084a9a 87be07d63949308ffc212d795d9175b33c7032fc880170bdfa5d25a0e7a32332
GET /index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/html; charset=UTF-8
location: verify.php
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxpSLM6DwIr6xfDHy6RSYeCEOo%2Ba68eHwV%2BVSBjKrE2%2FJbCkBOlYWDy084aYMgfcVFbPColQ%2Fml6%2BEozqQ7Yt0p2pQ4du%2BUdyLHnL8J06YOG3cfvuwyzntQtDFBsOqw3aCua"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877460097b5b0b69-OSL
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 | 104.21.26.223 | 200 OK | 1.8 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 IP104.21.26.223:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (1817), with no line terminators Hash3dedc00973400e03c5ede855beb3e8b5 c72d245eb6fa18840821a7d53634a4f8ac5119d0 a45344d4b89aadfcddc80ff5e6de83bcbb2799a2af99a046e1cea1dd6fe0f28c
GET /releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"369cbeaee8e26da69cc5b0a0700cd62c"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dMv_EAfUb4isAqxNH_1_iLrcCAD5HsuPWogV-9Qt9eXmdlA-Kx4Bcg==
age: 140890
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2F3BzT7Aorm0qVFi3HBGVS6ZikELw2uC0bQUudKJS8CeAVMIaC7maRGTUrCjgzbEbARMjTOC%2FbznzDkVQpQWxL7RaL5SJKpoxVu23%2FmMnOeIFEOFCczD%2Brfqe3s0y41K7iC715gHpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774600cdc5156c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/verify.php | 172.67.219.11 | 200 OK | 2.1 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/verify.php IP172.67.219.11:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text, with very long lines (2202), with no line terminators Hash5659927b4e41872137c9afe6a953fd3b 5221209c8d0a106c24d7558391be121545680d74 a7c497a7ae31dc942a5924e4086c22e4323f6a6029cbf86ef7af7592985ca296
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /verify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=51dd27d22ffb09578932260c285e3ba0; path=/; secure
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UmgpzhJPlOmcw8t55sAe%2Fa%2BxRaeamF1AYeARTefdheCv7b7kJQm13edm3UIy9A%2FPykwvefKAt2XxDa%2Fecgbovru3eMLN43pX9qiBcpIUY%2Bel7a2HC5Vj7Cnrcy%2BIOZGZTD3J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774600a1ba80b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| file.gifan.id/fontawesome.js | 104.21.234.35 | 200 OK | 11 kB |
URL GET HTTP/2file.gifan.id/fontawesome.js IP104.21.234.35:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectgifan.id Fingerprint65:21:CF:78:C6:F3:9C:82:42:72:2D:29:CC:E1:28:F9:68:C7:DA:50 ValidityTue, 26 Mar 2024 02:33:24 GMT - Mon, 24 Jun 2024 02:33:23 GMT
File typeJavaScript source, ASCII text, with very long lines (10594), with CRLF line terminators Hash7653d4719abf98a98d6e9412e33976e6 0b4414adc9da488b97830ce789a79994ba55aa23 051afcaea280590a5c6a5c472ad0852783d794a8923c4d26e388656fc9dcd791
GET /fontawesome.js HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 17:44:10 GMT
last-modified: Tue, 03 Jan 2023 12:39:32 GMT
vary: Accept-Encoding,User-Agent
x-powered-by: Niagahoster
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 145897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vps4MKS%2FCgH3XJcFQ2IDsXNYXY9b%2F2BhtObtQjCXY4cfm7gGdUH5UokRjOC8WZJKHdXDG481bmiO%2FEWZaqK2ihJZ6B7OI0LCsWOakNSaziypTpQhwNf5ruiJZ13CXUF%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774600be8c44e1a-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 | 104.21.26.223 | 200 OK | 26 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 IP104.21.26.223:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (26019) Hashc32e971c7d11c2407f847b61c515f1e2 85ac47a05e49f01cd62301ee121a2ca0dfdc0f83 a7fb3a26d569bec0139baaae950e43c1e10b0afbcf6e9d7654aa1181a8319759
GET /releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 10:15:47 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"c32e971c7d11c2407f847b61c515f1e2"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RquWDnKVMC7-MFrmH9-CeRi_sQusU4NaQD-1hzkl9HrlNnyRvuQaEg==
age: 140890
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SpIHFwTNgiJ%2FTRDxOKbFy2GHDUkGjdyNe3Res6J%2BvrpHif4Qr%2BG5UKapS15W8clANaIXoKUHYRupX7p89fN26W9QaKX0DxNkL1QlhuFbqdXRWzGJDdjfWe4k2lBRxUH%2FYU%2FP4lbUfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8774600cdc5356c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/favicon.ico | 172.67.219.11 | 404 Not Found | 1.2 kB |
URL GET HTTP/3mjagk.mags.my.id/favicon.ico IP172.67.219.11:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text, with very long lines (1276), with no line terminators Hash24b426fea67958554911ff4c943fdfe4 b92889146d4c1bbddccabe58ca15c814ea066f72 335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/verify.php
Cookie: PHPSESSID=51dd27d22ffb09578932260c285e3ba0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 20 Apr 2024 10:15:48 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMaAP9CMOef4ZLNyyz1geOknkd38lUkIx4NMoLuFWxGXjHVFR6UPz1sbHzxyg%2FvL9cxfsieLTf9itCy9L%2BFjmwDwCr%2Byzsb494LEDYdaUKgC6BPRexuseFJhmfaBMgtU6XLP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8774600d7fc756a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|