Report - f1v68nc2ip.olf.my.id/

Report Overview

Submitted URL
f1v68nc2ip.olf.my.id/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 04:09:20
Access
public
Website Title
Garena Free Fire. Best survival Battle Royale on mobile!
Final URL
f1v68nc2ip.olf.my.id/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
56

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	519 B	16 kB	216.58.207.227
a.top4top.io	588496	2019-11-19	2019-12-05	2024-04-17	502 B	18 kB	65.21.235.194
l.top4top.io	926491	2019-11-19	2020-01-15	2024-03-02	502 B	20 kB	135.181.63.70
f1v68nc2ip.olf.my.id	unknown	unknown	No data	No data	12 kB	1.4 MB	188.114.97.1
i.ibb.co	13485	2010-07-20	2018-11-25	2024-05-09	448 B	29 kB	162.19.58.160
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-10	464 B	2.0 kB	142.250.74.106
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-05-09	463 B	23 kB	104.18.10.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-09	1.1 kB	46 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-09	415 B	33 kB	151.101.2.137
telegra.ph	61046	unknown	2016-03-03	2024-05-02	455 B	11 kB	149.154.164.13
ajax.twitterapis.com	unknown	unknown	No data	No data	438 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena
2024-05-09	medium	f1v68nc2ip.olf.my.id/	Garena

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	twitterapis.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-1.10.2.min.js	93 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/jquery-1.10.2.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-20 13:47:39 Times Seen10671 Hash 628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988 Loading...

	f1v68nc2ip.olf.my.id/	6.1 kB	2024-04-24	2024-05-16
Pretty URL f1v68nc2ip.olf.my.id/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 07:13:27 Last Seen2024-05-16 21:10:44 Times Seen9 Hash b4f224e239fa064a0bd28ec64ca26e2f 97db52662d0744d2bbaef5c6f86a1a1e51e069a1 52ef4efe56e29fe30cda018d46a567715c350186d477b0cd386344607ad7ab6e Loading...

HTTP Transactions (38)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css

104.17.24.14

5.8 kB

URL
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
5.8 kB (5845 bytes)
Hash
e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56

HTTP Headers

GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 811828
expires: Wed, 30 Apr 2025 04:08:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0T%2BEGkyuk11xiCiQAy4Of5PsGsHcJD%2BgABaahtSSXZnifURTLoo4Ae6h2I8xQMnQS%2BqL7UsHHJcg6hyyMhtRTqf96iXGEEyxxcT%2B0vi4IiSfksU%2BTBv2nFzKarZ%2Fz4M8BmivUQr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 881712239ed856aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

f1v68nc2ip.olf.my.id/img/rewards/8.jpg

188.114.97.1

45 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/8.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, software=PicSay Pro 1.8.0.5, datetime=2024:04:06 18:10:54], baseline, precision 8, 480x480, components 3
Size
45 kB (44897 bytes)
Hash
5aef10801a628f517f3fa40666a87f69
15122c24d494069114e94a966b2986375509c341
cb1f70e59a10258ae97521fc26ea10c2987a568835ee042706fb34e51363fa35

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/8.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 44897
last-modified: Thu, 18 Apr 2024 12:20:10 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FI4IlZAJC4MNDGAFkXvbmZdxkiYr1TIuCIY0nchwhg0TUCgjenalwvdGgUcizSDBjYaiKxuhOxANbh7NKP%2FRFJYqsCqFd6ThDDqf8DN2KFeQkmKPaW7wOs6fslJgkceCPOiM05GBhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239eef568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/1.jpg

188.114.97.1

28 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/1.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
28 kB (28200 bytes)
Hash
e30bcec75f2c4c077d907d4bbcd499be
c3d769b0d136589e4f4c4d6ad4ab62a804cd9257
c54db05983dc834cdacc66e3d4bf97b9714c51c7252dfe2beea29dd290cfd42d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/1.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 28200
last-modified: Thu, 18 Apr 2024 12:17:46 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTmIwrtQ2JZ%2F43Q42qvVjE2MC6vpIn7YhYzQ2CkMcjv4cg5czg%2FWqFz%2BSByNR%2F%2B5BtrR7GuA9j2tw9FiM%2F9Z%2BB3vJ4oRn8SiTulHnE2jq566zu6JXpd6WqsWSGRRJiTUX1YSwjvpAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712238ee0568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/5.jpg

188.114.97.1

27 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/5.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
27 kB (27367 bytes)
Hash
e2ccdc69aa8d9dc22e63f6ed0dd299a9
87845ddd7b94fb61e19c28ffa9df83b4ca57be6e
c6ec45b17e5977709a95e028613f6ce7418fc5c349a2771ed7e5df7ae59a1955

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/5.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 27367
last-modified: Thu, 18 Apr 2024 12:17:18 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nb3QBo3rJI8REaxOLCR8Skvv%2BSTHbugWO9hfFfX1CsHSwhG7R1HiypDKUjR9ldkMQyDUh%2BfRyxUj2kOWg12ooM7JiGzwVcAwaN4CiUruxE5vM7HpU%2FCb605vbBClK2Cmg4d5DNGPSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239eec568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/9.jpg

188.114.97.1

41 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/9.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
41 kB (41316 bytes)
Hash
0a3bc56ffdbafea57688e25dd7d9df6a
9e99435786062b48bb69c5a1877d5e42a6772c3b
b37ed8c76cdaaf9d952723eecbec7f63714c2d9edd875002df0bc8e2e08e4081

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/9.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 41316
last-modified: Thu, 18 Apr 2024 12:20:18 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4PRILX5Uh7uobBqCAfDjhdr2HGiDvk2nYTYe3nwWibr3%2B3CtHQ93vsGVICRjki1iU3VF3Gq4WKA4EN06jKIGMary4A%2Fkju7RXDCYgA8vKJHfNP3D%2FRLbUN4HujURW8XjdeYa6YcMjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef0568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/10.jpg

188.114.97.1

200 OK

43 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/rewards/10.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
43 kB (43269 bytes)
Hash
b21d09600cb975ab27eb9079632386a8
16ce983e518d684c3b60af13624dc642068bbfb9
843810e9023f0e9dafbd0baa8266f5c83eaf4ed7b23975554f0d32cf5de6fb5d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/10.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 43269
last-modified: Thu, 18 Apr 2024 12:19:44 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fb2ZwYj2%2BZCqhCgsut0YyfgBQ8j8rZKe7b5hbueubZWfKps6cVBuxNoREPs%2B9Kbvh5znfNVSk5yVj67vBiK3cXyzXW200kt6BJt7i19bZ869MNMKEAkfZq%2BvJo9SicoSd4F2LdQHxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef1568f-OSL
alt-svc: h3=":443"; ma=86400

i.ibb.co/Wg8qQxh/facebook-text.png

162.19.58.160

29 kB

URL
i.ibb.co/Wg8qQxh/facebook-text.png
IP
162.19.58.160:0
ASN
#16276 OVH SAS

File type
PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced
Size
29 kB (28789 bytes)
Hash
74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401

HTTP Headers

GET /Wg8qQxh/facebook-text.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/png
content-length: 28789
last-modified: Mon, 18 Oct 2021 19:35:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

f1v68nc2ip.olf.my.id/img/rewards/2.jpg

188.114.97.1

23 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/2.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
23 kB (22804 bytes)
Hash
950ebcbde26134cbf74bfe2d753761c6
510ec4714b4923eef01c79c29c2736b9f55ceaaf
056a23671e32c208d1e1f83f7ee4396e2e1e72c27ec47257eceb4fbf0905ea39

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/2.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 22804
last-modified: Thu, 18 Apr 2024 12:18:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lq55PiQmN7LyFYoP5xZP3%2FjNxAqI%2FnAPcXgqfANZmr%2FWSXGBdOBC1ZEV1JDcahJUeRtW%2Bi1kaRScIep6bl8arrfas3JcdWHULSG1Bt9k8yy6zH%2FPxsKJGLEJA8wQ7wDNbxoWfFT7OA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712238ee4568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/4.jpg

188.114.97.1

27 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/4.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
27 kB (26863 bytes)
Hash
99b68ca57582eeceab2beb71b7d12baf
29dafd5aeef8e9f765dcd457b773f8008aed5021
a89a0129966d6a3dd8dea5a3c498894dc66821e62668431f6ab474c00e70f405

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/4.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 26863
last-modified: Thu, 18 Apr 2024 12:18:28 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V3e1%2Fc2Z7H2uUCfZKp5w8XYbyWiQDBEcXscVB0%2BENpOmHZDJjyuln0xJzulAzvYAXfbAcqjt28t57USJ9H%2BQJ%2B2ZQiMLwMOVJ%2F9CzaqDHnCb9F8Krwk%2Bch%2Fj8j4xGZ69uDMi5qVXhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712238ee8568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/tokens.png

188.114.97.1

16 kB

URL
f1v68nc2ip.olf.my.id/img/tokens.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 480 x 120, 8-bit/color RGBA, non-interlaced
Size
16 kB (15680 bytes)
Hash
28e321820daf1483a6959a6093cdb56f
adb917c80248fb4d93a811bf271e040fe1de79fb
1cd911a6e426446929b5b630569ecb9e212cfb8dff9e920453fb54ea94f5feb1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/tokens.png HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/png
content-length: 15680
last-modified: Fri, 19 Apr 2024 18:33:18 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BTuWJ6oItyrey7gLZKHMJ5HdR9o5r2emWLfNJDeXPUptLiicV7hRXV5CguKmpknUXaUawwtShRYeO0O4kDO1%2FGMOHun7IK0m0EWK1vj3JMT%2BTN%2FpvnfvdXTTwweLdRhs8mzMMa3fXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712238ee3568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/3.jpg

188.114.97.1

31 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/3.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
31 kB (30888 bytes)
Hash
1c88d95060ab733a9b2ba6989f2c8f49
07bf082e05dadf6e0eda4c5d2a12397ad23c4b78
fbf3170ab0dac3a8f61f37e3a7cdafd2734b9aaf89e4132777f9a0bf922a0c61

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/3.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 30888
last-modified: Thu, 18 Apr 2024 12:17:56 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2FgAx1QreXcENH0gFo%2B1sygti9IqHTPYFS%2B%2B6wJLp9XWu0S27%2B7O2cVNUJGcyCLxcp%2FtIb04ZL4PPPlg5I5oOwhmUV6OIj2uC4duX8VHTR8GGu3OVA3w0nRbAv3rSBowm832EL6iKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712238ee7568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/6.jpg

188.114.97.1

200 OK

23 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/rewards/6.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
23 kB (22569 bytes)
Hash
b92f86713a796e10f6b9ac90a666664f
c4f8d34d0677e07c9ab3321ac00ae26695f708c3
759759f31a3cca1ad1754ed870a0f987c76a1c08452bb2ba23c3a3a6b1d015b7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/6.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 22569
last-modified: Thu, 18 Apr 2024 12:26:04 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7mmVSxJRlOQo0alTf3qMKEF%2BeHHEeKAGARBpi48s%2F0fpaHlEttRXinNRhdDjYXdm2AHvnuV4lVXyJewTyfsWo5WCs4gwuF456iJ1xo4OiFSADdn9i60YAnzAcUVakFNekleUr97KRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239eed568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/7.jpg

188.114.97.1

25 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/7.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
25 kB (24640 bytes)
Hash
417823719e6cfa032ab103bcd9ddc001
d783c6f4565097023f9205b3c39eee8b103c366a
465bb1e330b8cfb4d8500a5f3512c07d37c11d52df2caf4e91497adf87279869

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/7.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 24640
last-modified: Thu, 18 Apr 2024 12:19:00 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogWlPkIXmPpFTzIla9so3lXExnRxBG6o%2BoCtrwo%2FK7rPlsD1d5sV4M1MnJ6zewIG%2F%2Bbhx6%2F4Y63V6hAWEqV3Il5Kjx2F3NjKZ4dVRbjI6Os1xlN6pByGs8EQxhqdssrWxVAXc2pwig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239eee568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/11.jpg

188.114.97.1

45 kB

URL
f1v68nc2ip.olf.my.id/img/rewards/11.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
45 kB (45021 bytes)
Hash
f19212e0972cd4c0cbd1ae3b3e2f9bbc
14a1153ec4b178d369418a9084f79f235633f71b
c6f38a26ae871b4f86d83579fd963468bf2e994b7f058b6047f98f89243ee968

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/11.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 45021
last-modified: Thu, 18 Apr 2024 12:19:24 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y1oVyoMhR7vmhzyuBB7%2B4lt3cazp0hGc18yrKs5xMu6F%2FWcVeaQdOEYtr6UxvNnm0ztClwMP5S8Wp%2BC3vIGUq%2B0OZsATJ5xWr%2FfCzeHoVh4ggcQR4vlfQox7X6WcE%2FWb4TFa2Yhjiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef2568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/heade77r.jpg

188.114.97.1

200 OK

634 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/heade77r.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Size
634 kB (634353 bytes)
Hash
f1eb8abe2de00a07c0bcc26b8123cb68
9472c04313084215b2b10950063ca6fb2ae9b37c
2d84b08c1d3e4dce9f22f9f921c808f974de9ba6d1773c16fadc8a6748f55198

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/heade77r.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 634353
last-modified: Wed, 17 Apr 2024 17:20:32 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPvoPVP%2F3%2F0b8qPrpUI8NTyw0%2FcuRt6WCQ7%2FPPjPdL7UVpBCDFcgXHF5RDJKhCNKme%2BraMwc3K4rfLkKc97m17cXGsrRMNX2Zpie9J4LAV%2FBSPGnHj2oFhcfxRKzH4gCCud2RZSaeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712237ed8568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/bff.png

188.114.97.1

11 kB

URL
f1v68nc2ip.olf.my.id/img/bff.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 459 x 138, 8-bit/color RGBA, non-interlaced
Size
11 kB (11185 bytes)
Hash
f77fe97fc8f4d06fd93eaf7552c4a3e9
c73f03f3e5a9f460eb83e10ae7312738a36ce720
b695d33c5ece1af9739e89855c4cc718fd6e9550528009ee5ff644cac193cb41

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/bff.png HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/png
content-length: 11185
last-modified: Thu, 18 Apr 2024 11:36:50 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIndak9uHliPAhQjum1BLCyzK3XO4ouqEOgyxP7DvRvQxXB7gNNp7q36ga%2Fvtg3%2BUCsX0hO5RdhWBL9wkM%2FdQ2nRjYcDDdPd70vQO1zl1dYZOWhgUuORSgXseKu%2B82wG3oGZM9KFAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef4568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/popup-close.png

188.114.97.1

200 OK

422 B

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/popup-close.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
422 B (422 bytes)
Hash
d45afd0750df1473f2835dceb7933be8
25fe98b2ed17c8d857094d1d254fcc2a2f34c363
fd5d4a16b40eb27ac0372e93f5f0f9faa21032d1004a980838024f99798b37c8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/popup-close.png HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/png
content-length: 422
last-modified: Fri, 24 Jun 2022 10:10:16 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3cPvJGCnCNhSYS1WT83Na1jzi1xgaTRxsshLfkYWKQ8r%2F5TSY%2Bl4n2RC1CUz0vAO3dmW6r2LddI7p4mTRhLfmRatFcxyPrPBKUYTgSL9UKpnF73F6XyWhitagADU0RtcfsIyJEmzMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef6568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/gamecon.jpg

188.114.97.1

85 kB

URL
f1v68nc2ip.olf.my.id/img/gamecon.jpg
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image
Size
85 kB (84850 bytes)
Hash
e4dd890e64827b632c6f2a9f7960b709
fe750e7afa5634af5fdd82815a599817c9e227f0
163aad2fec6b167bec769c24b4156222392ebf25b9377d9278e20b811bc24d06

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/gamecon.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 84850
last-modified: Wed, 07 Feb 2024 22:04:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M0TFIPQ0eowB%2FvrCAv%2FylP3qrEFWURmgXPPMf8ypuPXZ1O5%2FsSZXUAyJd467xWSmRZIsG5s9s9e8nj7PbPf4DnJQh4rLoNhe2QoQbnhNidGsxuu90tlusJb0qFAzhFi8FSeHgAiO%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88171223aef8568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/rewards/12.jpg

188.114.97.1

200 OK

43 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/rewards/12.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
43 kB (42788 bytes)
Hash
a0c69273a26e8758529afbc255447a91
72ee2402ab145333749ab2b3f2a9ea650c17dea3
b7c04cfefa5ca5332c50be84d64b30cdd30a5ce6fd8e9d77c46b9399448056c1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/12.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: image/jpeg
content-length: 42788
last-modified: Thu, 18 Apr 2024 12:20:00 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BiOtXlB6%2BCpkRrchAEBjUlVltyddUXyg3oAAqj6TEPDsjYCbxYfSNqtCHtKeFgnkg5HD5NebXa21zviaMiiPkPp0Lv%2BZJauwSbiPM%2BGgRoq04iUE5aKxuamIx1WFqS6bLOawOBx5zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712239ef3568f-OSL
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery-1.10.2.min.js

151.101.2.137

33 kB

URL
code.jquery.com/jquery-1.10.2.min.js
IP
151.101.2.137:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (32072)
Size
33 kB (32788 bytes)
Hash
628072e7212db1e8cdacb22b21752cda
0511abe9863c2ea7084efa7e24d1d86c5b3974f1
0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988

HTTP Headers

GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 10 May 2024 04:08:55 GMT
age: 20513530
x-served-by: cache-lga13622-LGA, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 113247
x-timer: S1715314136.973901,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2

telegra.ph/file/d8f63c616348e86fb7ac2.jpg

149.154.164.13

10 kB

URL
telegra.ph/file/d8f63c616348e86fb7ac2.jpg
IP
149.154.164.13:0
ASN
#62041 Telegram Messenger Inc

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 512x512, components 3
Size
10 kB (10340 bytes)
Hash
2c37914ef06b1c3c379fca122ced0513
23973cafe2108868ef3de6cac3cba6f95647eb58
aab6f15b5d13e0ab98cf29eccbe27af4ebc48056c3155e5f0b1bc39cfd5d6962

HTTP Headers

GET /file/d8f63c616348e86fb7ac2.jpg HTTP/1.1
Host: telegra.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 10 May 2024 04:08:56 GMT
content-type: image/jpeg
content-length: 10340
cache-control: max-age=10800, must-revalidate
expires: Fri, 10 May 2024 07:08:56 GMT
etag: "7c706a64504c2cb3fefd07de3e81a66d36761c4b"
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500

142.250.74.106

1.4 kB

URL
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
1.4 kB (1368 bytes)
Hash
867b09a38152d11bbdaa4ef3f3af7c76
5092d0e7cbd04844b571219f1f2b279503389676
490521975e752ad38180a68a9b1febf9ad3d9225763ba91a2a78781cf766e8af

HTTP Headers

GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 04:08:56 GMT
date: Fri, 10 May 2024 04:08:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

f1v68nc2ip.olf.my.id/img/container.jpg

188.114.97.1

200 OK

29 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/container.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1399, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=527], progressive, precision 8, 527x1399, components 3
Size
29 kB (28662 bytes)
Hash
656a9909c48f54651964f1c8367701a6
089fb0764624c59412418aadac080f7b3e5f7954
49992ecbf7cfd2699670e3f0e5cd55ab9583ccc214f84fcbc6ab9e4e61b81a77

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/container.jpg HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:56 GMT
content-type: image/jpeg
content-length: 28662
last-modified: Fri, 24 Jun 2022 10:10:06 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kR0oewh51nYylUGRI%2FLPDtWxmUedkCkj9VIAqNsb54yVg5imltlZdGyr5CoM9%2FqDHnXOM3EwC8vLwUzr9NwZe2hbhZ7U4fegjvfFf9kfIs68G3VmgEQtT3GL4pKYEGlmoOrfr3VwNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712274958568f-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0

104.17.24.14

38 kB

URL
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 38384, version 1.0
Size
38 kB (38384 bytes)
Hash
a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c

HTTP Headers

GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://f1v68nc2ip.olf.my.id
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:56 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 38384
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03ed9-95f0"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 123842
expires: Wed, 30 Apr 2025 04:08:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DlRCMinQn06A2CNhGUVz76HTmNgS8e9Db6%2BW%2ByNWRO%2Bz5WmnnJogSlqyrh172aZirEIqJ7qVAdqeG6JnfGrYI%2BIBbMXafB5F1fKdViyxO7n1PkPA6LNpuudwywtOm4Z7ULPS5ml0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 881712279bb9712a-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/css/style.css

188.114.97.1

200 OK

3.3 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/css/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
3.3 kB (3263 bytes)
Hash
747d034c7700c73e05e1b6f6fd02f5ed
592b93b81853fa04e5895b9bab34774c65bee693
0de37de6202d786d56ba6afed2fbbbe24f73223323c3eb33bc17ee92fe58cb78

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/style.css HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 14:12:34 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smqFr1gKpFq%2FjJZ8Y9xVdMGYUY8MSg5Wv9TYAL1YCFS7jVEh6pWS2NgrYvnZ6vVCNEu1o9kMzPimbQJx76GutEQyZ4SDZhfF4FN5MfoiiOPhZpEcbfe3r0b81DsPJ0%2BX7vCgGKDD1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712237ed2568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/btn_item.png

188.114.97.1

44 kB

URL
f1v68nc2ip.olf.my.id/img/btn_item.png
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1280 x 433, 8-bit/color RGBA, non-interlaced
Size
44 kB (43770 bytes)
Hash
5275d53998d2f0983901cfb7eff3c15c
fe22b6a215e341dba12443ad785362e0d5c1b726
dafc6643f0ea080b4db78a45ec8f3fe634a53f98922ee14cd2446bc7c430e565

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/btn_item.png HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:56 GMT
content-type: image/png
content-length: 43770
last-modified: Thu, 18 Apr 2024 11:59:50 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIvTvOcIJBkT8vRJjhQWE6K2WrNf83dRCwJRuTb717facrqA5ayAR7qhtrdcDb6yWBT1DFTV7JzMVfcywDJU7EsJSsPhqyYdaZjFuPWhwGAmCOGehXTYczqK1xEr2VOt9G3JBkhX8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712275962568f-OSL
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/css/login/facebook.css

188.114.97.1

200 OK

28 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/css/login/facebook.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
ASCII text, with CRLF line terminators
Size
28 kB (28250 bytes)
Hash
fd6e7ff14c7ab84d49b81ffda94e1f0e
085b17f3d0c7930cb58566d0bd0bd112188bbf49
3f6bda1ccb8620f3b43081668d74ef60a33e39e3fb0abf086984fa6c995e97f1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/login/facebook.css HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 10:11:44 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UFI7fDB2bt2vKWczhX4QM4jofq5cPfslDLAXqLPxWGxAxaqDGi542%2B6CYmYhFO48TDPGX2V8cECl1BEDIlwvcE3Tx0hpLZUeywj%2FEjSLjvuGhBGqlvS2KQsSWUkZhUW4TT%2B36Zddtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712237ed5568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/img/popup-footer.png

188.114.97.1

200 OK

1.6 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/img/popup-footer.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
PNG image data, 480 x 45, 1-bit colormap, non-interlaced
Size
1.6 kB (1606 bytes)
Hash
ff0757ae087db7b747fd2edd05fb05bb
8f545db349797e3499cc283b7d6427a572c3223b
239c98a9d91bad31fba09475147cc928f5a0f076563ac4e21f3182d44209a07d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/popup-footer.png HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:56 GMT
content-type: image/png
content-length: 1606
last-modified: Fri, 24 Jun 2022 10:10:18 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WtPVmh7PDWlOxBLvPIlFPAs%2B%2FQlCFDkpNDLwCDCoYELGICTgrBevHqWqX3SWrWVsgLF6UyJXdW8BRF22pKNPSioSOmfsxExdAkM0adT5qOdv%2Fy1BfAt1CFAMByDuqrcrClsG3dMbAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88171227696b568f-OSL
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.10.207

200 OK

22 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (30837)
Size
22 kB (22191 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e01696f4dd85a48838a9ea9ee82ef4a
cdn-cache: HIT
cf-cache-status: HIT
age: 820280
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 88171223baefb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15044, version 1.0
Size
15 kB (15044 bytes)
Hash
4806226b885b3b3d0ae52142f6bfb3af
2ea5cc6d5e4adb874989a2b74bda062296fb1ad3
714088bef569d6981bfae79530ef315f4d6505f302a944ce9063601919977e6f

HTTP Headers

GET /s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://f1v68nc2ip.olf.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 11:50:19 GMT
expires: Sat, 03 May 2025 11:50:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:11 GMT
content-type: font/woff2
age: 577117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

a.top4top.io/m_1725zobal2.mp3

65.21.235.194

206 Partial Content

18 kB

URL GET HTTP/2
a.top4top.io/m_1725zobal2.mp3
IP
65.21.235.194:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerLet's Encrypt
Subject*.top4top.co
Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2
ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
18 kB (17691 bytes)
Hash
70ded6b0b406f9710307bc35e221629f
7034ec2ff72c936255b04c0890ce8976599380cc
22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65

HTTP Headers

GET /m_1725zobal2.mp3 HTTP/1.1
Host: a.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
server: nginx
date: Fri, 10 May 2024 04:08:56 GMT
content-type: audio/mpeg
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 11 May 2024 03:45:36 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Fri, 10 May 2024 06:08:56 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2

l.top4top.io/m_1725u5z7i1.mp3

135.181.63.70

20 kB

URL
l.top4top.io/m_1725u5z7i1.mp3
IP
135.181.63.70:0
ASN
#24940 Hetzner Online GmbH

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
20 kB (19781 bytes)
Hash
ee5b5d12064ae26f839b882edb33da62
6fa93ef00f294eec4ef05276e81813db1e95e346
4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54

HTTP Headers

GET /m_1725u5z7i1.mp3 HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
server: nginx
date: Fri, 10 May 2024 04:08:56 GMT
content-type: audio/mpeg
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 11 May 2024 03:45:36 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Fri, 10 May 2024 06:08:56 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2

f1v68nc2ip.olf.my.id/css/login/twitter.css

188.114.97.1

20 kB

URL
f1v68nc2ip.olf.my.id/css/login/twitter.css
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
20 kB (20016 bytes)
Hash
2f164bbfd5e607738fbfe3fc963cc726
90ebada80b8497a2e05b12b3912f3731f6fd9327
a0115bfa6b2d468bf58305d10347f46940a87587ecf003d4c23fa84f0b3fd8e7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/login/twitter.css HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 10:11:56 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QkPL63Wt0KwS%2BvzGHygA%2FGBHdEIHo6weoSVerWR7aXXJaoGtdRXvKxJa8FVbeSIjCrOX78kQEIIJZGOiBEohnASW8t2Ldk4Icj8DZwa%2Bqz7GLwUXYNX%2Bww0Qa42tJw1627kSOEUWJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712237ed6568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/favicon.ico

188.114.97.1

4.6 kB

URL
f1v68nc2ip.olf.my.id/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
4.6 kB (4610 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:08:56 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2B3U%2Fk%2Fjj2GPRyXh%2BTGg8Ge4x2%2F%2F9k2PyVfI0%2FoZYhL3dxov2lZP14ysOW8qPEe6h2BqGok8A%2F6u0MxIdw3Wa3O3U92zsOtb%2BCR5gTtk9VG0CTNICChIMcOKlSmSLGemdU7j%2FoZHVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817122aabeb568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/css/animate.css

188.114.97.1

200 OK

82 kB

URL GET HTTP/3
f1v68nc2ip.olf.my.id/css/animate.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
ASCII text, with CRLF, CR line terminators
Size
82 kB (81519 bytes)
Hash
14f7a07011a763336109ffff5bd0d4a1
842fea0dc0aa64bfcfd24eb77fc880e73bce5b12
8e320187d4f00e2b9aa97f93f389c5c1c8ba9aa2cbb07f757a9ec0a2c59279f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/animate.css HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 10:11:20 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zSFq5E6lhLnSD5V%2BdGM1wRBfpFrVEbwzqrJ81JBO1uM8ttWbrgLaGG6MFyvtx1gsWXmyQfYogcqfJA3LfsLjwTuXf2fpP3TEDNOaQ0LD2F3giIlGjcN%2BR4i%2FmW0k6vcFU90AQ0wY4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881712237ed3568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/js/showHide.js

188.114.97.1

404 Not Found

315 B

URL GET HTTP/3
f1v68nc2ip.olf.my.id/js/showHide.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/showHide.js HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:08:56 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xtcPXqH8sfq2a6skYVvV4yYnUO4lGgu%2BXnslQt0THj%2Fa%2BdGZ4ERJIuYmt5Ntnl5Mn0drhun%2FQ%2BDAo7jfg9KR9RccQn68ARn5cjNgPBDB7X6SPhjyg3Xsu884KRc7wZGQrLi7CFWuig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88171228aaab568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

f1v68nc2ip.olf.my.id/js/showHide.js

188.114.97.1

404 Not Found

315 B

URL GET HTTP/3
f1v68nc2ip.olf.my.id/js/showHide.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://f1v68nc2ip.olf.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectolf.my.id
FingerprintCF:AA:4B:28:2C:23:8C:75:D1:85:47:F4:39:D4:AE:85:55:56:0F:C6
ValiditySat, 13 Apr 2024 09:44:18 GMT - Fri, 12 Jul 2024 09:44:17 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/showHide.js HTTP/1.1
Host: f1v68nc2ip.olf.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:08:55 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gLoUcxC6b1G3E3yekxFBdtxXlQoPviwJxXLIy54qv8KMl47m%2F6Xpq8Wx8rJmP0c%2BxnK5I5YRuykXHaCFVI77aShfAsupbwfUMH62GbHEFgrlBFpGFDcc%2BKqEHihNt%2FFs78pForHOUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88171223bf04568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://f1v68nc2ip.olf.my.id/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.twitterapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1v68nc2ip.olf.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (38)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers