Report - dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/

Report Overview

Submitted URL
dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
IP
172.67.140.109
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 16:57:03
Access
public
Website Title
DANA Kaget buatmu
Final URL
dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.1 kB	98 kB	142.250.74.99
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	471 B	18 kB	142.250.74.106
dnakagetszq.efiles.my.id	unknown	2023-09-29	2024-04-18	2024-04-18	3.0 kB	616 kB	104.21.46.158

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/	DANA

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	efiles.my.id	Sinkholed
2024-04-24	medium	efiles.my.id	Sinkholed
2024-04-24	medium	efiles.my.id	Sinkholed
2024-04-24	medium	efiles.my.id	Sinkholed
2024-04-24	medium	efiles.my.id	Sinkholed
2024-04-24	medium	efiles.my.id	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

dnakagetszq.efiles.my.id/assets/img/favicon/favicon-16x16.png

104.21.46.158

200 OK

768 B

URL GET HTTP/3
dnakagetszq.efiles.my.id/assets/img/favicon/favicon-16x16.png
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
768 B (768 bytes)
Hash
9c237fdaf513b1de8a5c885cc339ab14
99605f4126631e418dd9ae9a0580e229b889f6be
98de91ef2980f306d783292453164b76a7fc9f67f4352d5c82a4827702024388

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/favicon/favicon-16x16.png HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:56:39 GMT
content-type: image/png
content-length: 768
last-modified: Wed, 02 Nov 2022 15:48:18 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94xHpcj9LXzbeFPv47aF8qqAKrLhextUIBKY42hMLbxvPOFZ1jMe0T3w4fiLeJKr5uBj7f3d8sXrGwYJkIsVooMol4Q16xlUiT3DBrF9R%2F38ySomUpPKL8uICKpo%2Bk2oCHzMJJNA1ilAz3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797a0b9294256c4-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.99

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dnakagetszq.efiles.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 118327
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.99

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dnakagetszq.efiles.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 118327
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dnakagetszq.efiles.my.id/assets/img/favicon/apple-touch-icon.png

104.21.46.158

200 OK

25 kB

URL GET HTTP/3
dnakagetszq.efiles.my.id/assets/img/favicon/apple-touch-icon.png
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
25 kB (25146 bytes)
Hash
7f5605d87563fde0035dda6b741020c1
34373fc74f78f5da678f82cf3261dd45aa93a665
21be7b34d93ddd125e009d7b8cd6efa0f7992bc907374ec0887a333c99d212c3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/favicon/apple-touch-icon.png HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:56:39 GMT
content-type: image/png
content-length: 25146
last-modified: Wed, 02 Nov 2022 15:48:18 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8C4qX5FgjJ96zjUV8V%2FhD14Plc4oxCIRFzK03yZIf%2F5VHF7570Ohbz2%2BcIbIVYzzn6c529ZzuWliXGm0%2BJL9IPkhM5ble0uALoebsKiDoyT9WxEwp8HUm2iCfS46%2B4PPTLQWYjCTX3U5k7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797a0b9193c56c4-OSL
alt-svc: h3=":443"; ma=86400

dnakagetszq.efiles.my.id/lib/style/kaget.css

104.21.46.158

200 OK

15 kB

URL GET HTTP/3
dnakagetszq.efiles.my.id/lib/style/kaget.css
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
ASCII text
Size
15 kB (15122 bytes)
Hash
d82e7956a4fb41e4176b2e024686d53f
b1fc0b3e00bd1ef8e7bf453ef745af2fc337f3de
472a4476e502009592e1098a333446ca489d81f22f91c98e706e307d50239abb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lib/style/kaget.css HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:56:38 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 13:35:46 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GKOhHAfrugFDKXYRmzsww8wbM69vI%2FoFjtSm17hJROoEb38yr3vg90PRIaYt%2BMuvsxro6sapX74okcWzJ9mq7R6GBiLIT9Wo3qXwca7CdlLibsFi3fW0Qwz295PjcUs8PTnuvQv5PODJXzk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797a0b7def756c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dnakagetszq.efiles.my.id/assets/img/event.png

104.21.46.158

200 OK

556 kB

URL GET HTTP/3
dnakagetszq.efiles.my.id/assets/img/event.png
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
PNG image data, 1440 x 2048, 8-bit/color RGBA, non-interlaced
Size
556 kB (555504 bytes)
Hash
2be57b54f4995decb3d27e268e165d40
428c62d540be831592e298a008bc081d8e58fa12
c8457714ef2a3797a4670b0b94d3fb0693986a1bafb54c56ddb7202ba9ab3084

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/event.png HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:56:39 GMT
content-type: image/png
content-length: 555504
last-modified: Thu, 18 May 2023 10:58:04 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nNZXD15azhyDTz9Lj7iIn1MAtHG8HVGoliVWpJdLzdQtFcanppwT7COm9nemq4Qw2FNTrQZHCiCyhrE%2FbKyaWHYj%2FMwRnBcKdQo6k91TEnk0nH0wBXxlFe5mJlaQW0eW1eOmlflc2KtPZRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797a0b7eefe56c4-OSL
alt-svc: h3=":443"; ma=86400

dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/

104.21.46.158

200 OK

2.4 kB

URL User Request GET HTTP/2
dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
HTML document, ASCII text, with very long lines (2529), with no line terminators
Size
2.4 kB (2388 bytes)
Hash
5c0ebd349eae4bf7b57e453452b4c720
7957d8db50ed943075d1bea627ce039fe9a210f6
dbf09aa3e49c6f7a2d54121b641d603423e5f9069dbcefb406dc856cc10a4c09

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/ HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:38 GMT
content-type: text/html
last-modified: Mon, 05 Jun 2023 03:31:48 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zv1BMNqvdchN%2B7%2Bn8xKEPhat0dR4IvWzyprpaEgtS1gqp4LvMHXTujHxO9Fvn3ZcxMRzqrU1tNER0V2d83C5ELWVJ83hDvZXEGsjQcljY6ytYWuZqOtwyFzVYvB6fhgKUkmW%2FGgZ63MezzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797a0b41981b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap

142.250.74.106

200 OK

18 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1572)
Size
18 kB (17451 bytes)
Hash
71b2730c1cecf7a0768725bd944422c5
8dfa323cb988538bce8556a99bb5bd556e3593d1
851699a18b631a7bd68efc99598701293a6065b463fced7b68d8d6d9227bd8e7

HTTP Headers

GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 16:56:38 GMT
date: Wed, 24 Apr 2024 16:56:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dnakagetszq.efiles.my.id/assets/img/dana-logo.fe46647.png

104.21.46.158

200 OK

13 kB

URL GET HTTP/3
dnakagetszq.efiles.my.id/assets/img/dana-logo.fe46647.png
IP
104.21.46.158:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Certificate
IssuerGoogle Trust Services LLC
Subjectefiles.my.id
Fingerprint6C:A5:65:6B:67:95:09:3D:A9:20:4F:A9:82:B3:FE:43:6D:02:8F:5A
ValiditySun, 24 Mar 2024 15:54:11 GMT - Sat, 22 Jun 2024 15:54:10 GMT

File type
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
Size
13 kB (12786 bytes)
Hash
6fd5a7d18a8f7c04bc5effcdc5235987
c4852c577f44fcdf78fb439a30ea2c6c6983b140
c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/dana-logo.fe46647.png HTTP/1.1
Host: dnakagetszq.efiles.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dnakagetszq.efiles.my.id/kaget%3Ds6j7sxzeazg%26r%3DiVlQUs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:56:39 GMT
content-type: image/png
content-length: 12786
last-modified: Sun, 04 Jun 2023 11:28:14 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BzW2zcOMWbhrelYcOQXt4mbU2uNU5mbLF%2FFT5gCgdlR%2BzY8l5%2Fhm8AwO6TmpDEpWm8xOwIebfb%2FfgzoSwJUYo2kuMO%2FDzRkb%2FcNhtylJXV3ym9RtzNDM4NovLdRR07FtDnAPs68ciKVlEPA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797a0bb9bc556c4-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate