Report - celebrityviralvideos.msge6.my.id/

Report Overview

Submitted URL
celebrityviralvideos.msge6.my.id/
IP
104.21.60.86
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 04:08:28
Access
public
Website Title
𝙎𝙂𝙙🔞𝙘𝙚𝙡𝙚𝙗𝙧𝙞𝙩𝙮+𝙥𝙤𝙧𝙣🔞
Final URL
celebrityviralvideos.msge6.my.id/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
telegram.org	5408	2003-12-15	2013-12-18	2024-04-17	449 B	2.2 kB	149.154.167.99
celebrityviralvideos.msge6.my.id	unknown	unknown	No data	No data	6.4 kB	243 kB	172.67.194.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram
2024-04-17	medium	celebrityviralvideos.msge6.my.id/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	celebrityviralvideos.msge6.my.id/haykaljb/js/tgwallpaper.mineccb.js	3.0 kB	2023-03-07	2024-05-01
Pretty URL celebrityviralvideos.msge6.my.id/haykaljb/js/tgwallpaper.mineccb.js IP 172.67.194.252 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31:07 Last Seen2024-05-01 08:11:24 Times Seen5157 Hash 2b89d34702716a8ad2cc3977718f53a3 04406ebd6a9e2ce79dbac5e5048cfe1384e4574a 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6 Loading...

	celebrityviralvideos.msge6.my.id/	193 B	2023-03-07	2024-05-01
Pretty URL celebrityviralvideos.msge6.my.id/ IP 172.67.194.252 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:31:07 Last Seen2024-05-01 08:11:24 Times Seen3350 Hash 9c629a0c52a2afad699d260f673481fd a4fd0ed3e5daa31480eb6de0faa5d442f015cbf6 ea0d804370930ee958af535ce56cddf1dda419bdc676315ae8af0fbb4c733471 Loading...

	celebrityviralvideos.msge6.my.id/	0 B	2023-03-07	2024-05-01
Pretty URL celebrityviralvideos.msge6.my.id/ IP 172.67.194.252 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-01 11:03:21 Times Seen37242833 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (14)

URL IP Response Size

celebrityviralvideos.msge6.my.id/haykaljb/img/gam.jpg

172.67.194.252

200 OK

49 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/img/gam.jpg
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x640, components 3
Size
49 kB (48942 bytes)
Hash
500a2c05dee8143a1af1c099d1abd141
a72dfad3079ebb4c46014c9657d6a9fc32d23da5
5679fa3d9a4b46129f5c45063a518cb186917fc1ece3edb776fd4226b6ca6582

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/img/gam.jpg HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: image/jpeg
content-length: 48942
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Mon, 26 Feb 2024 15:29:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eDb%2FeUgffPOvN6xqGzUM6s0SMmOddyJQAS3KYEHZ02xoesdrfDCOjh3Zigd55yypTU740LAvKnm1daENQKzSOqeT%2F4YtQAhUmbJkr%2BvGHHBchHGQeTLJWDsaL6ERpNKpeqPcoR9tEUj6m5s2vti%2BIb%2FWwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761ca9fef3d568f-OSL
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/haykaljb/css/font-robotoc4ca.css

172.67.194.252

200 OK

7.0 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/css/font-robotoc4ca.css
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
ASCII text, with very long lines (7236), with no line terminators
Size
7.0 kB (7048 bytes)
Hash
cef6c02bdb4e9d76e2c12a06555de854
91b0cbd7539650d53d908785a074584c8e18a576
d408c8b4c89457754f4632707c1ec58b5c2f4c9970429b80f6efad5b7f6f7ea8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/css/font-robotoc4ca.css HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Fri, 07 Jul 2023 16:03:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HdSN%2BeF1kGfferQRvb%2FUsiolXUuSAN50EhQUZtjGzmSUxIR3RbnMnZMx5wXZSvNKwrePlVDRojR1XXwgzE8U9tY6G1yfXOsavHLJPZU10qepNV7dLVZypRMerlAZ%2BfaAuG3rowXRsLXOULqEEuLaGp0%2Bmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9ececc568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/haykaljb/css/bootstrap.mineccb.css

172.67.194.252

200 OK

42 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/css/bootstrap.mineccb.css
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
ASCII text, with very long lines (42164)
Size
42 kB (42523 bytes)
Hash
c2656e265ef58a9cc9f4b70b15da5fb9
85c5ebdb89d4574d72688c2650d4b84b9b09770a
f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/css/bootstrap.mineccb.css HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Fri, 07 Jul 2023 16:03:08 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZVLoTLXl5zcBw1g7%2FRyjBH0jaAGhAIFmFVD0eqI1%2FSYVZ1W1aaS4DgNpa3K9eULn2BsFzNoGKi2GYgybbU5G%2F5WQx3yyAvpXwvG9FJDEA981knYzlDuLH3kGvTQmtGfl3s6EgfUM2%2BBbUfqNLfZBv39Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9ececd568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/haykaljb/css/telegram0116.css

172.67.194.252

200 OK

116 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/css/telegram0116.css
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
ASCII text, with very long lines (1267)
Size
116 kB (115583 bytes)
Hash
b3fd0030266137eaa8da43673ac0ee92
a4b03dd5d1166e6d234955b89b7c0fdedb864118
b9efbe5d820d9076dd1611d0f1cad78fa323bd28ee95a48e6e6f8c366f04afb6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/css/telegram0116.css HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Fri, 07 Jul 2023 16:03:18 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wog0WfeYFEst2fJZw5kriMKMppYALx6Ch2XEaGpz4xASpMvWHuFePYTeG4BhRNbkqThoo2RwwIaWi3asLLzH8W5RedDpidxK7zFRtSikzo3i7dQ2P5WsbTlKPOhJAskVqUqWzrWMbsy1pqsQdIRd04vISQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9ecece568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/haykaljb/js/tgwallpaper.mineccb.js

172.67.194.252

200 OK

3.0 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/js/tgwallpaper.mineccb.js
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
ASCII text, with very long lines (2998), with no line terminators
Size
3.0 kB (2979 bytes)
Hash
f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/js/tgwallpaper.mineccb.js HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Fri, 07 Jul 2023 16:02:50 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=as%2B52t3ioLwlHjU5j%2F2xfzae0secpVXPjNKn8jASHYlqmzkxzIFXl2ax6GXroNfOnkRMKizsqZ4wWbCvM7krTdcrd9WUweAVobJ%2FzljnHF3eR7mLfDQ81NtMpm6zIVo5MYfP3ac4DwQoSPskNVoqerx9ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9fef3f568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /external.html?link=http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/haykaljb/css/font-robotoc4ca.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVqqkCwFI3M1X4XcWNS%2BVZcguTRZQ2pq8xR4pO5UJTAaY%2BfTKCAJjT%2Bck1MDJQzn91IoMVqyc8gN94Vnk3WeharXyKRBR99Fqu9HEzcDEY%2Bh7XNkrxMaNWle5zf%2F2uI2KW9T1rM5LYyGHGFrbz943M%2FL6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761caa1c820568f-OSL
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/ast/css/main.html

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/ast/css/main.html
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /ast/css/main.html HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pWzLG4%2FCstxMJmy6r50PJIIIRgSiZxBllom%2BX%2F9D0f9A9WtG8Co170gNmlVqpJ%2FRwQX997fQFrISyU8ZeLdtMqGooWTHRPzpmyLb%2BlVydgkzhwJzL6rskggYOgrR1hrcYq%2FaN4S%2FkgVsuJFosgoQ1eGM9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9ecec6568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/code.jquery.com/jquery-3.5.1.min.js

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/code.jquery.com/jquery-3.5.1.min.js
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /code.jquery.com/jquery-3.5.1.min.js HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W5bofK1TDEX8pTt2Tjt9ysuzvIMdYsFK6L8E7oZpm4simOKwut7Knhu11rSYNno2HBbYvTHkFJjhvnwA3JEYNlDasA8IBhkY0xPeHzFlj7DgF1GNHWvlHsfj6WZTy5wbvBQ3DVQ6RX%2B8O%2B4Al5qJtH12%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761ca9ecec8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/img/tgme/pattern.svg?1

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/img/tgme/pattern.svg?1
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

HTTP Headers

GET /external.html?link=http://telegram.org/img/tgme/pattern.svg?1 HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/haykaljb/css/telegram0116.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5z5Qjrab4WqxTS6hDqOYKaQxxVJ%2BxKWKL5bVl8uKU2MCcQVulQrRJmNLVlGzhw5iIQPknHckEoGlrQNsdYzDGGqRDXhNptf19YG3CLN1dq5Gm7V%2BNcVPLeTJZh5ZUHwk9dBtwG1FKDzkTq5APFs2zhLB2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761caa1a80a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/external.html?link=http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /external.html?link=http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/haykaljb/css/font-robotoc4ca.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qpmtZUSpIU3wAudIyTnqdoxuPs5qwlPhaCoevWCZl6dcoi5SG7ieJ%2FzHr7prG%2BVir%2F%2F2cWgYy9CGTm%2Bk3ZYyYbsWirH21zprRa0odLeFe9SAuEgvRJhuM6soeDAvmWZbhKTtut1LhOeCdQppWenseCiV%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761caa1b81c568f-OSL
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/haykaljb/img/apple-touch-icon.png

172.67.194.252

404 Not Found

1.2 kB

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/img/apple-touch-icon.png
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/img/apple-touch-icon.png HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QX4jLYlFCJJlvWJ9vRP8%2BgNes1fiDrGi5efzQxx6qKxhNA0SQFdwE87o7gh97tZ2wFaE%2BQvMMFtGKqAYLhNSqbM1dWhqdiNGLyQNpTHIzxicAk308KSoWUFiH3ctc7wUe%2BPkkyFYPX2l5o1lMHIX0eCTiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761caa3c93a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

celebrityviralvideos.msge6.my.id/

172.67.194.252

200 OK

9.3 kB

URL User Request GET HTTP/2
celebrityviralvideos.msge6.my.id/
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9520), with no line terminators
Size
9.3 kB (9344 bytes)
Hash
a5f63496f9c6de0129ad2827616c27dc
6ea3a566d0658068c5852366d3ffcb37c060ba1c
430476be25463416c605bcab62d43876dc688ca8980f1c3567e7272ea7161a23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET / HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vX2gAVGDxluAwi6XMgrIKIjR9HFwXuWEv1PvdsmAwaPSBv6UiTuBTvaCWYKQFg%2B5fPS2oS6REgwWHdmIoyc2XyO01ntOv3MVGc7Yp0syp9kU9iDjn7bAd6ZIQdb%2FBgPi5BbTw9dPpPDXOyVAGr0WrIkT1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ca9a695356c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

celebrityviralvideos.msge6.my.id/haykaljb/css/watermark.css

172.67.194.252

200 OK

104 B

URL GET HTTP/3
celebrityviralvideos.msge6.my.id/haykaljb/css/watermark.css
IP
172.67.194.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectmsge6.my.id
FingerprintF4:4B:3F:F7:72:7B:18:CD:8F:8F:BB:60:90:68:74:15:18:CD:09:05
ValidityThu, 21 Mar 2024 06:55:15 GMT - Wed, 19 Jun 2024 06:55:14 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
67874335471aa420e1656b72fe759a06
2ea83f40d873934064b86f48664eb0c05b31244f
1067b485ad7b76ed9339332cd5e7f5b922e0a210dc390d38a272598889cd2c72

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /haykaljb/css/watermark.css HTTP/1.1
Host: celebrityviralvideos.msge6.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:08:03 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 00:07:00 GMT
last-modified: Sun, 16 Jul 2023 01:33:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 14463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5rGiX5LkmFbRxC9v5kJGiqVNQqg2O8uP07G1Qrz%2BQWobWQRfep%2FntbWfNe8isC5hUpfAcYFdefni98pmyemH4VxMD4npqNtofp2TscgXE1DVjal7jnLDnj8KRMkijEnmNUlBkMi1hMhE258WUUUXSa%2Bug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761ca9fff44568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

telegram.org/img/website_icon.svg?4

149.154.167.99

200 OK

1.9 kB

URL GET HTTP/2
telegram.org/img/website_icon.svg?4
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://celebrityviralvideos.msge6.my.id/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1896 bytes)
Hash
5caca7ae1cffb3da0b06150a15020005
04cfb934f238d33209406393a3fbf78454815739
1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f

HTTP Headers

GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://celebrityviralvideos.msge6.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 18 Apr 2024 04:08:04 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Mon, 22 Apr 2024 04:08:04 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP