| buka-blokiran-akuun-dana.resmi-vip.art/login.php |  104.21.51.123 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/1.1buka-blokiran-akuun-dana.resmi-vip.art/login.php IP104.21.51.123:80
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DANA |
GET /login.php HTTP/1.1
Host: buka-blokiran-akuun-dana.resmi-vip.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 09 May 2024 09:48:47 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 09 May 2024 10:48:47 GMT
Location: https://buka-blokiran-akuun-dana.resmi-vip.art/login.php
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rK5%2FOLz3skpx0BJqHl8DYydavVOmX5DIlfxltRUb3DLqaz600w%2FrSsDPH1ockylohcmKHmNIliBzXzU3mvt5DThX3TU%2BYfafQKtyUN5mvCmVIeniqHD41g7HuTyBydv1PBoOQ%2B99j57rocOSZWPBRpGBasEbQfOMTA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8810c69f5822b50c-OSL
alt-svc: h2=":443"; ma=60
|
|
| buka-blokiran-akuun-dana.resmi-vip.art/img-sys/server_misconfigured.png |  172.67.180.47 | 200 OK | 3.2 kB |
URL GET HTTP/3buka-blokiran-akuun-dana.resmi-vip.art/img-sys/server_misconfigured.png IP172.67.180.47:443
Requested byhttps://buka-blokiran-akuun-dana.resmi-vip.art/login.php CertificateIssuerGoogle Trust Services LLC Subjectresmi-vip.art FingerprintC9:DF:D8:D3:DC:89:7C:C3:B4:6E:C8:83:BF:B5:76:E0:EE:41:4C:1D ValidityMon, 25 Mar 2024 11:22:22 GMT - Sun, 23 Jun 2024 11:22:21 GMT
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hashf79adaf00f83dc9757086cdbe8645ff0 82f37b8be7668eab8e1a06de828cb336799c8134 944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DANA |
GET /img-sys/server_misconfigured.png HTTP/1.1
Host: buka-blokiran-akuun-dana.resmi-vip.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buka-blokiran-akuun-dana.resmi-vip.art/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 09:48:48 GMT
content-type: image/png
content-length: 3164
last-modified: Mon, 04 Mar 2024 17:44:29 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s7AqVR3%2FIjVkDMwvBGn0JeL%2FEzR5Jc5oRGQ2TseBwRgVM0mSrPZjo1iG%2F3wGKMolTYtfIIJlHqP1pDdJUeZ8XyS5kM26ktCtDKVc7e1SEiBhy7L3acP2CDFnQ8bgpcHCdLR7QfoRMOpPLuy0edoO26gDLWbLuzrrTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8810c6a0ab91b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buka-blokiran-akuun-dana.resmi-vip.art/favicon.ico | 172.67.180.47 | 404 Not Found | 5.2 kB |
URL GET HTTP/3buka-blokiran-akuun-dana.resmi-vip.art/favicon.ico IP172.67.180.47:443
Requested byhttps://buka-blokiran-akuun-dana.resmi-vip.art/login.php CertificateIssuerGoogle Trust Services LLC Subjectresmi-vip.art FingerprintC9:DF:D8:D3:DC:89:7C:C3:B4:6E:C8:83:BF:B5:76:E0:EE:41:4C:1D ValidityMon, 25 Mar 2024 11:22:22 GMT - Sun, 23 Jun 2024 11:22:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4070) Hashf9d2c92d99ee343f064955a449bb7285 875915fb631b511868bfb5521a0e600ced1f7c75 377c63faa57e0fd873ffe9bb569dbdbfa1623a6220fc34591ebf0cff3d025e8d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DANA |
GET /favicon.ico HTTP/1.1
Host: buka-blokiran-akuun-dana.resmi-vip.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buka-blokiran-akuun-dana.resmi-vip.art/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 09 May 2024 09:48:48 GMT
content-type: text/html
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TzLqOfyPj110aJ7rRK15sNDEYxJ6qelTaH7v0WrceVQQzzWDvSTi9%2FP2bc23zRxBzrVINfnsV65d2MoDqxo7obXR7NzOLXzTyLddYPOlr6t8Q3OdbNT2RUBuf5sLQbbmv%2BnlyoB2yqzgrkdLUNcT%2B0sntEzCGMYSEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8810c6a22ec9b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buka-blokiran-akuun-dana.resmi-vip.art/img-sys/powered_by_cpanel.svg | 172.67.180.47 | 200 OK | 5.6 kB |
URL GET HTTP/3buka-blokiran-akuun-dana.resmi-vip.art/img-sys/powered_by_cpanel.svg IP172.67.180.47:443
Requested byhttps://buka-blokiran-akuun-dana.resmi-vip.art/login.php CertificateIssuerGoogle Trust Services LLC Subjectresmi-vip.art FingerprintC9:DF:D8:D3:DC:89:7C:C3:B4:6E:C8:83:BF:B5:76:E0:EE:41:4C:1D ValidityMon, 25 Mar 2024 11:22:22 GMT - Sun, 23 Jun 2024 11:22:21 GMT
File typeSVG Scalable Vector Graphics image Hashcfcf3d7719b124ecd2625b83cfdf014d 8d9090b5c06b0507aca2d4348779b1e5d22b7941 65055fa73adca7e37605eb5c65d74ca7bf0295d78e9b0a2461fb034974d94584
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DANA |
GET /img-sys/powered_by_cpanel.svg HTTP/1.1
Host: buka-blokiran-akuun-dana.resmi-vip.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buka-blokiran-akuun-dana.resmi-vip.art/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 09:48:48 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Mar 2024 17:44:29 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w6I3YREfz7mddcX9RE%2Fvs844%2FUO6OkR9RWvHO8Zr9kGfKDz7nxnOdNqGDzH0P1wdpub1MR3lJMrboxmDRUBBDaC7yqiy5WcZuqnUwbwXOJVAjHjSj4yRRTJza1nuf7tR%2BLw%2Bwc4EZQCHTNqo77yNG0qSPMVorp9M9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8810c6a0ab98b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buka-blokiran-akuun-dana.resmi-vip.art/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 172.67.180.47 | 200 OK | 1.2 kB |
URL GET HTTP/3buka-blokiran-akuun-dana.resmi-vip.art/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP172.67.180.47:443
Requested byhttps://buka-blokiran-akuun-dana.resmi-vip.art/login.php CertificateIssuerGoogle Trust Services LLC Subjectresmi-vip.art FingerprintC9:DF:D8:D3:DC:89:7C:C3:B4:6E:C8:83:BF:B5:76:E0:EE:41:4C:1D ValidityMon, 25 Mar 2024 11:22:22 GMT - Sun, 23 Jun 2024 11:22:21 GMT
File typeHTML document, ASCII text, with very long lines (1271), with no line terminators Hash40d981045a7516cdadd00e8dccc9c58d 8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3 71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DANA |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: buka-blokiran-akuun-dana.resmi-vip.art
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buka-blokiran-akuun-dana.resmi-vip.art/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 09:48:48 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:31:53 GMT
etag: W/"663b4689-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CsJGjJzQFXIgs3Nin7dRY1YeNQ%2Bhx3SDn6WvI8%2BnEK34wXccwKghfANujFlzHeszOPaOKqzisVh0IxHhCgDxAF8P2EFS%2FcE4moRlsigKBJFnlHBDvKv5MgKRRO9nj%2BkXQYBI%2F0HAbLkTzPFTSH5ZtV17MKNCrBs37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8810c6a0ab9cb523-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 11 May 2024 09:48:48 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|