| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css |  104.17.25.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.25.14:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 04:42:53 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 295466
expires: Thu, 24 Apr 2025 04:42:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dWf9tN0jCPYONt7LMiKS1rygoD4ow6KG%2BTnD1jKbMnrOrK8UX1zONwDnImvS9tayUqlWxczxdDt%2FPqKsWUzTLOu3V7JNJL4vc0dZwNrIjtTABtpha4wM0vj3W2OOHl3wmGso5p9z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e5d3a2d90e569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css | 104.17.25.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css IP104.17.25.14:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 04:42:53 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 299766
expires: Thu, 24 Apr 2025 04:42:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2IfxgrqYzUi0oU7WkLGsJB8sffNyZSG4QNdyUx6Kk7G3zb9i%2BwaYeboPCfLq2nj%2FITrLZtL%2Fc8DgIK4JJdzP3ckQ2n9b%2BbJf%2BM5XSK5PmLUSOSIBfckHOZ1T0hQx4x9pEUyxxKsN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e5d3a2d910569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.pubgmobile.com/en/images/nav_language.svg |  23.36.76.227 | 200 OK | 675 B |
URL GET HTTP/2www.pubgmobile.com/en/images/nav_language.svg IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd8ba211bb1be1a15bf5b0143ca1b009a 215203609a551dcaccf6e434508623f302635f86 a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6
GET /en/images/nav_language.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
content-length: 675
date: Sat, 04 May 2024 04:42:53 GMT
akamai-grn: 0.df4c2417.1714797773.1be4f8eb
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/ |  172.67.208.95 | 200 OK | 10 kB |
URL User Request GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/ IP172.67.208.95:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (453), with CRLF line terminators Hash8977f175126b30424110e209849e56d0 2d3b5b311ec91c2152ce9c554c7937db6c7e52e0 a7d7fc7fd5a966cbe731d3fe38b7bde1512808797438bf86c48fd9722bc85e4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET / HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Uy7jVLI%2F%2By9iarJxobOyBfRizTl1b8BuO2TIqmBjknRYJdVcPw17%2BCByyWX0MHvSePoY%2BWPG6DMzu1wkPfK8K1BGFHE6qqz1C%2F57TQuuHODwgzx4G5b13f%2F489Dx3DDl%2Bz%2BlsIMlOyP0PlSm45Onug%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e5d39da881712e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.pubgmobile.com/act/a20180515iggamepc/logo.png | 23.36.76.227 | 200 OK | 6.1 kB |
URL GET HTTP/2www.pubgmobile.com/act/a20180515iggamepc/logo.png IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
Hasha74329a2054a9e096a43ba8742dd9523 4ccac3041bf854721b91dcb45286b8488dd9f072 cde9945e91f0e51058869d687cd24c8f58804f25623999f1291c71b3697093b6
GET /act/a20180515iggamepc/logo.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "5ff6baa2-3bf2"
last-modified: Mon, 08 May 2023 08:25:46 GMT
server: Akamai Image Manager
content-length: 6055
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Sat, 04 May 2024 16:42:53 GMT
date: Sat, 04 May 2024 04:42:53 GMT
akamai-grn: 0.df4c2417.1714797773.1be4f90b
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/loader.css | 104.21.42.189 | 200 OK | 796 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/loader.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
Hash1f14c398a81e0d8f7c287260a7793263 8f191747b6483c4dfa463e822fb8a6c04e25179c 9764ef39c9d7ee9c392398fa25429b7090762408fcfcc05633ecc8c7d3650d1a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/loader.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 06 Aug 2023 16:28:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1o8PeJuHzY3ZQ%2FUvhOr1Qiv1uyRlpv5jNCDgn%2Bg6HOm4ybvxwJfJjxpUmJK3aCsANju8x0trfIHPxgtWR3MuksFGvB0BSXLNB6DDoapCDf2nXvp%2Ba4Sa%2BCbI7wroy2jBrh8VP%2F5KndN69AQDHdS7tw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a298510afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js IP142.250.74.42:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 11:39:23 GMT
expires: Sat, 03 May 2025 11:39:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 61410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/draw.css | 104.21.42.189 | 200 OK | 969 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/draw.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeASCII text, with CRLF line terminators Hash0ac501de43f33a67d06f7b1f95a22e41 24ce79c775432f3f35301f529fbc5a8855a5694c 5019460ea27c7aee9b1bab1e61044627e6f5cacea34a4c74e05add941cd5b6f4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/draw.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 14:59:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZsYDBvdDWyvWeA%2BNIOdoLHQP1k2Ic4TeFubVuzYajKXZ%2BOvS1BQvQyTJRodhWXnqrGWrXhoKO3rom8%2Be%2F%2FWGYJa4P4U7kEd6i1DUNdrHP10fMr4GaCRGvXvTM8FKCvInZeRPk7sU1l7UUboCe3FWj14%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a29ce4b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js IP142.250.74.42:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32180) Hash32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:43:21 GMT
expires: Fri, 02 May 2025 23:43:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 104372
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.10.2.min.js | 151.101.2.137 | 200 OK | 33 kB |
URL GET HTTP/2code.jquery.com/jquery-1.10.2.min.js IP151.101.2.137:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32072) Hash628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 04 May 2024 04:42:53 GMT
age: 19997168
x-served-by: cache-lga13622-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 20579
x-timer: S1714797774.925485,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/twlenzz.css | 172.67.208.95 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/twlenzz.css IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
Hash1e62d95f42cd8550226ecc01ebb5d27c 431c8e506db7def5beffe74a81c333e4ce0c89ce a9d51dec1dda6bd8f80470a7e4bd0214068d560a00391ba143ed110de9c3bbd4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/twlenzz.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2024 10:42:50 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wC7yZCstqK49lXyhgvEx6i2iX76s5DZj4bXfXIJjX%2BMaOck3VuFwP731CsPFZvMLTEvBz6NvZ7hI%2BcUv9%2B5rbki8yeZlaxMYe%2FvwfrbwfruiDFcLq92OaCGqfRCfbYW%2BxGpWrz0Rfvjxc1pIePz6USE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a5ec4c712e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 172.67.208.95 | 200 OK | 655 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, ASCII text, with very long lines (1238) Hash9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 30 Apr 2024 15:20:25 GMT
ETag: W/"66310c39-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qkqs68V5Um0eZY9rliE9Td4vZQzt6mLCG3%2BkvhSSIeNfugyLnOGJ2txH48a9%2FX5%2FRfhK6bSj0NyjCmRow7Xeivs1ypncU8fgkoQpW0JtIMtM%2BUx%2FlWwUb1fBcNjLS5PImHGCfjDDSovrgdd9Zrvq058%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a9ee20712e-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 06 May 2024 04:42:54 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 | 142.250.74.106 | 200 OK | 3.8 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 IP142.250.74.106:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash019a11f4d91928576933dfed28a55e8d fa40c529055e606c7e288a0009fdcef320c1a771 1d28a3403e1303e67bd95a89400926181da91f45c300d3b747425fc29b59a17c
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 04:42:53 GMT
date: Sat, 04 May 2024 04:42:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png |  101.33.26.200 | 200 OK | 7.6 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashcc70b37c298ba08069f3c91b1df297fe d7c87f6337f5a48f94190eca6a1b74eef9323f38 f2ad27dbb5397878470e88c31ca3c398f490f9e720ba0ca649ec6bf137f4d6bc
GET /oversea_web/static/images/footer/footer-ins-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 7625
accept-ranges: bytes
x-nws-log-uuid: 7538158258577426836
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/Discord.8277bca0.png | 101.33.26.200 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.midasbuy.com/images/Discord.8277bca0.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash8277bca0aac01af0b679d71f4de55459 e06892977682cd5f57c31245ff7cc8efb14c92f0 25157739816315d396c664fd1f45336d8ab8bf9d768aa911e93cbebc95614a58
GET /images/Discord.8277bca0.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 22 Apr 2022 08:25:18 GMT
content-type: image/png
content-length: 5224
accept-ranges: bytes
x-nws-log-uuid: 15791297506347573410
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png | 101.33.26.200 | 200 OK | 2.1 kB |
URL GET HTTP/2cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash7743a9aef9d3b6d89f6567e7514036d4 08fea638e8c8f7641edaae510c80879686ddeb77 f10cdb32b8d7212970310db9166bb421eaea8128f1767604c22001fac1d5aa97
GET /images/footer-tiktok-white.7743a9ae.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
content-type: image/png
content-length: 2135
accept-ranges: bytes
x-nws-log-uuid: 8248907997885502497
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png | 101.33.26.200 | 200 OK | 3.3 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash150e097b432034e3fedf6443b4551a16 a4299dadb4feda18e484362ce6892c52b507d5e6 b9ca6c3a516ec9dfbe4f33e318d560f265836d51627cb9fa3d881062a2fd98e2
GET /oversea_web/static/images/footer/footer-email-subscribe.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 15 Mar 2024 08:26:39 GMT
content-type: image/png
content-length: 3349
accept-ranges: bytes
x-nws-log-uuid: 11345296524810431948
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/link.css | 104.21.42.189 | 200 OK | 1.7 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/link.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeASCII text, with CRLF line terminators Hashd332e33efeb8a0fad3f67d077a68b244 b8c07616dc6df972edac7f5a079dc8d43754dbbd c1df4bb659e43a80557e72beee3c406fef34d96afa09338d81b20b225d7e9f3d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/link.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2024 10:54:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q0QeoqWgAiIFfSH%2FPdD91IbPb%2Fu1wiSDmWCThp8%2BjZgZ3trdANTM7jAKPkcuR4SVEHNtRkufLOLlbgL28qBnbD%2B4RjRPRMkJNLpmaj5UR5wRsp48nzPqONh7P0BmW%2BDnU39x1hbZ7U1Y4JrBfeFiLcc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a6799c0afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/animate.css | 104.21.42.189 | 200 OK | 4.7 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/animate.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
Hash8eae1a9cfafdc593321d4d59ec4905ea 232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/animate.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 06 Aug 2023 16:28:12 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k3HtHlG9JnY0%2Brh2u6FzwMEz5%2BmRofcmLf0F59CwkH08BvIs54Pa%2FzO13Vx9KxBqmtyP2OFkdfz7FGDM%2B3uenlJWxSLiABjyzJR7eIbLmalevIUgMcCj%2F392OqcEvBfLo%2Bw3xRmzJNcSZQkNoH%2BCuoc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a2ab4c56aa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/codeflag-link.css | 104.21.42.189 | 200 OK | 2.7 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/codeflag-link.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeASCII text, with CRLF line terminators Hash2ede4c4f04b8d4e0a7f3ba17cf7e10de b2aad0fc115b0f5123dafe2ffa827b5fb005c342 3603cdff3f7af5e18bc120728099ef179c02dfa4dbf105a51093d5e501ffa032
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/codeflag-link.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Mar 2024 21:22:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIs80d4c7j77UwAnID%2FQ0IlruMrMDg3Fpg%2FL82x9jNoh8piZ2NZdOys1x3IxW3nnqFWF41pWrEtQ9FeZ2s2xY%2BNtKyojesNr%2BpKBySG3%2BHH91H2cr%2BmsGd%2FedzbZZGs5MA46lkOkNmhU2wWa5cFiHmE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a6beceb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/fblenzz.css | 104.21.42.189 | 200 OK | 1.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/fblenzz.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
Hashb66c33cab73a96ec821dd6e64f44b0b5 411fe1cdad302201a2b29522a8ea501ef3769a36 a725aaa81ee06de69e93fa569aed938803a8ddc6142182bac4292821da63a194
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/fblenzz.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Dec 2023 10:39:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53cnurWaVzlBhZj3V%2BnTMtAh5kmfnphJzy16rmSkhN87pzsXZjqr0T%2FyiAdT7ntA8YpRwSgsuzHVq4EC9MmtKxRHhQo06%2F7gV%2FHcamavAtaPiwagEgzwqWnxylQvgU7X5rR5cK0%2FJW4GOPQWpcUurLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a2ac680b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/js/lenzzspin.js | 104.21.42.189 | 200 OK | 861 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/js/lenzzspin.js IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, ASCII text, with CRLF line terminators Hash03686fe4a3a720148c8086272d0df27e 6c523ece772ec9bb3c3479b44c2664afd7f76483 ef256f2acf62c2ee07a7a8ed87077623d81fad334aa4d3d541651e93298ebc75
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/lenzzspin.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:54 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2024 10:58:58 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9a27Du6vSIGZWBHFHipbRld1V%2FLWD1JTOLMu7KHx%2BjNikxbm9XO1%2BJgNLrFoAFYwmzP%2BpKsnar98xpe%2FxW1T4wEHsc1f94IV7%2F%2FepU2sUoAnGf3NzNEXhv5eBYTOXRDfQNFd%2BpDAiegeV6x%2B97f2Yg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3aab88cb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png | 101.33.26.200 | 200 OK | 4.0 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashb6f18fca57bb1657d719961d350bda7c 1e99ce9e9852ea8615b1c8c6f361058019d92dab 0e888a266c4ad5136be1cf650faf222ed0d644c54d83068f0dfabc0fae53e90c
GET /oversea_web/static/images/footer/footer-youtube-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 3955
accept-ranges: bytes
x-nws-log-uuid: 3706228102063949282
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png | 101.33.26.200 | 200 OK | 5.0 kB |
URL GET HTTP/2cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashd66cdc0d92659b0e64d7aefab70a60f6 f8dcf359bb72ed8aa3ef84a6d3f79102869a82f0 642703b53950fc841394918d79cbabec6060242e45c8ded41d324e7d6dce8924
GET /images/footer-reddit.d66cdc0d.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
content-type: image/png
content-length: 5043
accept-ranges: bytes
x-nws-log-uuid: 4544945803698980308
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-twitter-new.png | 101.33.26.200 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-twitter-new.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashe13a1bb9c094e0f585719ee363feaa31 09cc870cb5cb04adde778ea6c5f1184840844689 d6a605020cfb1091630b300b918363d2b61333c9f68c498eb6a73f323b35e1a7
GET /oversea_web/static/images/footer/footer-twitter-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 5151
accept-ranges: bytes
x-nws-log-uuid: 8295657550850842735
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/js/link.js | 172.67.208.95 | 200 OK | 1.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/js/link.js IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, ASCII text, with CRLF line terminators Hashe2a6345e739b1675bf1231d3dbede8cf 8cc3bad4453df61f7cff7d8ac18cce5ef38fb57a 5b9645fd39d8b3f5d5023eacd5968f6dbf42737514211d269894cc43b9ae0ae3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/link.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2024 10:57:10 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wk4g6xzNzYbYwL9kDhEhSlCXp1odrfwRCGvJPPZC0Fl4XA6C6p6qmpylaYTRo0JbQOWzn3%2FO%2F9pyPvhnR5tVcShuiCVJmAukGdeAkSxVgR0wB8GpZWPbuJ%2FZNt9Js2tvnG%2Bbv3BXawF8ZwYr%2FjGhDW4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a9fe21712e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/js/script.js | 104.21.42.189 | 200 OK | 2.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/js/script.js IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, ASCII text Hasha5145c8b0d15a8593a1f8d3ace2d1c9c b6005297c657a0e5e23d52139edf7db5dcf3229d a9a04bfcf7a5dad503d95c69c0d4816c9c06374d89d0ab1788dd3f88a2640142
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/script.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2024 10:50:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q6BNlvGptJBcu3nG6MAobKid0z%2B24eDBlGenHIqftIGNTysnSWxZLYGTyGo2wxCp%2BEwGLjO3i5d4dEsHVWWc8oG3DrfPPiQjmBzeX1BKomnSpCp1i0%2FIydf5PuP2TwSr%2BNaNDQcjysl7KylWJEVVFBE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3aa9ab00afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/css/style.css | 104.21.42.189 | 200 OK | 4.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/css/style.css IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeassembler source, ASCII text Hash750946b642a1724683a8c3442b6dabbc 42be1d4191dd7ce5fe6b64b7820c646532c08d6a cbf81c0712e504b4664d0b6c5e9b48b597c89de5e0ac0807d09401387aeb3d90
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/style.css HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 12 Mar 2024 20:19:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0oUOQRz2wBa%2FStWrI1lbyDUgC9L7IOJg%2BQ1W2pVIIkxm%2FTYP3gLokrnTw2bzsAY659TCifxJk0K%2FuT3b5xKGYXWzh7olEACrjimwgFpv8MNz80S8c7zfImOAWD0Zplp2K9EjTB%2BnspStsQss1KR9G8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3a29afa0b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| i.ibb.co/pZDr8sd/Twitter-Hide-Password.png |  162.19.58.158 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/pZDr8sd/Twitter-Hide-Password.png IP162.19.58.158:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash8d1f08b46884df302bf7300fc234832c 5735d57b6fa211c400d439095d5ff2f5bb57e691 e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 04:42:55 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.ibb.co/PYpHF6b/Twitter-Show-Password.png | 162.19.58.158 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/PYpHF6b/Twitter-Show-Password.png IP162.19.58.158:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash2fd203703821d5ce5d18bee2a51b779a a78d7b1369ce8bc34de57909af142043cae446f0 6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 04:42:55 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 | 104.17.25.14 | 200 OK | 38 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 IP104.17.25.14:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38384, version 1.0 Hasha4d31128b633bc0b1cc1f18a34fb3851 6ee4c79372c3fd679706306ede47e4b03cf53d60 e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c
GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.87y.rgrgfsdsdsfdfgvb.my.id
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 04:42:55 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 38384
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03ed9-95f0"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 295290
expires: Thu, 24 Apr 2025 04:42:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f79IjZNDngUn5tV6IQNNc3XjHAY%2BJ04JgjmXu%2BR5tpgCI06kPcZPlo9c83trLD62c1LnNHXcnXCpyTnG2cOWfieUPBUb9iyOsxm9bPth3cIvViw%2Bt09exqQl2MCyQHo53oaGpItU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e5d3aff855569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 IP216.58.207.227:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15044, version 1.0 Hash4806226b885b3b3d0ae52142f6bfb3af 2ea5cc6d5e4adb874989a2b74bda062296fb1ad3 714088bef569d6981bfae79530ef315f4d6505f302a944ce9063601919977e6f
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.87y.rgrgfsdsdsfdfgvb.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 11:50:19 GMT
expires: Sat, 03 May 2025 11:50:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:11 GMT
content-type: font/woff2
age: 60756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.87y.rgrgfsdsdsfdfgvb.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:40:35 GMT
expires: Fri, 02 May 2025 22:40:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 108140
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz7.png | 172.67.208.95 | 200 OK | 27 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz7.png IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hashc858f336130cf1875eae4079cd881225 a13969bef643bc28e421c7ae9de798caa6166dea 0c0cbe604c45f7f324aaa0c159a8614dd06c9c1d7539b9ba258bd071d67ae276
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz7.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: image/png
Content-Length: 27430
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gd0%2BzkcNsNYTnHIQ%2FZzqy9Eq96CQt3MiMjVmnH36jXqMg7xVBJIMH2VIpTF3oVB8yQRPCrYvtWNV0VWTo%2FkrsGDL8f5nFMUorALijWZYqVnmhC0iqIjfpvYCAHYlOyEY91CTp6MLRSovoPG912FNN90%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3af1813712e-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 172.67.208.95 | 200 OK | 655 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, ASCII text, with very long lines (1238) Hash9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 30 Apr 2024 15:20:25 GMT
ETag: W/"66310c39-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7MaIqjrG%2B577hMF7gYcyEeoM8bKa2L45bOq4G7vIu52DOztvS0dSR1D6m2RtwXo0zSwgDCtf007BRpo3gKZAFLTvzS%2B5FFVqAV3HjPIPmlINLOvFJNir%2Bw2z%2FAyydR6Ogy6x3CVf6htbab8uR1iLPk8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3b12920712e-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 06 May 2024 04:42:55 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
|
|
| a.top4top.io/m_1725zobal2.mp3 |  65.21.235.194 | 206 Partial Content | 18 kB |
URL GET HTTP/2a.top4top.io/m_1725zobal2.mp3 IP65.21.235.194:443 ASN#24940 Hetzner Online GmbH
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerLet's Encrypt Subject*.top4top.co Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2 ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hash70ded6b0b406f9710307bc35e221629f 7034ec2ff72c936255b04c0890ce8976599380cc 22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65
GET /m_1725zobal2.mp3 HTTP/1.1
Host: a.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx
date: Sat, 04 May 2024 04:42:55 GMT
content-type: audio/mpeg
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 05 May 2024 04:19:35 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Sat, 04 May 2024 06:42:55 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz6.png | 104.21.42.189 | 200 OK | 24 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz6.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hashfa5cd18944cf18a57d30882e3808f0c7 7d1dfd043159ff4cae18348bd123e0c2099c4256 49a9a26f1b6af09464f9191e41b4437f6444617a5ff4fb9b29c07ad98cd19b39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz6.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:55 GMT
Content-Type: image/png
Content-Length: 24491
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjIRMohTc6hDDTwRFIyAzs6mbes4vC2lcChFLG5dPiQL11hxQlhZV9calG6e%2FXBPqBrhphMTnDadwJihVfVCtxH6M%2Bo797oRl0%2BVfIYkwEOuV%2FQywloAu6xsjc8TGu%2Bc%2BYuCeetKl9Uxyb%2BjQbypbTE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3af1bf20afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| l.top4top.io/m_1725u5z7i1.mp3 | 135.181.63.70 | 206 Partial Content | 20 kB |
URL GET HTTP/2l.top4top.io/m_1725u5z7i1.mp3 IP135.181.63.70:443 ASN#24940 Hetzner Online GmbH
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerLet's Encrypt Subject*.top4top.co Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2 ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hashee5b5d12064ae26f839b882edb33da62 6fa93ef00f294eec4ef05276e81813db1e95e346 4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54
GET /m_1725u5z7i1.mp3 HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx
date: Sat, 04 May 2024 04:42:55 GMT
content-type: audio/mpeg
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 05 May 2024 04:19:35 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Sat, 04 May 2024 06:42:55 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/1920x240.dbf12c4a.jpg | 101.33.26.200 | 200 OK | 218 kB |
URL GET HTTP/2cdn.midasbuy.com/images/1920x240.dbf12c4a.jpg IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x240, components 3 Size218 kB (218481 bytes) Hashdbf12c4a95c3020e6ed2ec7257288b38 556e7b6a6a9ebe72fc7df64a3c9608c31ba30631 b962b25d728f30dc950f67560e8a26a57ebfaf2e6da255b75398c1d197ba3711
GET /images/1920x240.dbf12c4a.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Jun 2022 08:07:52 GMT
content-type: image/jpeg
content-length: 218481
accept-ranges: bytes
x-nws-log-uuid: 16718141022579885308
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/1920x240.7c808b6c.jpg | 101.33.26.200 | 200 OK | 194 kB |
URL GET HTTP/2cdn.midasbuy.com/images/1920x240.7c808b6c.jpg IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x240, components 3 Size194 kB (193591 bytes) Hash7c808b6c30ccf225fb52ee69bee87857 3792ceb060596224bb8efad8d76a73b9d142e6ff 43ba6fe926cd68300dcdc8829c6bf73aeb24768ad2d5f46177041d9a3b08f3d6
GET /images/1920x240.7c808b6c.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Jun 2022 08:11:25 GMT
content-type: image/jpeg
content-length: 193591
accept-ranges: bytes
x-nws-log-uuid: 16073757884316647357
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/906-1920x240-EN.71b79b20.jpg | 101.33.26.200 | 200 OK | 220 kB |
URL GET HTTP/2cdn.midasbuy.com/images/906-1920x240-EN.71b79b20.jpg IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Windows), datetime=2022:12:20 18:09:57], baseline, precision 8, 1920x240, components 3 Size220 kB (220248 bytes) Hash71b79b20c6e79d844e06e54b97f910c8 7cc19326663e04b5839506debbd44094fbb7b59b 3225b6ea8b6f95f767b985b43fcaa64147e1205f8cc9e01d914351b79be9e625
GET /images/906-1920x240-EN.71b79b20.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 16 Feb 2023 13:24:57 GMT
content-type: image/jpeg
content-length: 220248
accept-ranges: bytes
x-nws-log-uuid: 12056838418964316004
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz8.png | 104.21.42.189 | 200 OK | 36 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz8.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hash0b5411144d4834e6acea8ad1066a2c5c b5d5b349f8f888402e72a058a10b98c830b12b49 cccea606dd76f4a1392e9ddb56cdc12d1c4449350cd1dcbe483fd8298fd4b0d0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz8.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:56 GMT
Content-Type: image/png
Content-Length: 35828
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NjNadcSzVb6tuK13bzyTZH98fAPI375PvGIk%2FfuFdcVTsj8MHRLgxVPCazepdl%2FIL95gjY45XFZ0zWOyJyydQsVwBfHshne0FLzl5vKUpGZ%2FvVJ7VBwYH0I0%2BPLcKrQWNZ8UMaMh%2Fwj6yG7JgLWLB6I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3af1e8c0b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdn.midasbuy.com/images/1920x240.c14b9297.jpg | 101.33.26.200 | 200 OK | 201 kB |
URL GET HTTP/2cdn.midasbuy.com/images/1920x240.c14b9297.jpg IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x240, components 3 Size201 kB (201387 bytes) Hashc14b9297f780dbcb040c1ca5ccf5887a aa46f073f5698456d91b0bf07eb334034adabad2 a1f612eccc1972fe3716595659a228ebc8578b36ebb2aa92d4b092bf4a862f0a
GET /images/1920x240.c14b9297.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Jun 2022 08:06:02 GMT
content-type: image/jpeg
content-length: 201387
accept-ranges: bytes
x-nws-log-uuid: 10661986483309050564
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/1920_240.ed4ed184.png | 101.33.26.200 | 200 OK | 318 kB |
URL GET HTTP/2cdn.midasbuy.com/images/1920_240.ed4ed184.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 1920 x 240, 8-bit/color RGBA, non-interlaced Size318 kB (318328 bytes) Hashed4ed1843bfe1b364ab82ab321901104 0ad436b9d758f6a1c94a47de98650488396b7aea 3655a0c9340bbb7452e048db3b4953fba2be53df65dbdabd7504b858b49ca2ac
GET /images/1920_240.ed4ed184.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 09:34:38 GMT
content-type: image/png
content-length: 318328
accept-ranges: bytes
x-nws-log-uuid: 1306170622644399789
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/1920-240.321b317e.png | 101.33.26.200 | 200 OK | 720 kB |
URL GET HTTP/2cdn.midasbuy.com/images/1920-240.321b317e.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 1920 x 240, 8-bit/color RGBA, non-interlaced Size720 kB (720107 bytes) Hash321b317ea44cd5b773ef917b2eeba155 617f3648bb41105545b0db5ac9f34c9a17a05208 6e5c589a1159ea679bcb283e5214cf99b128a6647f8f8bae5b04b58c57a87bc7
GET /images/1920-240.321b317e.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 03 Nov 2022 03:13:24 GMT
content-type: image/png
content-length: 720107
accept-ranges: bytes
x-nws-log-uuid: 12082744249176781452
server: Lego Server
date: Sat, 04 May 2024 04:42:55 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/js/codeflag-link.js | 104.21.42.189 | 200 OK | 55 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/js/codeflag-link.js IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1591) Hash5674ef5a95b8f48ba0a8405d056ba0ce 9991445667304928434eb128a38ab05902c38391 595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/codeflag-link.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:56 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Mar 2024 21:24:08 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DPO8V2VhnsCQf2WGlepAQ%2F5QtFvJa3gYbDaZ0rPFHfumjD2Gmf6DrFPqDY1dIDi846B%2BuM29BESSUt9cLN6D93uBU76osXfj5g%2FMs6jm%2FFmHLBfJiai9CVhX68TmLK%2Fs3IYShYAimxwqGKjXzrcf5U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ac2f690b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/box.png | 104.21.42.189 | 200 OK | 11 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/box.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 655 x 779, 8-bit/color RGBA, non-interlaced Hash0c63d4bb716e9ac7a37b7c1a1d1edbcd fb8b2f64ddcab1d4b730b0562a5bd297b6d33a3f 9d1b23abe8347c7635ebb0d8b11559a6994353fcfef665f0c471400563367bd9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/box.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/css/draw.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:57 GMT
Content-Type: image/png
Content-Length: 10818
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:30:50 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40kMoJQudYIrHqt5Grciec2MzKm8OY714OtWEOKrKxNDQVCAFpjB3cqW2NYZfbKhhzjFciZyY38bUy5wxmo9fji%2BdJ4pRpMs73VGr%2FeCWniICvMbw%2Bx0YZgHLQM9SSvzYTKIgKzJ%2FUMue3UsLfsfTIc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3b32d340afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/js/showHide.js | 104.21.42.189 | 200 OK | 314 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/js/showHide.js IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeASCII text, with CRLF line terminators Hashec5f089a43ac08e40133ac15e8961424 857160ed93c9dec1045764abbaca58f6e3929f0b eee7bce4625b506586c5cbb9163566a2a816edf4ee5c80aa82843d4184830fd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/showHide.js HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:57 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Apr 2024 11:55:28 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3X44jqHVy2SfrM97teXL4YvoaOC5P80IH6YTDxmIbZuofXFPHvXfZltmM%2FdrKu03PDDt0P43BvsVa4%2Bm%2BxBxhssfhYU2%2BMJ9qyZp%2Fd1gJlK89vPE17kAkcHcvkqradvBvF0Bpwh8kHs6DhBvxDnEvF0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3aabea456aa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz5.png | 104.21.42.189 | 200 OK | 189 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz5.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Size189 kB (188644 bytes) Hashf9ab0618c5a06447dd7929dc282d7174 4e7f420b2d1112fb05a1c1b4d69234a39e15a759 9f18be9c4070797d6bcfd7e6776741764ef6c71cb3c0327d5dbe764e016dbdf6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz5.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:57 GMT
Content-Type: image/png
Content-Length: 188644
Connection: keep-alive
Last-Modified: Sat, 06 Apr 2024 19:36:52 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vc9GD3R2iRemEjy4pJbhhtX1xehr%2F7bZotl5D2IRzPK3Luc1WtMs%2BrEVJHUxGQrrvmK%2FCilY1DsEprH0qfMWrkBM9GpOiGRzaQq12MIPVQ9J0xS5iRsuutZDv2UA8UQNx%2BzWtN174PNAVK0Piq9Lys%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3af1ae1b4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/fonts/DINMITTELSCHRIFTSTD.woff | 172.67.208.95 | 200 OK | 25 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/fonts/DINMITTELSCHRIFTSTD.woff IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeWeb Open Font Format, TrueType, length 24996, version 1.40 Hash2018d35e708e07985693c6bc12a59861 12faf69d54217b30d4458fffad689e758b8a91c6 c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /fonts/DINMITTELSCHRIFTSTD.woff HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:58 GMT
Content-Type: font/woff
Content-Length: 24996
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 20:01:52 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=isvOfIVYOfpapoI7zkFmGdFHby7KegfronAOGlzaLtaWHNAfbgqHImIXjnN%2F7JsCwZ22ZjKf6sx0iPjH%2FDIb0cqTAXxfw2L84UrQg45E%2B12NfuFHUWvADgqfg4j8vrPVRv1ATVXAnxPQ96vmeHcRLho%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3b12922712e-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/bg-item.png | 104.21.42.189 | 200 OK | 22 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/bg-item.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x1632, components 3 Hashf87c3bd48ae8e7641800a4f4b813aa0e 1142306c70534889c6cf8d5a4a9bf3546b02d131 21bd3cc6ce5f914e39c22b6af807e63201b5fddfa419c983de92996e497ca04c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bg-item.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/css/draw.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:58 GMT
Content-Type: image/png
Content-Length: 21675
Connection: keep-alive
Last-Modified: Thu, 15 Feb 2024 02:58:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OEiTsw%2FzsQQV%2FI1p7xyJZKJm%2FdNxql5iepGdvBhRE9ApHAM9f7ydhkcQBHcFOyQajm9CVypppFR4%2BlNE0Q7iRpb0aE%2BGWGdYZT9tVn3HxSuY%2BUsMbqiCqRvErSFqy3vwKl5bZUL3%2BSJpF3IK2BZVIJ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3b7a9bb0b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz1.png | 104.21.42.189 | 200 OK | 50 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz1.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hasha294584913e8852d9e1f5b4410e5d98d 76211e3d4e377b29e68018dd556783b75512ba7b 8ff7187bb80acca6dd77c96a4191451fe3c914dd980a3c04833993bacf65ebbf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz1.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:58 GMT
Content-Type: image/png
Content-Length: 50387
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PLnT8aAHhu7JNj51rvPfat0poXfHxrSrGcc3bEzpi058ccwFS1PtUCCPULKsIX9vcSmJUs%2FBZLCSKraSjPU0PTuQCGFSVmHQnY95snHQEfMJsEAiN2dh9IazrXJyl9XtlegE7efU%2Bu6VG8tRM0C%2B4VY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ba1c090b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz2.png | 104.21.42.189 | 200 OK | 54 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz2.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hash7ced1758684ab1931e0092829396adea 1cd318bfdbf664a6e8a75c19fa02ec4c2eb7cf62 6d2750ec92762975f6d5724f52d09f3e5ef80d6543dbc676fd58b3e184237f24
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz2.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:58 GMT
Content-Type: image/png
Content-Length: 53996
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KKOLdFE1JKN8wNVk%2Bmrjy77Cy3rHqihyLxCerBzTqNlCyTh%2BLIHtCJy%2ByqavrphljUyEnL0%2BK%2BgthLrDhOsW0vVVW%2BrW8pOlRTLyjaR1qil9oCl%2FcyHLfC%2BE4SwguNvL7Aw8XihCfDdRLfnZGX5U774%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3bbffc30afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz3.png | 104.21.42.189 | 200 OK | 51 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz3.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hash399cceb2fcdc171a1567b534c61b8576 3f442b637e0bacbb51078df8ea626e87c7584ee3 ceb394c057335f3553e026a94ed107210624de651ce748d438f696b4cdac0e5c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz3.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:58 GMT
Content-Type: image/png
Content-Length: 50988
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01PR1Yse48bnInJxl%2F%2B1XNx%2BDpuZT7VSs%2FL9U7SCat4lzeCIEUWz3DLvfJGfqd363YhXqbx416FWbPWTvPBcimMWSIdn7%2BodF1MtlgkI%2Bl%2B3aNPnjdqlnnuwyu3RIsOy1UN%2FPny7wO7rtByiQSaZnw4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3bc0f2f56aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/media/putaran.mp3 | 104.21.42.189 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/media/putaran.mp3 IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/putaran.mp3 HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jc2cy4EC3HbHr2tiwfKaIOKYEcpku3soo%2FYjRQd3a30wayW0V%2F%2BBQshN1CRIDbpWpD9WR%2FDbfV4SetwQZ7YstIZRm2zf4n5YYM252kKzUI42Lm0S0yA7%2B%2BEhgBlAcS8WOvWU7whARywOVMK5Yq97jJM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c63b390afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/bg-pop-btn-m.png | 104.21.42.189 | 200 OK | 1.5 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/bg-pop-btn-m.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 597 x 79, 8-bit colormap, non-interlaced Hash94ec8b608e632076dd8f56d86708cfd3 01b83a99d1b6eb20b7ab4d0f0e3004b64e34a0c0 042262bf97d7754173565e479cb19b63cf577067d946453696bf83b0581edd66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bg-pop-btn-m.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: image/png
Content-Length: 1472
Connection: keep-alive
Last-Modified: Thu, 15 Feb 2024 02:58:50 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S5S9fsIBY5OQYqss1TC7vZMY28KEi28LKjLwxLyyrzkhaVjPvg1%2Bp4lVfX0GyqGWWBGcpcpY5UdlNgrohgieKcv0WCyVUJo1xhA%2BHh1szjiQCaArRkOq5RtYxj%2F6mf9lt4maviogrP8uBOofeZhq3Kg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c46def0b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz4.png | 104.21.42.189 | 200 OK | 63 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/lenzz4.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hashbf6451254733600c08fb2f5f1ebacce2 18c6b6ed30c0588ea5fb4bc60263766190f852df 22d9d5948fef10440969a1252e807fad71750e6296fd27698821d10b9aa963f4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/lenzz4.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: image/png
Content-Length: 63090
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dA8k8AfCYbe3olsU8RDAXIP%2BovmOYQ9zJSd2g97v5X9%2FUCBBbtipEhadBcgIr2bxnBbTbgP29gYP0shYYxykkIv%2B4ZWh2ENvN1GHJDUofiWtA9F2umz%2FLtsdNpBIEPUhXCu6ZWih8PX0eYt7TeDL3EM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c1ece0b4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| fonts.googleapis.com/css2?family=Teko&display=swap | 142.250.74.106 | 200 OK | 8.9 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Teko&display=swap IP142.250.74.106:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash49168028e69ca4d018d02f4050141581 512109e5d7f9078acab4792cc51525927bffab3b 1d1968ebc2efee6a15b956f8e421c7cf80466d7b9b9453b9cfdff655f5889e04
GET /css2?family=Teko&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 04:42:53 GMT
date: Sat, 04 May 2024 04:42:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-pindah.mp3 | 104.21.42.189 | 206 Partial Content | 9.0 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-pindah.mp3 IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, Monaural Hash46d794b8fcc24a09e9c43ee4bd88cbd0 ad48470fe3664b0e8802697e86d8b60bfe0fb73d 34fe11bdd5aa6a7295b2153d9124c96938439634ee236d77427ad00327fe7f62
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/kinnon-pindah.mp3 HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: audio/mpeg
Content-Length: 8972
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:43:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-8971/8972
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDNGGcLDFIZgH%2BRZLbbI0M9dkEVka3Ro%2FxPe%2BdgpD%2FPHSzx0o4TQ5s5DDwphv1wIerBwvLIwIM8Gc9gldZgbDlpRAcgLGxPxr12PZ3iDPhS0zF3VIK9npgAw%2BSRlWgjddMzjt0pkzQjis%2BpS7eKcjM4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c65c1656aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-stop.mp3 | 104.21.42.189 | 206 Partial Content | 9.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-stop.mp3 IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio Hash51265f018ebafa70d91c30f4fc4baa2f b77281529cbe4ad8bb1a9bd8c972ff2d06e5ed51 559a82fea775757c221dc15d7598a584d16c6750ddd7c05d7096107f9b8156cc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/kinnon-stop.mp3 HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: audio/mpeg
Content-Length: 9065
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:43:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-9064/9065
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4zskxfVLoMLYkXRcXKePVCcgjCd%2BzOH7ukeAshNrjFjoGrzeV4JGlJ2Xsu6cSKrDeI33FrxhdSmRlieCsfGm93ORojJWXvvooIqxb18Gt%2FK8fdkQix0TwsVEHuu%2FjeFCqoH7GPvQtr%2BpyNmlABrFsSM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c83bcb0afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/midasbuy.png | 104.21.42.189 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/midasbuy.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 442 x 88, 8-bit colormap, non-interlaced Hash1c9e0fb260f6461fb988b468d8644c99 b4703c4a9cf32118179298ca29577f14d8f089e9 619c74f9214f7bd5a94090c33e78ce2d4adf0df23d95f66c97a7e6e10643db63
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/midasbuy.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: image/png
Content-Length: 2302
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WrRxzt1ApSDq8SVN2ajmzI5ptVWyClmEEWcZ80Afufx%2BUuHyrZobLGzTr%2B2YGFO2ecByatIgVuA9TGJme8%2FhnEYAWf88V5Xr1mSIopsft9fbnL9jMbMbz8CfZPu0CQLEMVuMySistC4u23uHP0l3N%2Fc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c9f8d9b4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/bell.png | 104.21.42.189 | 200 OK | 396 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/bell.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash4bb8d357389be61776cd2dcb0af957be 0d74bb05571d334888c42eeba5ed2d732d366b2f d2e912b6e31f46ff7566901b38cb33ad665de7e1f49eb6ea6e372dd378e36e7c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bell.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: image/png
Content-Length: 396
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wd45w6PGZ8v3oLSJ4%2BfdV8dNJ5Fy800p3kVElwIvbpQdT4T1ohNKQ9nLNZz4gkDSooq7nrcqtGi7HfMb3Nh8eBTP5mDYYpBZ6ytdKPrjbYU%2F272PonV9J0%2FfUl8yD0bC3eycVblBLC2xC5TdH6S%2B%2B7w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ca29230b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-popup.mp3 | 104.21.42.189 | 206 Partial Content | 30 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/media/kinnon-popup.mp3 IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio Hashb579257a752038eac3d06d2b12f9583c c7ff26c89d9a5c364f382839cc6c265bde0189f8 6f4cb572f05e24fc4a4a6b1e8c0f008538eb5d158c4ac019f6a8e3d9c1f0d4c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/kinnon-popup.mp3 HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: audio/mpeg
Content-Length: 30408
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:43:28 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-30407/30408
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dsRppfs7zxVle4d7Y4vyCdF55ESNWVM03%2F9zg5r8OkyskrxX%2B8da%2BceRRl%2BxXu3zkd4QkvvFAuLNmodh6%2F5PFp%2F%2Fp5%2BDX0Ze0LaZ00LH9jFoCSrXWU8rkf85eLZSwDiOxrzw35ecswjSZhkFVa8hJhs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c86fb30b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/account.png | 104.21.42.189 | 200 OK | 669 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/account.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced Hashd82eef6d84be71bbc658c3609547cf80 91e8090b8cabfc45333cb6c125a92356a894bdbf ec92c65592fae18eccf3a13eefe27d6b38cc8c7719c8cae35e2fedcd8d5825d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/account.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: image/png
Content-Length: 669
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D33lv%2BVq5HYu6Pyo1hCfYDJL4f9RvjhIjsGslfr9ZN1h%2BfwHDyGmkVE1sa4byP%2FUxdBFpr3%2BvJdqrMrDJux6%2FYegxI6eP5ikeUK7jHkNG007uq53Waq2uZU0uARlAclWhSV93U%2BqLiVQs08dQ1DCIDE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ca6dec56aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzleft.png | 104.21.42.189 | 200 OK | 18 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzleft.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 441 x 776, 8-bit colormap, non-interlaced Hash2602d00e1963bcc1a68aab50285a8ed3 a0b34db5e502b8b9b9e8fdac31cea4dd8c6808ee aa96c076b213da7145702b5f4c1962ff4624fde007168c4f16e4d122a8d90ac3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzleft.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: image/png
Content-Length: 17708
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:30:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lvchkYVkmIjiLwV5FLb4cwUtkfLl30X6LiBhtgdQcfQolvdqvkaiHP2IAD3DvhpUw7BCWYyvv%2FL3WBdwqOq3svyjCiO%2FcHcDDrXC8rjuXfOu03T6oCB0M9WjqZHQ2ru8dE9GqVzyYy2kSFVOINpIcXI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3cc0d110afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/3.png | 104.21.42.189 | 200 OK | 21 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/3.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashb255fa277498e0793bf3e5ab15154455 9c5bcc97264f84cf4c721f55a73d9295b124e361 f2c946ff83a34ef473f510de4b9c92aa1a381cb938db3b672983474cb86ae048
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/shop/3.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:00 GMT
Content-Type: image/png
Content-Length: 21274
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v9SyGMZzcHpu%2B7sYic4q5vgUgwpoIaFAJ7P59goNlj83HlXt95oz%2FGOctdbHFxXIaCTjpTaRmquNrOt3HsnlJwjuxPoAp7jEbDuUQpaPTAAzVO806dazkmGM4qdt%2BynDvqjtkB6Vl2kS2G%2BeJcmPo%2Fw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ce780856aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/1.png | 104.21.42.189 | 200 OK | 25 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/1.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashf4f85ced2bfee8a0b865125b6282dd79 9c11604907d182e5be1e6fac667693af5eabf291 aa13c9b296c7513a474ff5fab14a7e9b764dafdc27cd16f890d1efffdab1d443
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/shop/1.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:01 GMT
Content-Type: image/png
Content-Length: 24907
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lhWDxZWMqZ29%2F%2F%2BRagFuFisthwXL3xHzX4r63suyNnI38yEviPSgfpCrIWKKh4R%2BZ47%2FtADnygzbNw46cGXxomTuFCQKrN5eyUcnK174tPPuxAugWx%2BF56I3OLcC3Gfvoqgw2Cg0gHnZo3MCcMbj12E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ce2a480b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.10.207 | 200 OK | 46 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.10.207:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 04:42:53 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e01696f4dd85a48838a9ea9ee82ef4a
cdn-cache: HIT
cf-cache-status: HIT
age: 303918
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87e5d3a2cf2a0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/start-button.png | 172.67.208.95 | 200 OK | 20 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/start-button.png IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 1527 x 478, 8-bit colormap, non-interlaced Hasha098e1f05c3645bf8ee82ee71b86a0c8 de9862cbf6a5462fdaae1fab85dc7933607d3c9f 5c6c988643a250c96a21f4840fe6c68042afe495f812ec2296a9a3db42a98823
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/start-button.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/css/draw.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:01 GMT
Content-Type: image/png
Content-Length: 19616
Connection: keep-alive
Last-Modified: Sun, 14 Apr 2024 12:07:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p35%2B%2F1UeY36H5sg7Re%2ForhfYbc%2FfryDfHsDKHxyxPtM55IeCr1Dox3NnxXB4AITQ7%2Bl%2BclRAD0vIQT6JLOgO8LOKm9FD68Y1T1S%2BVqGuU2yWKp2yRwoZ2uR8gvR%2FNSWJFMnJDD5VT1ODZUUYyLc0pOA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c4696a712e-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon-twitter.png | 104.21.42.189 | 200 OK | 1.8 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon-twitter.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 243 x 249, 8-bit colormap, non-interlaced Hash006c037306c84149fc3f2f4b5fffe17d 61c68d0b49c83979a498b2130b32de14b9ef4905 b751c2a21beb1db048e3a60bf2401378e199018fee98d82a660201cd22843c08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/icon-twitter.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:01 GMT
Content-Type: image/png
Content-Length: 1822
Connection: keep-alive
Last-Modified: Tue, 16 Jan 2024 07:03:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxZ3wI4Kq06gg59kNu%2FtPmt%2Fp5BpBrnXqmDZh2l64doCu%2BQuSDUkEc%2FbVcI85cvwnFKesua%2FK1czCgqth5IqC1p8Kyvp4h7A9pbJi780KBllRH%2FaIumK%2B0g66KUEQ%2BvTo0zFEx4h4a98M%2BGpNQLG2gM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d44c110b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon_2.jpg | 104.21.42.189 | 200 OK | 7.7 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon_2.jpg IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3 Hashcb60639970e803d05a6f0079d0f493c3 3d12f78fd8ded556f546d019155762aa9aaf9aeb 2e4a364058795bdae53ac229a9536cd5ad4724eb276973724983c366df1cea59
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/icon_2.jpg HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:01 GMT
Content-Type: image/jpeg
Content-Length: 7678
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:12 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yrpe13BuEL9Fgtnn0mxD7U4sIt%2BE2wKFKcUtJgJsbOnSRInWdHOrfCmWD6gN42F2dh6e9EQrJjpzMO25DSY%2Fr7O6pO2e8ImTj74VPIRK881WKnmcaghgMqhAqcE3fs57rK0vQicZuv2PRg6k3UuK34%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d44c260b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/support1.jpg | 104.21.42.189 | 200 OK | 69 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/support1.jpg IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1632x1132, components 3 Hash1f8e3cd0778fffa9d20a482a42c7d2a8 025edd5e5b64b61dfb2fe8967d5b99786642db4e 2e6f8c90dd4f01abb9d5d3ef009b9a68243935e5355525d5f6bb5d605c3ad9a2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/support1.jpg HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/jpeg
Content-Length: 68921
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:08 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWuyZ5bALK2b%2FdyNBZXfnIEnhNKrg5SAgopgDy1gZ2cz1eTwo6ru%2BhZ%2BlqgNq5BFaG5cSc8U6rzmJ%2FQ%2F0x66fVr6Co%2BtPW5r4nHb6DyHUQ9zXtzL2z2wgv907TX4h51ZAZc38t6vL2A33oaNN76LqwA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d22f150afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/alert.png | 172.67.208.95 | 200 OK | 884 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/alert.png IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 86 x 86, 8-bit colormap, non-interlaced Hash91401cde482e650953a39b2d3657a564 e67b51d82e2ea3b8dc49ae2dbbc35b2fd380b7d2 c239b86b0c64c09b91a35492861c717b7134e33b5e7ebb856adf9711e8856f8c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/alert.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 884
Connection: keep-alive
Last-Modified: Tue, 16 Jan 2024 07:03:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUWXITszgH8isSypVNHPUBIjpZJPP6HzfpbdOYBUIwJ%2FGXFaOuS5LeJBh26n6w473ELpfM%2BULgWHl8TUgXP%2BUSXn3UXMMiGpDxIhCAThUEx3Zw7jsaReM99IC%2FYOn%2FUBbKiXNMKCAIvHJJLKOYXz0qE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d63921712e-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/sub-event.png | 104.21.42.189 | 200 OK | 19 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/sub-event.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 2000 x 317, 8-bit colormap, non-interlaced Hash30960591323e7fbcc3ab0841b2f0e70b 073793532a84e7bf00766162a7394373f4e037e6 24c7f890132d893617cb6d4588c8b3822781e328405cf4a42e13858055501e29
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/sub-event.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 18629
Connection: keep-alive
Last-Modified: Thu, 21 Mar 2024 17:31:00 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xmNA%2F%2BLIgk7XGj5AoiRwhRr6lH%2BLSd6K8EWFOvCYfCCrI%2FkgLXP3ANtt1RbEA8dXeH4A7asaZTfRTGaZ0Ag86y8y9%2FwLEBQGMFZvvIuJq2bDMNsMZwsaGL0ZJyvdpCQ9cDjaEucaby6o3z00OqDSvLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ce0ac0b4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon_fb.png | 104.21.42.189 | 200 OK | 3.1 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon_fb.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 512 x 512, 4-bit colormap, non-interlaced Hashbedc806e16cbe3dbb90de1790adce6da 8e2efd0afe04a0d6b39c5f22ae8597a4704a5777 63e21af008d3e310fa4e9e8f14cd9585b31d0ecb359abdd4cd1a237c930a0856
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/icon_fb.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 3109
Connection: keep-alive
Last-Modified: Tue, 16 Jan 2024 07:03:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVQdHw8Jr0LqaOMCrV3WoWzL%2Fh0r%2FzsZUPaEa%2BQGMefx9%2Bm5MvLb8L3brl2rpoVHGupfoOxiJSV7fGsYTPUKl2Tk44IJNh11PTa5Fxv3%2F6MNxnNJ%2FLIgJ1qP9nPXc%2B8l%2FrV3bt6dHT1dpMXVXZo0660%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d84d910b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/load.png | 104.21.42.189 | 200 OK | 3.0 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/load.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hashc5ac1db50750a1177795f474678b2be2 ef0ab1883cbc85bd4d0a53ca3963236d268d908c 9ee0b7416b35942defe3c7c7840abf3af799a478ebf8b9c437ccf96898b808fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/load.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 2996
Connection: keep-alive
Last-Modified: Thu, 15 Feb 2024 02:56:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UZ73a6H%2B%2Fti%2BPcELqnDJl68vVgrHEFREj37r%2FJs9wvmpiT4qvy9RUtFjs8wZBQALE9vf0oh0m4zfqHuN0OXWGjfT4rj4RMJrim1bgiPLTYG%2Fm7CJTh2LbviplUt2q1pOhdMWxFITDrJu66u%2B8DQnmOo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d84df70b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon-facebook.png | 104.21.42.189 | 200 OK | 3.0 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/icon-facebook.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 1024 x 1024, 4-bit colormap, non-interlaced Hash3a060aee536fa81819122333f6f83f35 3267734a47be526dc3235d716e7d7c8a84300be8 4a1673430f37a8693e3ca8008dec7d08b617b2c8e2832231f5269e1d717bd74e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/icon-facebook.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 2962
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:12 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=024OkoobPhniB%2FUH7Tws6qOdhPvZCBAqiWs1hZP%2BGQtfTp%2BaQd02SogerawdM6ZRwVjwxFcz81UulQQXjICN4srPIj1X3mgYHDakApZ39lG5OH2HbgpPrf%2FNsa5y7JHp9mdIyW%2BEdOS1iMAXwrEGGxo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3d27a0b56aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/link.png | 104.21.42.189 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/link.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 77 x 74, 4-bit colormap, non-interlaced Hash476dd0272e48a57b6613b95183c99c45 d096fda3dc49d5dc316ed09546a4f0e84b77afb9 4c1da8237e48062e54e64a2b3c440520bac92db38b2f9fa57692d5a5f3ab2454
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/link.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:02 GMT
Content-Type: image/png
Content-Length: 1285
Connection: keep-alive
Last-Modified: Mon, 29 Jan 2024 15:45:58 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LDbi%2Bs6y7KZVzNzKWqcj2mfiyNCgezCHDSDpIgkhNyIvu7N8G%2BBty07GEZxC06Y9zM2Y9sM3kO4G8S0B8Wm1Q3GY3jQ7SUjaUe4%2Fen6gCEwl3M28KH95rZUWnUAC2Nnp5W3T8P3FOmWqWrhqI%2FtJjZ4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3da9980b4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/popup-close2.png | 104.21.42.189 | 200 OK | 867 B |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/popup-close2.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 30 x 31, 8-bit/color RGBA, non-interlaced Hash75b8fc9fb0f1dce9c0e53d119e637af8 c429caf6e1ed51a43421419c2a08d8ab8a654ae9 be08cce2cf15dba627fec531ea422ca0bdc76de1c2b61d6de21e2920687d4678
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/popup-close2.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:03 GMT
Content-Type: image/png
Content-Length: 867
Connection: keep-alive
Last-Modified: Tue, 01 Nov 2022 11:40:44 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTuaFe5SMbrY5xeqvM6unp3lEJi4VSuDCKAOXPKVilyUio%2BEymL8K1c9993QRuwlHgSthywh2OF6XriRtKG8EU1gQVX9JJIq8WnkgagOeyO%2Fy%2Bgvd4tSI3LQ55%2Fqdl4sPtjnZ64rAcu8CevR7u29j6k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3dc4f0f0b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/login.png | 172.67.208.95 | 200 OK | 15 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/login.png IP172.67.208.95:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
Hash35bb21d1f052f99b4e2b2249e170691f f217a12c47f47a4d0257b0e9fbcbcc52688c7caa 96fc28bb4fae0d3744930fe3ba476a26202692eed4d5d4c950255684bf2f5099
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/login.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:03 GMT
Content-Type: image/png
Content-Length: 14687
Connection: keep-alive
Last-Modified: Sun, 24 Mar 2024 07:19:10 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UayFFGYNklvy4PGq226CI1fcwRx7rggxVv8j71sEHSRllQmaGUL0xkPIGxPuddIm00SLSG9hnGJc0EOYO0B4GNALR4wQAcOkPMzr%2BMY6STpx4ZCsI9RenPy%2BcRjHRiQa4BGM37Da63JoO00I%2FM6RpoE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3da4a83712e-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/akhir.png | 104.21.42.189 | 200 OK | 28 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/akhir.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 525 x 287, 8-bit colormap, non-interlaced Hash6026aaf563c1ce37728a3f1d22c5e627 3745d7a7f1591950d9b778a1e00135a6c59f457f 90e02555bf848832b773295aad4326d996bbe0f8e20f1f44405fa226e4cfc8ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/akhir.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:03 GMT
Content-Type: image/png
Content-Length: 27902
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bcYCGuUJegqB3%2F8GgKA8fb2VrK2qX2xLigY61h630ukKhugMIAJDiP30%2Be5W6gPvvQfC9iRkTjAEbJ6IQ83K2eltMT3Mrl15HBuRKpCRARhzOF7l5zoJ%2B0pwoBhx87LtPTg1Jd2%2F%2BmLXahOOqBqyu5I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3da39520afa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/kotak.png | 104.21.42.189 | 200 OK | 14 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/kotak.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 396 x 396, 4-bit colormap, non-interlaced Hashf4dcdbfae3aebabe4c8876b6dbd204be 311a92e66516272fc30436aad916d87effd4f26b 45a20b741d2fbe73223bd912e8a0c6bacd7fc87a1d5958ec6e08ad44d7b3d776
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/kotak.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:03 GMT
Content-Type: image/png
Content-Length: 14113
Connection: keep-alive
Last-Modified: Fri, 26 Apr 2024 13:56:44 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IYvbD%2Btv0f%2BdkqdLfpswST3WVqvsOrcSFm20Nj183300VQVVnYwxgS4M9oBzieBo36qa8exalGBMkJWDzQaC2OlxgkfJMwvwy9SeM0NbruwLoyg4XPfKSv9KTSSi%2Fk6M3TJHLYgOjNN3z1cg%2Bjhn6pc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3dc9fd50b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/load.gif | 104.21.42.189 | 200 OK | 6.5 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/style-img/load.gif IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typeGIF image data, version 89a, 164 x 38 Hash144bb7d6f1e1cb408835fcd849acaf41 8bc47b81f5b2231fe6ef713f70dfff07961c6720 9a8c5f0bc8f65663a4bd8afee1623cfecb94f3c327e86705685f46a622ff6b66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/style-img/load.gif HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:03 GMT
Content-Type: image/gif
Content-Length: 6518
Connection: keep-alive
Last-Modified: Sun, 21 Apr 2024 09:43:32 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCwh4OGu9kYbtJeET7RxuSSpMiyi%2FEP%2F3lwLwi8KGOfOniXygNe9yUE0yOAJby9OsvU2%2FjN1G1vLUrjK8PrKkjampTuaam%2BQlRgYgKuNEQKUq9socZMUazXkmwsrQUbZj0XJjiaGC3gp%2FvHdYTJNJ5M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3dcefd456aa-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.pubgmobile.com/common/images/icon_logo.jpg | 23.36.76.227 | 200 OK | 982 kB |
URL GET HTTP/2www.pubgmobile.com/common/images/icon_logo.jpg IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1024x1024, components 3 Size982 kB (982437 bytes) Hashb83d8d3e9beecfac081f4e742d27661c 448330670bef8c2ee17baf6d2410ca974341cb88 5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d
GET /common/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
cache-control: max-age=253
expires: Sat, 04 May 2024 04:47:16 GMT
date: Sat, 04 May 2024 04:43:03 GMT
akamai-grn: 0.df4c2417.1714797783.1be4fe19
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png | 101.33.26.200 | 200 OK | 2.9 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png IP101.33.26.200:443
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash9be2c56c1a42fab7e2f5b764573dea4d 16f58f9b1f5fd465d3a8bc765b972eadb5166f24 cc8830f258c471b9cb15d69cda554d5181bd680996dd0041e3b9986b3b0769bf
GET /oversea_web/static/images/footer/footer-fb-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 2899
accept-ranges: bytes
x-nws-log-uuid: 1624777190973155273
server: Lego Server
date: Sat, 04 May 2024 04:42:54 GMT
x-cache-lookup: Cache Hit
x-serverip: 101.33.26.200
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/2.png | 104.21.42.189 | 200 OK | 39 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/lenzzspin/shop/2.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash937a0a32b924e638a4b9eb71b4826fad f5cbeae0f7a4d7c23acd9cba2206020dd6876959 1acb8a42c7dc664ee725c86b27ac36d46b5507c756f70f4863ff1c51f88f951f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/lenzzspin/shop/2.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:43:01 GMT
Content-Type: image/png
Content-Length: 38773
Connection: keep-alive
Last-Modified: Sat, 23 Mar 2024 08:31:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mb1V6Tbs0Iuptwf%2Fth20I7YgXPleQyRtkPQsN5jnwM8%2FdUUB7hwZq78Owrssd%2FvQFwruCLw1MQl7x7%2BrMzilT%2B%2FVzT%2B5L5qMKmALJhwzx4Zqf0vtak5jB4DBitH0kbM6k1jTZNavh%2FCq3mNM9nDoIjE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3ce69ce0b59-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.87y.rgrgfsdsdsfdfgvb.my.id/img/oke.png | 104.21.42.189 | 200 OK | 8.5 kB |
URL GET HTTP/1.1www.87y.rgrgfsdsdsfdfgvb.my.id/img/oke.png IP104.21.42.189:80
Requested byhttp://www.87y.rgrgfsdsdsfdfgvb.my.id/
File typePNG image data, 135 x 130, 8-bit colormap, non-interlaced Hashcae05dec0e4a62064a045e7463776a9c 4ff3d584bbabee29bc679ef628ed9b24260a2232 20acda07bbb9c6b7f73d0503c6b9e5b0ad48dbbd6d85b021c3c8f3d7915ca146
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/oke.png HTTP/1.1
Host: www.87y.rgrgfsdsdsfdfgvb.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.87y.rgrgfsdsdsfdfgvb.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:42:59 GMT
Content-Type: image/png
Content-Length: 8486
Connection: keep-alive
Last-Modified: Sat, 09 Mar 2024 02:47:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nf2eI6G%2FDEJkrsPeGVJiMml8zd0PA%2B6l1%2FfmpPnQmeUFiwMlvy7sZCdwT51J5QgY5DtKo5kUwXS3GLTUOQQLxKGwrt9lU%2BaugRBf%2BlnQpC8i4iXf%2FegwpNDTWFQlDEQQt1i5w2dcfLuUEPhL4WgJaig%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87e5d3c628180b45-OSL
alt-svc: h2=":443"; ma=60
|
|