200 OK 17 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, CR line terminators
Hash a4b55c9fc578c84a278f674571181154
f55941abca63eba0f699e5f685d16d105c43ca21
284f05131bba0b036ea5c1f6cd7de75194464957083908c294f73d9354d00575
Analyzer Verdict Alert openphish WhatsApp
GET / HTTP/1.1
Host: mail.bk8.bxka3g.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 00:08:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9PaLZLslV6MH6I38%2F4bqLfMKlS7%2FKvNcZAjZ4R8J8Y4oAslSpdVv48Gi%2BP23cbjBhCfXkjjCtaWk94TdlSgrW7%2B9RggOYmBjvgQPcSRpAXKJ2e01Qi1H66R9LcwVOt4UF8dLOvasLM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d2c6c370cf31c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 975291
expires: Sun, 26 May 2024 00:08:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5TwOW7%2B32iqHdPCejKmGQsliPvYRtliJ57PxkHi3G9eHGarYuxPYfrnjrt%2BIHicjn%2BYhiPUBtDiXRVwtFsj%2FDDcAjmM1GOrVWzd4QLq4GE8V2vvnLtqx3%2FDQfuYYEnkE2NSajO6J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c6c3aad7ab4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css
200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7da92cd266069217c0f8eb0098c5193d
a77355f299ef7098a8599b591eece56246fd603c
6daf416f915e77243b8b68baada9eae0fff34cffb447300f114757c9b488a704
GET /ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: text/css; charset=utf-8
content-length: 5630
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-10ad7"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 29053477
expires: Sun, 26 May 2024 00:08:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uYq8%2F0Sk2SLt%2BHFRDbYj9C1plQY%2BYXsLCs0AuDlqmuq54%2F5qNsZy22%2B9hFr8t2Nt5C2hgqD4R2YRuCUOpPabP1gVA38UtVOmvWJx0FNPiArX5vkLcnX1nU%2F30j42o4WgluwSDuO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c6c3abd7cb4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/js-base64@3.7.1/base64.min.js
200 OK 2.2 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/js-base64@3.7.1/base64.min.js
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type ASCII text, with very long lines (4800)
Hash a6b970a847a3469ad0ff8a47981379cf
230d46458f8b563201fffa060946b7528baae8d4
4fae6b0eb07e3fbf137e7338ed11f8f3649723c71da033e02d86aabadbbc09fb
GET /npm/js-base64@3.7.1/base64.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.7.1
x-jsd-version-type: version
etag: W/"1403-Iw1GRY+LVjIB//oGCUa3Uouq6NQ"
content-encoding: br
accept-ranges: bytes
date: Tue, 06 Jun 2023 00:08:46 GMT
age: 7124929
x-served-by: cache-fra-eddf8230113-FRA, cache-bma1680-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2178
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/moment.js/2.13.0/moment.min.js
200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/moment.js/2.13.0/moment.min.js
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (32010)
Hash 03c1d3ad0acf482f87368e3ea7af14c2
a8ca7eea2616fa92e2e85ba6291af6ea012fd190
4e411c99fe4a486db34e801a53392ae86f8659eccc438944b5a062c9aaba25be
GET /ajax/libs/moment.js/2.13.0/moment.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 13886
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-b635"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7799846
expires: Sun, 26 May 2024 00:08:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GzrF%2F9N8q1QbkPTIOOGVDCPjSlzH60HTVbuZJ46YaZv%2BU1WJL%2BwYQDGbZA%2F2VWMRrDAZ5789yt4fNjG1Ws9A%2FbTOiaAP4qYDwpisp1yztDC1dcquK4ZuGHRWSM1MDWG699AxrkFk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c6c3b991fb511-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (32180)
Hash 32015dd42e9582a80a84736f5d9a44d7
41b4bfbaa96be6d1440db6e78004ade1c134e276
8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 10:56:24 GMT
expires: Sat, 01 Jun 2024 10:56:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 306742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mail.bk8.bxka3g.my.id/bagas/bagas.css
200 OK 1.1 kB URL GET HTTP/1.1 mail.bk8.bxka3g.my.id/bagas/bagas.css
IP
Requested by http://mail.bk8.bxka3g.my.id/
File type ASCII text, with CRLF line terminators
Hash ae8f5eac80c514b6ccffce75de1d2d70
eff4b0347b7c8ea58833f35c07e177f80fd28ad2
a9510c5b947eedfa3d84fef078a623ebb72cd26a8acf9855a15521dffc430d62
Analyzer Verdict Alert openphish WhatsApp
GET /bagas/bagas.css HTTP/1.1
Host: mail.bk8.bxka3g.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 00:08:46 GMT
Content-Type: text/css
Content-Length: 1057
Connection: keep-alive
cache-control: public, max-age=604800
expires: Tue, 13 Jun 2023 00:08:46 GMT
last-modified: Thu, 13 Oct 2022 10:52:10 GMT
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k6i5xnHDwRu172ySpGR%2FGT6wAkOiUVsNnz9SOpLCAnfeMz1726XWuhp0QUZDzFOfPVhNZHqaRx%2FHfYq%2FoYfnP0z0VeDc4%2BiD9HRG7z9HtR1%2B8JqH67dPOE25WC%2FiT4eIxn7A2ZP65Mw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d2c6c3a8e6a1c06-OSL
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
1.5 kB URL ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash a62d9fa885a8f3f13c3713f95dfc40b7
0b782ea12896b822346c6a11c77b96905c7a7e32
a9105ad3366b7544187866ddf6cbadf845599f60240dc83edd2c68c28c7003e5
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 00:08:46 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "FA26270DFEE56F6D46AB2FF7AFA4C6CBF0EAE3E6"
Expires: Tue, 06 Jun 2023 10:00:00 GMT
Last-Modified: Mon, 05 Jun 2023 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3207
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d2c6c3cce5bb51b-OSL
code.jquery.com/jquery-1.10.2.min.js
200 OK 33 kB URL GET HTTP/2 code.jquery.com/jquery-1.10.2.min.js
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (32072)
Hash 628072e7212db1e8cdacb22b21752cda
0511abe9863c2ea7084efa7e24d1d86c5b3974f1
0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-encoding: gzip
content-length: 32788
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-16bb3"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686010126.dop024.sk1.t,1686010126.cds024.sk1.hn,1686010126.cds243.sk1.c
X-Firefox-Spdy: h2
l.top4top.io/p_2197nn5mt1.jpg
200 OK 54 kB URL GET HTTP/2 l.top4top.io/p_2197nn5mt1.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x727, components 3\012- data
Hash c7c1a6cb29cba2d0626cb7f0c5cff812
89fe5b1148af9e16d956e21ee6b4c89b8f47a1ae
c14966678f9dea58555b81dbfc9c1df0247d965ac044c02a9071a54c9e877df7
GET /p_2197nn5mt1.jpg HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: image/jpeg
content-length: 53946
set-cookie: klj_40d147_downloads=py0in; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:26 GMT
last-modified: Thu, 06 Jan 2022 22:22:05 GMT
content-disposition: inline; filename="c715342f039c29278d79494c28f93ff8.jpg"
etag: "61d76b8d-d2ba"
expires: Tue, 06 Jun 2023 02:08:46 GMT
cache-control: max-age=7200
x-file-id: x43577375x
accept-ranges: bytes
X-Firefox-Spdy: h2
l.top4top.io/p_23236lcqk0.jpg
404 Not Found 12 kB URL GET HTTP/2 l.top4top.io/p_23236lcqk0.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type PNG image data, 220 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 14b4bdcb51634262747a06a1c6964d7e
3b8339f20d18eeacce290b747a1d7f9e036c3a2f
4762c5ee7a013eef618400c83e3ca41db1589b40ee2cd80007c819570ae6d63d
GET /p_23236lcqk0.jpg HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: image/jpeg
content-length: 12500
set-cookie: sid=4acViKiUyclefs6i69qp2kLzunc; expires=Tue, 06-Jun-2023 06:27:09 GMT; path=/
expires: Tue, 06 Jun 2023 06:27:09 GMT
cache-control: public, maxage=172800
content-disposition: inline ; filename="not_exists.jpg"
etag: "5742048c-30d4"
X-Firefox-Spdy: h2
k.top4top.io/p_2197tbf240.jpg
404 Not Found 12 kB URL GET HTTP/2 k.top4top.io/p_2197tbf240.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type PNG image data, 220 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 14b4bdcb51634262747a06a1c6964d7e
3b8339f20d18eeacce290b747a1d7f9e036c3a2f
4762c5ee7a013eef618400c83e3ca41db1589b40ee2cd80007c819570ae6d63d
GET /p_2197tbf240.jpg HTTP/1.1
Host: k.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: image/jpeg
content-length: 12500
set-cookie: sid=C7TMiKFiM9OIfGpH6d6LhwELhwd; expires=Wed, 07-Jun-2023 14:52:59 GMT; path=/
expires: Wed, 07 Jun 2023 14:52:59 GMT
cache-control: public, maxage=172800
content-disposition: inline ; filename="not_exists.jpg"
etag: "5742048c-30d4"
X-Firefox-Spdy: h2
c.top4top.io/p_2197794660.jpeg
200 OK 24 kB URL GET HTTP/2 c.top4top.io/p_2197794660.jpeg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3\012- data
Hash e5ec0b185bd00d2d24c7b517ba9c2fd5
9e8e2b0d187bc85a2c54a0413510c86ff2e5ab87
73b400d3d6f68820750229dc481e1d8555369666eef92d657fa35dfe16f3feba
GET /p_2197794660.jpeg HTTP/1.1
Host: c.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/jpeg
content-length: 24059
set-cookie: klj_40d147_downloads=py0l2; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:27 GMT
last-modified: Thu, 06 Jan 2022 22:25:48 GMT
content-disposition: inline; filename="images%20(13).jpeg"
etag: "61d76c6c-5dfb"
expires: Tue, 06 Jun 2023 02:08:47 GMT
cache-control: max-age=7200
x-file-id: x43577462x
accept-ranges: bytes
X-Firefox-Spdy: h2
e.top4top.io/p_2197ai00b2.jpeg
200 OK 29 kB URL GET HTTP/2 e.top4top.io/p_2197ai00b2.jpeg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3\012- data
Hash 021a4abd53097ad46f52f099c77175a8
d8dad1eeb33f996de81509bd90344f6c02b61218
0d80bb9904d666b7edb1243aef65d680f7143eae0efd37dc30ae25fe2c0b0dcb
GET /p_2197ai00b2.jpeg HTTP/1.1
Host: e.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/jpeg
content-length: 29361
set-cookie: klj_40d147_downloads=py0l4; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:27 GMT
last-modified: Thu, 06 Jan 2022 22:25:48 GMT
content-disposition: inline; filename="images%20(12).jpeg"
etag: "61d76c6c-72b1"
expires: Tue, 06 Jun 2023 02:08:47 GMT
cache-control: max-age=7200
x-file-id: x43577464x
accept-ranges: bytes
X-Firefox-Spdy: h2
b.top4top.io/p_2197hs5263.jpg
200 OK 84 kB URL GET HTTP/2 b.top4top.io/p_2197hs5263.jpg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 660x660, components 3\012- data
Hash 6407f58cd47d850378bc3046410d4436
bd78c13ead8194d633ac5365b459793280cac3d6
1ab7e0ed0292218d4db8f5b269d1d3b6c788afa33ab7ff5ecca83828c0774439
GET /p_2197hs5263.jpg HTTP/1.1
Host: b.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/jpeg
content-length: 84088
set-cookie: klj_40d147_downloads=py0ip; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:27 GMT
last-modified: Thu, 06 Jan 2022 22:22:05 GMT
content-disposition: inline; filename="97a3d063dfa626e50124f7af1c23c36c.jpg"
etag: "61d76b8d-14878"
expires: Tue, 06 Jun 2023 02:08:47 GMT
cache-control: max-age=7200
x-file-id: x43577377x
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
f.top4top.io/p_2199rx7jk3.png
200 OK 152 kB URL GET HTTP/2 f.top4top.io/p_2199rx7jk3.png
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced\012- data
Size 152 kB (152291 bytes)
Hash 188a278629872508123e7bf25a4e4ae9
468d1d4a68a6ed6dad42f5470ae1d22fa6c032b9
d15c880b55b3ed610b5af0bddb63b50e386da5d32658e069dac8d8c512f801e8
GET /p_2199rx7jk3.png HTTP/1.1
Host: f.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/png
content-length: 152291
set-cookie: klj_40d147_downloads=pylhh; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:27 GMT
last-modified: Sat, 08 Jan 2022 07:46:26 GMT
content-disposition: inline; filename="580b57fcd9996e24bc43c543.png"
etag: "61d94152-252e3"
expires: Tue, 06 Jun 2023 02:08:47 GMT
cache-control: max-age=7200
x-file-id: x43604549x
accept-ranges: bytes
X-Firefox-Spdy: h2
d.top4top.io/p_2197lapmm1.jpeg
200 OK 36 kB URL GET HTTP/2 d.top4top.io/p_2197lapmm1.jpeg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subject*.top4top.co
FingerprintC0:8C:41:80:4F:97:CD:08:0A:DA:AB:5F:53:B1:2E:14:8E:97:DD:10
ValidityThu, 01 Jun 2023 00:05:01 GMT - Wed, 30 Aug 2023 00:05:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3\012- data
Hash 87c653ac929b6455a15d795dbe3a7162
c97c6fb94ce89c9b8408ac058780a0af1584446a
9644f2df3d115d947379716260dd67763d231e6f0967f950639c3119490c9f67
GET /p_2197lapmm1.jpeg HTTP/1.1
Host: d.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/jpeg
content-length: 36443
set-cookie: klj_40d147_downloads=py0l3; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Tue, 06 Jun 2023 23:45:27 GMT
last-modified: Thu, 06 Jan 2022 22:25:48 GMT
content-disposition: inline; filename="images%20(14).jpeg"
etag: "61d76c6c-8e5b"
expires: Tue, 06 Jun 2023 02:08:47 GMT
cache-control: max-age=7200
x-file-id: x43577463x
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.1.2/fonts/Material-Design-Iconic-Font.woff2?v=2.1.0
200 OK 39 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.1.2/fonts/Material-Design-Iconic-Font.woff2?v=2.1.0
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 38812, version 1.0\012- data
Hash 3a7cbc4317a2f33f497608a07e633f7c
5004b9e9405fe487b7cc55d3ab271ac70b3dd18b
8de03245050e0fb0c9eb37d8d5525985b04711c40a53c3fcf55c3f07a9042559
GET /ajax/libs/material-design-iconic-font/2.1.2/fonts/Material-Design-Iconic-Font.woff2?v=2.1.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mail.bk8.bxka3g.my.id
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 38812
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03ed9-979c"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1492825
expires: Sun, 26 May 2024 00:08:47 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DJcJqvUAMgLqSIYLtr336o51CC%2F%2BzpbTnoNm68iSFYaeVMJeWyFV%2FbgkwcUgSJRSKpoCfJgL1kDojxp6xC4KKmBl4N2Us%2BHGOcW6r4UqhDnazKya9lTS2j8Wm%2BPA%2FAXMaUPj4YNN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c6c3ffc4eb511-OSL
alt-svc: h3=":443"; ma=86400
mail.bk8.bxka3g.my.id/assets/login/fb-login.png
200 OK 31 kB URL GET HTTP/1.1 mail.bk8.bxka3g.my.id/assets/login/fb-login.png
IP
Requested by http://mail.bk8.bxka3g.my.id/
File type PNG image data, 1652 x 411, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ae3b6bc1ebde6c97f1cf4eff5c0f61f
ac60fb3fc5f5a96d30f133f1d60ff116ac329b86
feda321bb681dc8593f1cc761778fe3b2ba6447399d3a152cf3c65917df6b147
Analyzer Verdict Alert openphish WhatsApp
GET /assets/login/fb-login.png HTTP/1.1
Host: mail.bk8.bxka3g.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 00:08:47 GMT
Content-Type: image/png
Content-Length: 31218
Connection: keep-alive
cache-control: public, max-age=604800
expires: Tue, 13 Jun 2023 00:08:47 GMT
last-modified: Sun, 20 Feb 2022 23:47:02 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jrr833XnwJIr5wEXL4wHQiKGlB3QU%2BK1ZGWrB6H8bCOO0ZMeK%2FwEfCqByN4fS%2BrJ519guKiP0Tfj%2Fkexw%2FLqnitoKc8TRWDOTEH9WxeDVCqir8c4a0A1o17WbL1nzqu2VzMHtIfHpmE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d2c6c3d0f421c06-OSL
alt-svc: h2=":443"; ma=60
cloud.githubusercontent.com/assets/398893/15136779/4e765036-1639-11e6-9201-67e728e86f39.jpg
200 OK 225 kB URL GET HTTP/2 cloud.githubusercontent.com/assets/398893/15136779/4e765036-1639-11e6-9201-67e728e86f39.jpg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerDigiCert Inc
Subject*.github.io
FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 550x999, components 3\012- data
Size 225 kB (224922 bytes)
Hash f9cebf245b82051cf1e25a5c190de77d
40b1b150968508dfd34d94a69feb9f5e7eb653bf
a7c76505efe4da19696e3365b1a211614d3a0d80abea92539d316ea2df2ccea3
GET /assets/398893/15136779/4e765036-1639-11e6-9201-67e728e86f39.jpg HTTP/1.1
Host: cloud.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 10 May 2016 05:56:48 GMT
etag: "f9cebf245b82051cf1e25a5c190de77d"
cache-control: max-age=2592000
x-amz-version-id: null
content-type: image/jpeg
accept-ranges: bytes
date: Tue, 06 Jun 2023 00:08:47 GMT
via: 1.1 varnish
age: 2394979
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686010127.389589,VS0,VE1
x-fastly-request-id: 4d2d2ccf8025efe4d2f8c6b2b15e3c0bc5b39770
server: GitHub Cloud
timing-allow-origin: https://github.com
content-length: 224922
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash e7e560a1588ea25ad25242200936b149
946009b90527a122f590495540ca0d02f29945ec
cc56fa95fb4433116e1625385459b3dbab6ee45fd47a0c51789d9e50dc4e01e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash e7e560a1588ea25ad25242200936b149
946009b90527a122f590495540ca0d02f29945ec
cc56fa95fb4433116e1625385459b3dbab6ee45fd47a0c51789d9e50dc4e01e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rawcdn.githack.com/AlexHostX/all.asset/38984972fb20a70d711e86ac3e6f19e60ea8adc3/AlexHostWA.ttf
404 Not Found 14 B URL GET HTTP/3 rawcdn.githack.com/AlexHostX/all.asset/38984972fb20a70d711e86ac3e6f19e60ea8adc3/AlexHostWA.ttf
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA2:93:5E:50:D6:C1:95:57:5F:F0:4C:CC:96:80:1B:BE:6F:C1:B3:3A
ValidityWed, 10 May 2023 04:16:17 GMT - Tue, 08 Aug 2023 04:16:16 GMT
File type ASCII text, with no line terminators
Hash 3be7b8b182ccd96e48989b4e57311193
78fb38f212fa49029aff24c669a39648d9b4e68b
d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed
GET /AlexHostX/all.asset/38984972fb20a70d711e86ac3e6f19e60ea8adc3/AlexHostWA.ttf HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mail.bk8.bxka3g.my.id
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 06 Jun 2023 00:08:47 GMT
content-length: 14
x-content-type-options: nosniff
x-github-request-id: B3FA:11A71:4019C05:42966C9:647E7834
via: 1.1 varnish
x-served-by: cache-hel1410033-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1686009909.130468,VS0,VE166
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: 47381f69611a37c84202dafcb59a1a2d925e2586
source-age: 0
cache-control: max-age=300, public
x-githack-cache-status: HIT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wkWV8TL9ehIGm6zB%2FDdrstqHayCd%2F65b6qssN3BuV4xJboRUxrKAi45Pv%2BFmUzAiWh13%2Blf8bADhCQZ5X96jG7myibWKV6IgTR10o0sywmy662%2BE2eZVtilcPS%2FALI63RDWDUKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c6c4099657572-LHR
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mail.bk8.bxka3g.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 07:44:41 GMT
expires: Sun, 02 Jun 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 231846
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js
200 OK 26 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
GET /bootstrap/3.3.5/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 718, 718
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-04-23 06:48:47
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 39b7a4107ac99785daf3883d73227d5f
cdn-cache: HIT
cf-cache-status: HIT
age: 2584431
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7d2c6c3b8e7cb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash e7e560a1588ea25ad25242200936b149
946009b90527a122f590495540ca0d02f29945ec
cc56fa95fb4433116e1625385459b3dbab6ee45fd47a0c51789d9e50dc4e01e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 00:08:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.starratings.com.au/assets/img/loading.gif
200 OK 81 kB URL GET HTTP/2 www.starratings.com.au/assets/img/loading.gif
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subjectstarratings.com.au
Fingerprint0B:E4:F4:61:32:49:7C:18:F7:BB:E0:FE:C4:25:9A:1C:13:0C:C2:45
ValidityThu, 13 Apr 2023 02:51:44 GMT - Wed, 12 Jul 2023 02:51:43 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash b8a9081b653f8877c48920a27bf00b88
d86943a9fedc2de088673f1c46e82918482c788b
0056d4572becb0fc7c6b497cff821e8f4e98ba5ed4f9fbb69ccdd60247ef091c
GET /assets/img/loading.gif HTTP/1.1
Host: www.starratings.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:47 GMT
content-type: image/gif
content-length: 80553
last-modified: Thu, 30 Dec 2021 07:01:24 GMT
etag: "61cd5944-13aa9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000;
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Yantramanav&display=swap
200 OK 1.2 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Yantramanav&display=swap
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (1177), with no line terminators
Hash 47c285efc3e5add2ddc9a7c3b0f65c9b
1916aa07e2b53969695b38679310e9237ff7452a
4bd54ca152553e110e985427c43627708bcd82d2b7dce6459fc07169ebf23de6
GET /css2?family=Yantramanav&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Jun 2023 00:08:46 GMT
date: Tue, 06 Jun 2023 00:08:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700,300
200 OK 6.4 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700,300
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (6530), with no line terminators
Hash 9b55b51caebe742936e81a05c87129d6
9c09adf793b625f14d06e44c538cc800912fc6c1
195246f7de49c3922daaf4ff0d5959e0e9e575ed28772bb497327465830f2ad0
GET /css?family=Roboto:400,700,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Jun 2023 00:08:46 GMT
date: Tue, 06 Jun 2023 00:08:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rawcdn.githack.com/AlexHostX/protect/a64076479559076b6e31356a0fb6188d291204ce/watermark.css
200 OK 105 B URL GET HTTP/2 rawcdn.githack.com/AlexHostX/protect/a64076479559076b6e31356a0fb6188d291204ce/watermark.css
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintA2:93:5E:50:D6:C1:95:57:5F:F0:4C:CC:96:80:1B:BE:6F:C1:B3:3A
ValidityWed, 10 May 2023 04:16:17 GMT - Tue, 08 Aug 2023 04:16:16 GMT
File type ASCII text, with no line terminators
Hash 00d8a72bf9cf0c283061794643d719df
8d68e69e7b666196f69959c63b11e88b1dbf43cf
1e65e9d4b954112c3c5068d082a388b7f93ba356df694fb60896215cc670cee0
GET /AlexHostX/protect/a64076479559076b6e31356a0fb6188d291204ce/watermark.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: text/css; charset=utf-8
etag: W/"8cbc601be6a6a4a8de11e874a08f4635bb2103954e29be8f44a2287251cf89b8"
x-content-type-options: nosniff
x-github-request-id: 5B3C:4976:637B93:6ABF09:62C0A41D
via: 1.1 varnish
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1656792093.487857,VS0,VE218
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: 7d426eef06f3d9def44ebd751dc65235333b1c3c
source-age: 0
expires: Sat, 05 Aug 2023 05:59:43 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: HIT
cf-cache-status: HIT
age: 600618
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=txY8iOfrb1ioTubuMh%2BzIocd%2FtUodjd1D1uUJhF%2FhxPEGzKX1r0Y5O9w%2BJfBpR5mJzJSAb6JdvTJwFc376ipEatLY0FuwNZfTC9Mb3vc%2BHwvP8dZtOQIVPehiyuXKrP3S5aKwfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c6c3cdcf6dc21-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.postimg.cc/fbsjM6YY/ezgif-com-gif-maker-2.gif
200 OK 44 MB URL GET HTTP/2 i.postimg.cc/fbsjM6YY/ezgif-com-gif-maker-2.gif
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF7:9A:EC:C0:0E:AB:80:A9:55:8F:DF:97:AD:BB:4B:70:07:08:F0:F0
ValidityWed, 19 Apr 2023 13:39:30 GMT - Tue, 18 Jul 2023 13:39:29 GMT
Size 44 MB (44280683 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fbsjM6YY/ezgif-com-gif-maker-2.gif HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 06 Jun 2023 00:08:46 GMT
content-type: image/gif
content-length: 44280683
last-modified: Fri, 03 Jun 2022 11:16:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
a.top4top.io/p_2197hnply2.jpg
0 B URL GET a.top4top.io/p_2197hnply2.jpg
IP
Requested by http://mail.bk8.bxka3g.my.id/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p_2197hnply2.jpg HTTP/1.1
Host: a.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
assets.stickpng.com/images/580b57fcd9996e24bc43c543.png
403 Forbidden 0 B URL GET HTTP/2 assets.stickpng.com/images/580b57fcd9996e24bc43c543.png
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintAD:C1:76:6E:DC:5C:9B:77:1F:75:84:BE:02:F0:6C:DD:F1:9A:2D:A5
ValidityMon, 22 Aug 2022 00:00:00 GMT - Tue, 22 Aug 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/580b57fcd9996e24bc43c543.png HTTP/1.1
Host: assets.stickpng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 06 Jun 2023 00:08:48 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: AMK62KCD4M8XH997
x-amz-id-2: Y+914ChcxdQuhjSpexoNezIIECVHjTORZ3cDaMWbTbzCjC/jRwSI6pse/TbJvuuBzWKSkPV8aCE=
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5MCGzrHVJb32IMj9yZR4syxNR8zvEIkWiNmXdluiQjQqARpJScFGkb0fPjD58%2Ff9Z3g3z757T3zRIZ4tsaJws6hGtYAlHf1yolIXs%2FWQbjC7dgNpvcEVP3t9ZOKJxJVukThRxGXW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d2c6c443dfb386a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mail.bk8.bxka3g.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 03:11:48 GMT
expires: Sun, 02 Jun 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 248219
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.stickpng.com/images/580b57fcd9996e24bc43c543.png
403 Forbidden 0 B URL GET HTTP/2 assets.stickpng.com/images/580b57fcd9996e24bc43c543.png
IP
Requested by http://mail.bk8.bxka3g.my.id/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintAD:C1:76:6E:DC:5C:9B:77:1F:75:84:BE:02:F0:6C:DD:F1:9A:2D:A5
ValidityMon, 22 Aug 2022 00:00:00 GMT - Tue, 22 Aug 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/580b57fcd9996e24bc43c543.png HTTP/1.1
Host: assets.stickpng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mail.bk8.bxka3g.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 06 Jun 2023 00:08:48 GMT
content-type: text/html; charset=utf-8
x-amz-request-id: AMK95PFAT8SGVQ77
x-amz-id-2: O/+FNLwsR4oL9OJVrrEIeXE4pmQy9Hvc3HFb8yZkw763NLJbb+yhs62uOC7iKpQspdHych7Rd+g=
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFpt4NbdM0LIji6cDY2vJUzbSB1mQm%2B5K2UlL04dzfDcfdPXvqFEvT53%2BSlcEqGM6oa%2FSVEsQfh9ppQoyK4vPnroxUu1M%2BmDSwOhibf6fqLu%2FcLFICeUkedz6lo7NO8p%2FuuSYsXy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d2c6c443df1386a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.56.68
51.159.59.120
142.250.74.131
65.21.235.194
54.252.28.172
0.0.0.0