| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash189517abaffd3ad15fac051239960c9d 99019d46813ecf2b1215757ca1f05ac850b9f692 31daadeeb8828e5e01008ca5a4e7c5fba0acf5517903eafce413a10dcfe66fdb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "31DAADEEB8828E5E01008CA5A4E7C5FBA0ACF5517903EAFCE413A10DCFE66FDB"
Last-Modified: Wed, 21 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17821
Expires: Thu, 22 Aug 2024 03:52:44 GMT
Date: Wed, 21 Aug 2024 22:55:43 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash50a89b39234eb6cc4eda70d7e27be17f 306340eb26b6817fd8851a085563a88eed7e2b6b eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10420
Expires: Thu, 22 Aug 2024 01:49:23 GMT
Date: Wed, 21 Aug 2024 22:55:43 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash5d0dd93e6a07253100201a9c8a3e15a5 30adbd52887825ae2779d7fb12276bed8b1d8178 07bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16140
Expires: Thu, 22 Aug 2024 03:24:44 GMT
Date: Wed, 21 Aug 2024 22:55:44 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashfa24406b28144f03c66e0892b293241b 64ec25a3e583dcd2ea13558272ac7badebbfc3d6 8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7625
Expires: Thu, 22 Aug 2024 01:02:49 GMT
Date: Wed, 21 Aug 2024 22:55:44 GMT
Connection: keep-alive
|
|
| ficjnc8.aweys.net/bagas/img/logml.png | 104.21.13.40 | 200 OK | 8.7 kB |
URL GET HTTP/3ficjnc8.aweys.net/bagas/img/logml.png IP 104.21.13.40:443
Requested byhttps://ficjnc8.aweys.net/verify.php CertificateIssuerGoogle Trust Services Subjectaweys.net Fingerprint2B:B7:CB:C4:6F:45:55:A0:5B:C7:D5:F4:98:51:6C:AC:3C:D5:F6:78 ValidityThu, 25 Jul 2024 21:03:05 GMT - Wed, 23 Oct 2024 21:03:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3 Hash28beca2b81b8a40c2c9299364313252c 9d8c295a364879aed9d25e65fad8110157b292d1 0af316b96916fa4bedf03c1745306f11c98c6257f8feea643b1075a369623d00
GET /bagas/img/logml.png HTTP/1.1
Host: ficjnc8.aweys.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ficjnc8.aweys.net/verify.php
Cookie: PHPSESSID=66678b2688c82321694fdaf0a3dc158e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 22:55:45 GMT
content-type: image/png
content-length: 8662
cache-control: public, max-age=604800
expires: Tue, 27 Aug 2024 07:24:22 GMT
last-modified: Thu, 11 Jul 2024 12:25:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 142283
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E7BmIeq%2FhKXiR1G8gV7Xt2lZX0le5yILX8rIcThih9dm%2Fc0e6vbzxTfJ9IVPqICRJ%2BERaBnp253H0wj%2BSneqFZ7JjYhKuPo7%2BwaSlv5AsZ2M8QCNvIN5QgEQS6kUDeMd%2FdpEyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6e3662fa0d56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css | 151.101.65.229 | 200 OK | 25 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css IP 151.101.65.229:443
Requested byhttps://ficjnc8.aweys.net/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File typeUnicode text, UTF-8 text, with very long lines (65306) Hashabe91756d18b7cd60871a2f47c1e8192 7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d 7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b
GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ficjnc8.aweys.net
DNT: 1
Connection: keep-alive
Referer: https://ficjnc8.aweys.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0"
content-encoding: br
accept-ranges: bytes
date: Wed, 21 Aug 2024 22:55:45 GMT
age: 1967582
x-served-by: cache-fra-eddf8230097-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25360
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js | 151.101.65.229 | 200 OK | 24 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.65.229:443
Requested byhttps://ficjnc8.aweys.net/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe
GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ficjnc8.aweys.net
DNT: 1
Connection: keep-alive
Referer: https://ficjnc8.aweys.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Wed, 21 Aug 2024 22:55:45 GMT
age: 2496747
x-served-by: cache-fra-eddf8230080-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17129
Expires: Thu, 22 Aug 2024 03:41:15 GMT
Date: Wed, 21 Aug 2024 22:55:46 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17129
Expires: Thu, 22 Aug 2024 03:41:15 GMT
Date: Wed, 21 Aug 2024 22:55:46 GMT
Connection: keep-alive
|
|
| ficjnc8.aweys.net/verify.php | 104.21.13.40 | 200 OK | 8.3 kB |
URL User Request GET HTTP/2ficjnc8.aweys.net/verify.php IP 104.21.13.40:443
CertificateIssuerGoogle Trust Services Subjectaweys.net Fingerprint2B:B7:CB:C4:6F:45:55:A0:5B:C7:D5:F4:98:51:6C:AC:3C:D5:F6:78 ValidityThu, 25 Jul 2024 21:03:05 GMT - Wed, 23 Oct 2024 21:03:04 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash3bfd2412bef77e4d8200c1c5d75a7eea 4c56d0f42ff4750f480df3a0168210d46674ba41 920aff7593189ccaeb9341eec5ed66795765dca32b8256b29c3bc86158114061
Analyzer | Verdict | Alert | OpenPhish | phishing | Tencent |
GET /verify.php HTTP/1.1
Host: ficjnc8.aweys.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 22:55:44 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=66678b2688c82321694fdaf0a3dc158e; path=/; secure
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sklFC%2FvMnAqd81tGpuSG1k8wrCU7%2FYUFTvcHk2bN14DkpvZv3l%2F0IbGBJxq9ROkPnZ0N7gV9vLxvqCo2IIzA7Yr3BMcECHpQFe9J1U8E%2Fpwslt5y47L2l2iWXPkzXT6XdXAL8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6e365e2b31568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ficjnc8.aweys.net/assets/img/favcoda.png | 104.21.13.40 | 404 Not Found | 1.3 kB |
URL GET HTTP/3ficjnc8.aweys.net/assets/img/favcoda.png IP 104.21.13.40:443
Requested byhttps://ficjnc8.aweys.net/verify.php CertificateIssuerGoogle Trust Services Subjectaweys.net Fingerprint2B:B7:CB:C4:6F:45:55:A0:5B:C7:D5:F4:98:51:6C:AC:3C:D5:F6:78 ValidityThu, 25 Jul 2024 21:03:05 GMT - Wed, 23 Oct 2024 21:03:04 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /assets/img/favcoda.png HTTP/1.1
Host: ficjnc8.aweys.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ficjnc8.aweys.net/verify.php
Cookie: PHPSESSID=66678b2688c82321694fdaf0a3dc158e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 21 Aug 2024 22:55:46 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gGqrUylVSvqj7nn%2BFpSYBRAVF2oJ3ysVYre63OuHH4fcp4%2FaKujypklT5SjB7bAKC%2FqQ8c2k8WMJI0w4mPr5WVoKjJpcdG6%2BMTsfLq6xYSJ%2F1J0IBX%2FSwPRG97SS4XrJwMyoQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6e36651ba256c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.gifan.id/files/20240212_JwnekHYQWUIOEHNKLJSHouiwneuoikhwEW.css | 104.21.234.35 | 404 Not Found | 0 B |
URL GET HTTP/2api.gifan.id/files/20240212_JwnekHYQWUIOEHNKLJSHouiwneuoikhwEW.css IP 104.21.234.35:443
Requested byhttps://ficjnc8.aweys.net/verify.php CertificateIssuerGoogle Trust Services Subjectgifan.id Fingerprint26:C3:A0:AE:5E:A9:FB:F5:01:36:A1:0E:86:4A:A4:9D:40:FC:DB:9A ValidityMon, 22 Jul 2024 01:34:07 GMT - Sun, 20 Oct 2024 01:34:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/20240212_JwnekHYQWUIOEHNKLJSHouiwneuoikhwEW.css HTTP/1.1
Host: api.gifan.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ficjnc8.aweys.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 21 Aug 2024 22:55:45 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wNsGII0J7zryrvlZkMN1Ven1qluYlLBK5TnqYXv06Sm0P5LxSpb2i520qRVFfrhuCGncAFoW30zdqbIVb6pF6lm01o5gQDSK0JSYfj%2BUD%2FbVv8KdoOQ1e%2BmA5vQJzQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6e36636c73654d-LHR
content-encoding: br
X-Firefox-Spdy: h2
|
|