{"report_id":"560fda9e-f578-4c80-8855-6ca327c51a25","version":6,"status":"done","tags":[],"date":"2023-12-06T01:40:29Z","url":{"schema":"http","addr":"mail.bbtb.c505.net/","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"http","addr":"mail.bbtb.c505.net/","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"title":"Whatsapp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T08:54:07Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mail.bbtb.c505.net","ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":2118147,"sent_data":4730,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-12-05 05:09:58","alert_count":0,"request_count":1,"received_data":5373,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"filebagasarya.com","ip":{"addr":"172.67.195.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-07-04","domain_rank":0,"first_seen":"2023-07-05 07:22:39","last_seen":"2023-11-27 02:27:59","alert_count":0,"request_count":2,"received_data":41990,"sent_data":921,"comment":"","tags":null,"fingerprints":null},{"fqdn":"file.gifan.id","ip":{"addr":"104.21.234.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-05","domain_rank":0,"first_seen":"2022-05-27 01:39:42","last_seen":"2023-12-04 22:42:46","alert_count":0,"request_count":1,"received_data":655,"sent_data":335,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":3598,"first_seen":"2019-12-17 07:36:13","last_seen":"2023-12-05 05:36:28","alert_count":0,"request_count":5,"received_data":355661,"sent_data":2538,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-06T01:40:17Z","timestamp":1701826817,"ip_dst":{"addr":"Client IP","port":34388,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2023-12-06T01:40:17.884220+0000\",\"flow_id\":1892705399564074,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"188.114.97.1\",\"src_port\":443,\"dest_ip\":\"10.70.215.218\",\"dest_port\":34388,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"mail.bbtb.c505.net\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":854,\"bytes_toclient\":213,\"start\":\"2023-12-06T01:40:17.878378+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-06T01:40:17Z","timestamp":1701826817,"ip_dst":{"addr":"Client IP","port":34396,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2023-12-06T01:40:17.896035+0000\",\"flow_id\":275448349165925,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"188.114.97.1\",\"src_port\":443,\"dest_ip\":\"10.70.215.218\",\"dest_port\":34396,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"mail.bbtb.c505.net\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2023-12-06T01:40:17.887141+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"file.gifan.id/fontawesome.js","fqdn":"file.gifan.id","domain":"gifan.id","tld":"id"},"ip":{"addr":"104.21.234.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7653d4719abf98a98d6e9412e33976e6","sha1":"0b4414adc9da488b97830ce789a79994ba55aa23","sha256":"051afcaea280590a5c6a5c472ad0852783d794a8923c4d26e388656fc9dcd791","sha512":"1a7b9daa6b959399c91c2544a79f45676fbd7de04dba3ee53fd4c3c249609d8b9d1f047a69cf31b1f95d094f7ca44087dedfccb9ea193d93c2431e6e9871f380","ssdeep":"192:Tc6H6Kn0E9ZosvACp1mhWXAy1dxsFn7ZnPD8xIDz+mIjhwYXyl8XHDhVlzbC/:YwGCeh7hpgmIhwYXyl8XHv6","tlshash":"d932a4697694b1b246eb31a1d03f620ff27635262006d060e71ddde4ac7da6e9233f2d","size":11169,"data":"","first_seen":"2023-07-20T17:19:18Z","last_seen":"2024-08-21T08:31:58.929869Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/js/bagas.js","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-09-14T05:01:19.098132Z","times_seen":22073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f323bc8efe549dac09d924d081e6733d","sha1":"57d825a14fb072d060bd2abbb2937f8b4df8bdbc","sha256":"65f60c40854eed7f0e4787e9744e619e894a1d56a26f1f4a28a8e4e7dae40d18","sha512":"23c1bb53a6d1670a5c7c03cb6a49bc5af2546b2c60fcaf72ad57bf619294186dd1220c9b6202a553147319e15d7d9ef58ca2f7f26fcf91ab53a375c400fbc871","ssdeep":"192:+Oq4jaAaQrDFXxvhjD571PhH5AbOFilCX:R","tlshash":"10d1d008b2e73d89983324bad77fa4541e7d5a0f6446de00b50f5ac41f28329fc6b98d","size":6713,"data":"","first_seen":"2023-07-20T17:19:18Z","last_seen":"2024-08-21T08:31:58.942208Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.bbtb.c505.net/","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-06T01:40:17.878Z","timestamp":1701826817878,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=sIs9xDtwAKViv7iGV7HWdiK8SBPj%2BQpdNfJ63wx6%2FKjMIHC%2Fey5x2Dzbklikdb2kaBKd2K5NHVffrrSdiRhplXr8Xx4t28ZUqAkyJk1fcRm0n54SH2IKPuYwIOarNwXzk5cQBVs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8310d1c66f0356c3-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3644,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (325), with CRLF, LF line terminators","md5":"257a454249d83551c42b866074d8d7b8","sha1":"a7ce5c92be04bd9da0ae4f7efbea8b3419a2327f","sha256":"fd403f1caaca9a47c1b9842a876df604400b4f106c53f1b23cd40343c277cf84","sha512":"795f92253c0829b767e5729deba34217ea3e471f722347c4b23bba1be2163d971d50ff8b1070639497e4a0e314caf166bc7da40a0b183f3df4fd0b315ed110cd","ssdeep":"192:fZTYrjCCDfWrioc23iOq4jaAaQrDFXxvhjD571PhH5AbOFilC/:fZTYrpf8if23h","tlshash":"5ab2e050f0f51967842380e2eb7fa6172fe4e61baa4b4900769e1bd81f8bd55fd1b01c","first_seen":"2023-12-06T02:40:36Z","last_seen":"2023-12-06T02:40:53Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":7,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/css/style.css","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.299Z","timestamp":1701826818299,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/css/style.css HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: text/css\r\nContent-Length: 790\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 00:22:00 GMT\r\nlast-modified: Mon, 17 Apr 2023 17:32:27 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: HIT\r\nAge: 4692\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=RF4i3M6FvYHPPhnrsHVqa%2BNPsOQIZpY1Hg4uRb%2Flrrc8INEoYbP9H9aLXoZ5KCyxm624tw6FvIDNqyCIDz5Z1OKeri%2BmFIU%2FggIBlp2sVwMPJNA3oMXNPMdYtuVBuyMPuoa8vu8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8310d1c8bfaa56c3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":790,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cb0406facabf211736e6c205c2f12016","sha1":"7f1791f0433c297056a1b5013015d77162a843e8","sha256":"63522559221cb1217733189ab984dfaa362299c4d4c81eedc494a0306b65f6f0","sha512":"3ebfca1c2506c54124b8dc070bc2f7aa076b30fd955bc33e0d49a73ba581124eb9a3f9680d52ea205e0033b43f97e9c455076f2cb8ac5226d30cd8004c4acdb7","ssdeep":"","tlshash":"b1412f5917a90524697bc8407c128fc4a3acc8498d0ed67d59e720ac8ccd3ea79f3f9c","first_seen":"2023-04-30T20:18:55Z","last_seen":"2024-08-21T07:37:25.669603Z","times_seen":62,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.310Z","timestamp":1701826818310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4364\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-5cbb\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1115566\r\nexpires: Mon, 25 Nov 2024 01:40:12 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2F%2BxT0lwWaO9z7Ml2tettUbZNm80el18ZGgl2SKkrSOQYky0NLEoIxAKhtz4eTGvGB0ITQGtXVWxzvx2QZyt3h5y%2F%2BMiNMcJL8ci579mUUmzQ2dDpNaDvLX3d%2FAHq%2Fuu3Jam8%2BIyP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8310d1c8e9d256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4364,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23577)","md5":"04425bbdc6243fc6e54bf8984fe50330","sha1":"8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5","sha256":"541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd","sha512":"8bcf90cad84e6324247ba5db4ad8edf53e3240786133ef58f724d8d5f3b1a03430b10a4a304a48a12419f265689ad9d509ff4f06fa100e72a5d3a80638e0f5f5","ssdeep":"192:nqxrZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:Ws5yWeTUKb+KlkJ5de2UYmyTfhYUasT","tlshash":"c6b240f8e54d01d66731c48bff85b36862baf73dd5804d99f00f291c29d22a512c9bba","first_seen":"2023-04-05T06:51:49Z","last_seen":"2026-09-14T04:45:21.588984Z","times_seen":23340,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":10,"dns":1,"connect":2,"send":0,"wait":7,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filebagasarya.com/img/info/navbar.png","fqdn":"filebagasarya.com","domain":"filebagasarya.com","tld":"com"},"ip":{"addr":"172.67.195.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.326Z","timestamp":1701826818326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filebagasarya.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 31 Oct 2023 12:31:08 GMT","end":"Mon, 29 Jan 2024 12:31:07 GMT"},"fingerprint":{"sha1":"F0:8B:F1:70:76:A3:14:5A:6C:27:24:64:49:E8:8F:71:89:4C:AF:BF","sha256":"E7:E3:55:39:A3:85:98:42:EE:6C:D8:F5:64:DF:93:9A:E4:45:06:E7:18:87:72:9C:61:F3:F1:C0:95:78:EF:69"}}},"request":{"raw":"GET /img/info/navbar.png HTTP/1.1\r\nHost: filebagasarya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 8459\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 Dec 2023 01:57:44 GMT\r\nlast-modified: Mon, 06 Mar 2023 02:41:35 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 430948\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=c%2BILUjua26zqpJQ3rcijrZhUkQa%2FCGkN4%2BtjjbBonifcFDsUvSJsT9zvaaUlu7yt9rej3ZY7jT6EXSzzN4kK%2BD98Sw0%2BDSx3wcKn7XV2ZlM4uYLEZhUbtWJkF7ENPnFlVZCsbg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8310d1c91b0056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 904 x 339, 8-bit colormap, non-interlaced\\012- data","md5":"f29c416a7c6f18ba0c0deb4980763c9d","sha1":"56c7bfbf2c9a7a2be2e2214b0586c11af8e852bf","sha256":"7f37cb926c06378327ad2a753c7119291b2ead796a6f588a8374de651ec72a8c","sha512":"febc21f82d3583ba31d7ee4d85db3b68aece82c2caf8af9ff38c686d9347d6e36dc3f48cb6abc1c9c1c1972d48d0019d3666830615a2292bc8e0bd2676228bb3","ssdeep":"192:BURxuBIL/cIST/rFYrj91RUbOiNoRQeRsWtwgZz0lk:JBzIYFYrB1RUvWBsWug0k","tlshash":"5b029eacc1938a2ad69810fdfe8d6cdd11aa699b45f082c9da8db362386b1020026597","first_seen":"2023-04-30T20:18:55Z","last_seen":"2025-10-05T03:53:58.658952Z","times_seen":839,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":18,"dns":29,"connect":2,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filebagasarya.com/img/info/modelFb.png","fqdn":"filebagasarya.com","domain":"filebagasarya.com","tld":"com"},"ip":{"addr":"172.67.195.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.332Z","timestamp":1701826818332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filebagasarya.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 31 Oct 2023 12:31:08 GMT","end":"Mon, 29 Jan 2024 12:31:07 GMT"},"fingerprint":{"sha1":"F0:8B:F1:70:76:A3:14:5A:6C:27:24:64:49:E8:8F:71:89:4C:AF:BF","sha256":"E7:E3:55:39:A3:85:98:42:EE:6C:D8:F5:64:DF:93:9A:E4:45:06:E7:18:87:72:9C:61:F3:F1:C0:95:78:EF:69"}}},"request":{"raw":"GET /img/info/modelFb.png HTTP/1.1\r\nHost: filebagasarya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 31990\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 08 Dec 2023 01:57:44 GMT\r\nlast-modified: Mon, 06 Mar 2023 02:41:27 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 430948\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pA9XmW%2B1WuURyBZjUK%2BGMBOUv3tI6mGNPm7JbCO2Y5hAs0zXFijx7AHUhm%2F5cD4KSG5%2FdjrjzmFLSvfx0eQqiKO33BS6VopswrtLFEaUSbKyyLVU2Y%2F3mVAF8CC6dWx8c6LGZg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8310d1c91b0156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\\012- data","md5":"571fc0253c6f01c953d4274981fc9d66","sha1":"5331c3ae96ea4d421f8bde0d3e5565024c8c3abb","sha256":"d3a1d3bb7a7c79edc9a08de2369f4f7f201a0852bfaf5526716382fc7ad902a1","sha512":"9612940e95108bbdff8e7cb6898c0048db37125e1606946d5eb6df501f1aa908497814d6d65b7923d36ed9a4ccffd175abfa465e60259866c0bd745b37088387","ssdeep":"384:2p6tPdyYDfXQtmHlLFMRC5UiumIPVRX/HekTFcmSWTM6itvLOf6gfKT5w15d1/2+:2pXYDvlL9MtRP7qtYMZTOpKlw1P1Tr/9","tlshash":"98e2e1c379569cdc8598463e7a535ecbfd21fabe53a41cee3220c0386b611915cf2b89","first_seen":"2023-04-30T20:18:55Z","last_seen":"2024-08-21T08:31:58.930976Z","times_seen":198,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/css/asdhwalex.css","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.305Z","timestamp":1701826818305,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/css/asdhwalex.css HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: text/css\r\nContent-Length: 974\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Sun, 30 Apr 2023 21:07:22 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=yOhziYDJOnnG9Ny10XoEM2OifRLRXbbuHwaw87TZZ0QgimWhjcvyxbdTD4Kr5uYmLSVGg65GqAol2fLqe5cbZP6FylaYLD%2BpRPslKYlMqtFckdGhSy2kBYvWefv6vpeH42eA%2B%2Fk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8310d1c8b9c256aa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3cd849c1ee66bd52919d7563adf98da1","sha1":"ea62846a1a083db346e5fb1ee40d46ab6ef4a26a","sha256":"7893d2fb081ec23c9fae1f774745dab58213e6892b09087c37689700d56df6a4","sha512":"7f600a18b96fed954955528731acb60f0c3475eacd176e7dfca534b09d7dee39c50b38972998d853dfc29b9eb9aaa606f1828941abbbce99a9ac903e0c23edd2","ssdeep":"192:xCnkm+V+tlMu6/t8oikqQ6x5ISlormx9QXqhU8:xY","tlshash":"441292a9fa293201b533d6d87b582fd547b04045ea17022cbff0314973899b94eb6aed","first_seen":"2023-07-20T17:19:18Z","last_seen":"2024-08-21T07:37:25.67021Z","times_seen":56,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/css/bagas.css","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.306Z","timestamp":1701826818306,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/css/bagas.css HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: text/css\r\nContent-Length: 1057\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Thu, 13 Oct 2022 08:52:10 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=D%2FLAcb%2FOQJKFjj1TtbUOVWKwnnhr%2BjxjkS1vvgejNxi3QDvCkLD%2F9ZfSlpQZfluVHwi1seqlKe%2BBPsSpZAz9lvjAIzN9Pun1UAydup9F2N95O5%2FtA3jNEqDcey48LemduJFN0mI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8310d1c8b8dbb523-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1057,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae8f5eac80c514b6ccffce75de1d2d70","sha1":"eff4b0347b7c8ea58833f35c07e177f80fd28ad2","sha256":"a9510c5b947eedfa3d84fef078a623ebb72cd26a8acf9855a15521dffc430d62","sha512":"2d1c9a069e6a224b29bde1603c0de7ac8d8a133f49aea63826d893537a1bab165318daedf9eb74bcb021970b820d760e30d1e4c1ae9c88a57b3ca1917b6c6d0a","ssdeep":"96:8fFbBk5cYhvxBy+ADWxFwU0XhcFM69SYVnW6kgs7zv:8Y5xxU+GW8UAh8SYVW6Psfv","tlshash":"f3b19a19db140648f432d6b9af720a9be5661403534781eaffdc7280ef7592896b2fcc","first_seen":"2023-04-06T12:58:57Z","last_seen":"2026-07-31T22:30:56.144804Z","times_seen":495,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/js/bagas.js","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.338Z","timestamp":1701826818338,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/js/bagas.js HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 30960\r\nConnection: keep-alive\r\nlast-modified: Thu, 20 Apr 2023 09:35:14 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=6vyABbbl9Z%2BuGc0w5ltUh0IiC22c4z8MEIBNZlIvqbAA%2Fyrcbm5sp2x%2Brw2z6cD74ekDcQHAEEN%2FkKRJca3XX6U0E6GJO414%2F9ZlJqzZPimlbvW68S2GfvR%2BDLa%2Fn1GOQCYX16s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8310d1c8dbd31bfa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30960,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-09-14T05:01:19.098132Z","times_seen":22073,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":2,"connect":6,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"file.gifan.id/fontawesome.js","fqdn":"file.gifan.id","domain":"gifan.id","tld":"id"},"ip":{"addr":"104.21.234.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.694Z","timestamp":1701826818694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gifan.id","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 29 Nov 2023 03:44:14 GMT","end":"Tue, 27 Feb 2024 03:44:13 GMT"},"fingerprint":{"sha1":"05:08:56:A0:2C:BF:31:A0:4C:D0:5C:0F:18:A3:B9:7D:58:74:03:29","sha256":"84:6D:02:ED:69:DB:D2:72:FC:8C:F3:1F:61:69:6E:40:7C:12:8D:2F:7C:E6:10:77:62:9E:99:5B:6C:A9:C0:42"}}},"request":{"raw":"GET /fontawesome.js HTTP/1.1\r\nHost: file.gifan.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Wed, 06 Dec 2023 02:40:12 GMT\r\nLocation: https://file.gifan.id/fontawesome.js\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=yEf2M29gy0zHCvTn7aj7TnpDjk3y846svAlPeFQwaHPxwuyEu%2B77lJS5XSUTqZtHfzelXrvTQC86eIYzlSlDV8B%2BgQVPLylCLt0QMxgRpd2IlEL0WuocADtjRjXXHlUz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c94fc5d93b-HEL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T06:51:43.058537Z","times_seen":18456152,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":74,"dns":1,"connect":13,"send":0,"wait":27,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/5.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.322Z","timestamp":1701826818322,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/5.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 168607\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:34:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=XTglCli27apsVEMn0nB9dgmUBJyLuJtdilY78eBJVooIj2DqwTuT%2FJQyDL37kCgeXfhfGVddAA1lOY6Ymls%2FMdmEQdo2HDYQLhdRmCgR4kIEkYDbWGnmyhgOUGrTK4xe%2BYHl3Kw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c9291cb523-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1086, orientation=upper-left, width=1080], baseline, precision 8, 1080x1086, components 3\\012- data","md5":"bff9f29f72cfd4e77609b8aed20a5cf7","sha1":"1364883fd51628affa206ecbaa3ca936762add6d","sha256":"a1feace6f3795fb7be0104efad2862cc1dfc174eef297fc0c218fd15dc40bbe0","sha512":"c5f22ab8141090ccb6edb78791d2219261fabf5e90aa3f36d0c9539c6099ee3bc03f17af03152f63f9bfcbef4f2be0105b393d52c658717ccb469a12b31421c7","ssdeep":"3072:7GSuKSAufOAg5KRqmbyYtNlMJGJuUtawr5ig0fkiWVLTN//feNQthAOfR0:auPue5RmPtNlMwJXaU5Gfe35LnAOC","tlshash":"88f3122bcf98f09bc41133bb476a26e029113dd7b8dc27614a292f5ed60f14cab7645e","first_seen":"2023-11-23T22:06:46Z","last_seen":"2024-08-20T18:07:34.870989Z","times_seen":63,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":115,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/6.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.323Z","timestamp":1701826818323,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/6.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 221604\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:34:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vKQ5%2B1oDF%2FrsPaFTf8MoAdqYmlR6FwGyXQaCecIjqWEbbtM00RgCzF%2F3rKzAD1qDn4bZtIYiDPX7ASDAenCFv3mHLJeF6S8bXDkxf6cGB%2BhowosHh8xWnUZG2AsIXSWasidthOE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c92fc456c3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":221604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1096, orientation=upper-left, width=1080], baseline, precision 8, 1080x1096, components 3\\012- data","md5":"befdc9ff4159ab86d0ba8a61fe1ddd17","sha1":"9ec9c6e54c422480e1ee42b29a053fee8abf379a","sha256":"4d2b73a81cdc828f2734f5d9bd143de5ac176f7d99cc78b0fc41cb76d1efa63f","sha512":"a4a696d4ea2de5b49e96b073a160b8cb925468c4b85785dd9b145c0dac9cd7357e3e70d1a03fb2af9742f38e4e83a8939798f8d0e7536a1993cf4d125bc4558c","ssdeep":"6144:0Z1Ipbr9AejHNbsBro1W6diQz18kBp/K8q:0IXemhsJ6vLzKkBtQ","tlshash":"ad24222afb48664de6c2e335738d203793981e41f852c24d269f104eb4d9d1ecfadb5a","first_seen":"2023-11-23T22:06:45Z","last_seen":"2024-08-20T18:07:34.870263Z","times_seen":63,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":111,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/2.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.318Z","timestamp":1701826818318,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/2.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 366884\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:32:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=3Vcq8zQUf1FAO%2FR80l%2FqnfE0jX2wzweYSmds30azsJ%2FMY2A3umuHtASkEu%2BXBqeaolJoU9WQQdhEtHYrlB6FRSZzsRrM1%2FSovKYwda2EkqTQErJN1HNGXw6RddP7o7x9mpVHeW4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c929e356aa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":366884,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1091, orientation=upper-left, width=1080], baseline, precision 8, 1080x1091, components 3\\012- data","md5":"0a1f2f19c9662bdd1802981c4ad2019a","sha1":"04d82614687b477eeb7c250dcd09dcc5cec63767","sha256":"ebed843cee2927222f8c761c5ef33f1cc76aef1654bf4644c4bd41d84903b4a5","sha512":"beb3c2a37a98747ec039ef6be6af85b5ca44fbca6650fadb891f220047014ab75b873a8edd0656ac743d646152324d2f0562feff9f4c6dbd2dcf76d02942c9e0","ssdeep":"6144:V0f6g8N4rXkCFoGk+pytXGykHXu3TYhf5BYNFB0H+JRPWULz1GgzrLQN6En7YB8T:UJy4rXkT+pytXGykH+3TYl6FmeDPHxrK","tlshash":"3c7423c789b0ade4f075da70db4d49ea9739603a04ed734796902ac23ab03cdf58171d","first_seen":"2023-11-23T22:06:46Z","last_seen":"2024-08-20T18:07:34.872772Z","times_seen":63,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":113,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/3.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.320Z","timestamp":1701826818320,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/3.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 259544\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:33:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=dW7KB%2FgXFLo2y%2FWItwKWeS15JV4cJksYXlPOLiotbrC7aTCYQsOolbGClQNDsmrzCpKc5YkuErwAVnpeZEm34DIg%2FnDmvndRN2lfxfZBxYTgo2IbaJyaoPmlCZ6Ktq360M801os%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c92cf85691-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":259544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1095, orientation=upper-left, width=1080], baseline, precision 8, 1080x1095, components 3\\012- data","md5":"bfcbb109e43906bb3ec138a02b82df48","sha1":"57a218cda73760a59b6cc4fa80a25a780a1470d1","sha256":"363a8152f79e04f9856c4c6a7cd5312407a2d93ef47f7b3e0ae5ff1af030f8b7","sha512":"39146e008ff802c038ba938eba6b4ca0237b312a52d15b36f6418cef2e6cc98c88857f0f0132be1064b3bd0b40e0a285d84864d19257a14666fec76eb1e7428d","ssdeep":"6144:40wUu5BjZCKdiSKtuqgymw9BSpuSzb9Hz0NGq/o:Ru5BjZCMz+P9sZJHz0U","tlshash":"204423b9a8f412c9cf84d7ba247f53665723ab608110160917b24adfe5bd789bca1708","first_seen":"2023-11-23T22:06:45Z","last_seen":"2024-08-20T18:07:34.869563Z","times_seen":63,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":39,"dns":4,"connect":1,"send":0,"wait":120,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/4.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.321Z","timestamp":1701826818321,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/4.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 257795\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:33:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=49gCm%2F%2BMSCZZkcEmz9Wvrf9vbTbYzr%2BAmy%2BC65%2BA8ir73zJqODI%2BBd%2B5rRv7LbOoX7CGejwqvSQBRH7U%2BDs3TC0sznQwqoCqkwcTmLXeEvcIB16f5ypwscRNa7ffD8d0Xk6GS7E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c92bd5b500-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":257795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1089, orientation=upper-left, width=1080], baseline, precision 8, 1080x1089, components 3\\012- data","md5":"63691a57ee2f51b885bce86a6ecd6a66","sha1":"413cd56d0a80f92f5e7a0aa75217c91354d9e4bc","sha256":"8f181c2d1f248d867a66702f2638fcd6a4de1ff4996d3a970686b1e23529f6ae","sha512":"42685c46f2af9fdf67bbcfca26cc4838b81002d397057a0e42c1232f2c4932c8e3433cdc5642509dd3ce73b3c0f73f14437fd1beb44b78069a657479e765c822","ssdeep":"6144:/ppxIW00Yab0Nv5cBiV2l2iBVyoZ6elTA6AGS8UV1:BpyW00Yab0Nv5cCbiBxAGS8Ur","tlshash":"d544234a424c90ecea575b7da43b7fd62d316c56d31682b310ad317df403ae2908bbb6","first_seen":"2023-11-23T22:06:46Z","last_seen":"2024-08-20T18:07:34.873372Z","times_seen":63,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":38,"dns":4,"connect":1,"send":0,"wait":117,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/1.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.315Z","timestamp":1701826818315,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/1.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 465123\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:31:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vXoIG9byJbu3poDVhGWklAZVKdeny90vS6PlK87xvWq3fSC5iiidFLJcmjm4EgYmR542AlI17oXfpib7M8arQ36R9MnWA1dsWrjuC0y3NuhxKrXbSf3YXyiLleDqx13kqC%2FM9hU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1c96bf41bfa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":465123,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1091, orientation=upper-left, width=1080], baseline, precision 8, 1080x1091, components 3\\012- data","md5":"6de7d1ef202f2313021a8dc814aad18d","sha1":"979af4f0eac4ae064f62e10689b322746ba6dff1","sha256":"3379a69947bef0e1470d5c79f591e4ebed63949b2a9c05824326c5d7d966d6dd","sha512":"5984235771032775c61f97a04f4c48a5e1abc3752b37c79ba388b453bed63be5888e63400147434fbd4e16d00bf741ab3b2d07cfe7878bc1d7e5222ca918ead3","ssdeep":"12288:x/TQoENt5X5gaj1X8lsU2oNjejR7ckjyOFFZuA:5T0N35V+OU2aARhj/DZuA","tlshash":"9ea42323d3c4c358eb6cfb358295f504bd8729a8e2ef529b8a5bd03062d98761c25b19","first_seen":"2023-11-23T22:06:46Z","last_seen":"2024-08-20T18:07:34.871673Z","times_seen":62,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":118,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/bagas/img/7.jpg","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.325Z","timestamp":1701826818325,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bagas/img/7.jpg HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 330125\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Dec 2023 01:40:12 GMT\r\nlast-modified: Mon, 02 Oct 2023 21:34:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=t7ZDecBKhkEMkD7qKqUBuHd47Nh%2FWweQQ1jyVOOhuRKqzSDSyNd8ftR%2B7BpoUhNWWMEUAbqMOavyqM6P8a8WGpWF0AGSv8dvHu50LkcqqcjmzZBCCRLyqAapvJ%2BIl6jCWS49b4w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1ca195fb523-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1091, orientation=upper-left, width=1080], baseline, precision 8, 1080x1091, components 3\\012- data","md5":"61702d8c41806c8ab47ac74578415e05","sha1":"02bae73ba1a777fadac466ff87275ccb99b7539e","sha256":"c1db2b1b65dc76468fe7d51d76603b345794f2006d4691bbddf00376f731f380","sha512":"83275852d54dca634c58f3669a7814f3d4fb4ec5cfad561a831b4a7f10c9d2cebc28dbb63cc8fd899a7e72c5b58313c378ffaccb43054d7ee8cd80649acb638b","ssdeep":"6144:b458dm9paU9gPUrBzkaBzjZzafruzCfK0Spz7OfYkIlw8Nr6R5OYbepFAS:b45r94UxreaVdak0SV7OQkmvNKAY4Fj","tlshash":"986423a46fc35c76f0b522338afd2167988eb36ecb24105481143ca4e7bf9bd2965e17","first_seen":"2023-11-23T22:06:46Z","last_seen":"2024-08-20T18:07:34.874546Z","times_seen":63,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":118,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.846Z","timestamp":1701826818846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://mail.bbtb.c505.net/\r\nOrigin: http://mail.bbtb.c505.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 07 Feb 2022 20:11:39 GMT\r\netag: W/\"e8ee688b3310772b65f39c69b76f4720\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1fbc4ed92487877d10ad1d7d3fa8355e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR5-P6\r\nx-amz-cf-id: BKbEbC0oOr-3jKNI9qLTMkerl-pc4e3e1ke3L-0w_yxMLrnVMuzsmQ==\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=WGM3cqgZe2pyCf12uvDhCElMlDNqVbf3cw2j%2BPNXHKj2a4LqWWaYtufjUtczq2z2uoj00h43tOnm%2B%2FMXfp11ucwflsXKKHSGATq9YmgpMJHmbaQVY2soyIULXz%2BP0gONEJbieCK6gQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8310d1ccfe316548-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (608)","md5":"e8ee688b3310772b65f39c69b76f4720","sha1":"d57c6b7957aabb07762d473ea0b4bd3462f1175e","sha256":"0e751f751587617116614deaf11f087ea82f7644196c1d0571f71fd549b556b5","sha512":"e835bd4c513c9da8bc1a67f54c5dffe686ff01a49bd79529a4aad76ea64b52a3c7813e4e5f57d39285af28d46e9e87716530e722c5f4a011cec64ced3f237061","ssdeep":"","tlshash":"86012b5d05a9006541510f1138dbbb09bd0eb1677ca95ea2911b8d2c4cfa90773f5f09","first_seen":"2023-09-03T04:02:13Z","last_seen":"2026-08-30T19:02:57.072775Z","times_seen":186,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":109,"dns":9,"connect":29,"send":0,"wait":46,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.845Z","timestamp":1701826818845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://mail.bbtb.c505.net/\r\nOrigin: http://mail.bbtb.c505.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 07 Feb 2022 20:11:39 GMT\r\netag: W/\"c32e971c7d11c2407f847b61c515f1e2\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6c2060b8177554cc176ab1e04cbbfe1e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR5-P6\r\nx-amz-cf-id: Qq5hOx0CDlK2BzFAAxiE5C9pIeicLcMKuc10ofLX1IRdoslaMtkXmg==\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=KxTTEwufYpaURcyDeu%2BJ5L%2Fplu2QmgaiRKhrjnZbV%2BP2OHVCBX8Hm53kg6Rn2XEJa9%2BbX5Z04JUgaDVezRfjuVOhf5DMjjkSfXxMbRfGBqPNXvFrAyN5uZFwpBzolR2hJgnMkD6J6g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8310d1ccfe2e6548-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26019)","md5":"c32e971c7d11c2407f847b61c515f1e2","sha1":"85ac47a05e49f01cd62301ee121a2ca0dfdc0f83","sha256":"a7fb3a26d569bec0139baaae950e43c1e10b0afbcf6e9d7654aa1181a8319759","sha512":"92f354216a5dc0cdd1a753b8661885107f2f7d8c6c3f6baf919fd9933078cd7b03fc15ea616195030198e4db38595631e13de5e190424d88e05591d2fffa0848","ssdeep":"192:HP6olKb6u4byyUbjW9hgP0R5TJ5ALZTReUJHtXvXgLPCJV68uNpmnWt:ioPu4byydWP0R9AFReUrgP0NuNpmnWt","tlshash":"71c20669931da0e3a3ace847bb0172e8277577999a864c50f30b7c8c5dc365772e8f18","first_seen":"2023-05-26T12:28:31Z","last_seen":"2026-08-31T13:00:51.977049Z","times_seen":507,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":109,"dns":9,"connect":32,"send":0,"wait":50,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.0.0/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:19.183Z","timestamp":1701826819183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v6.0.0/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://mail.bbtb.c505.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 126828\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 07 Feb 2022 20:20:18 GMT\r\netag: \"d60a1707d7a69023a566fee0f0804a79\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 712d35d530e2ec4d6f746c10a7035922.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR5-P6\r\nx-amz-cf-id: th00bUh95EAnNF05znaRopaWyaln94x-_ksNw3aNkPCEWwzESkhawA==\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qJy8BZpMBXaQEZ1zPDrWKgDvcsNuwqTA%2FEL5Qe%2F3GthhT9%2B8YHGdLJ8koh3GSxEm8EGNmOryAsBznB14dVg0C9JdqSBtVq1Nd9rfnvUqBIJ7sTEob2xkKnDf7OUb4k1GbDNKkXndaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8310d1ce6f2e6548-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256\\012- data","md5":"d60a1707d7a69023a566fee0f0804a79","sha1":"00a6fae0a2d0d5ab1125bb3f7aec55ee8165607e","sha256":"28e42bc5102996223a42faf19a8abd7436644f3bc6d25a9f5de6add426ba138e","sha512":"c8037d9ef010650288115e180866f68c52c6abb221c7c073ad33e9b839e593273caa6f42e050484aa63313a65b9d2d11b37adcb6423bd1781b9ed959383077f8","ssdeep":"3072:G0IowkJlNCjKTbwyfQRnN3hUkrvtWygElPg8H3v:Thwgl8jKYFUKVrm8f","tlshash":"e5c3125c0337c52a34955b5860f3e91a4722fc5db3e271ecee6c5940bd2d08ca97f92a","first_seen":"2023-05-26T12:28:31Z","last_seen":"2026-08-30T19:02:57.027984Z","times_seen":206,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":51,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.bbtb.c505.net/favicon.ico","fqdn":"mail.bbtb.c505.net","domain":"c505.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:19.158Z","timestamp":1701826819158,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.bbtb.c505.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.bbtb.c505.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 06 Dec 2023 01:40:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: BYPASS\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=unhlvMpRG4fLqlxhqKB7J1WT08qexqYw7MGPgb9kzyc6bZ6DeVTKxOgFAtqUIFAK730InUnMyBTN3ktF5ojPdnZXo6gN8jeOKXXP6dy1qqrHYOWfojrMOS9fRDIfpsMgtKvGRA0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8310d1ce2c921bfa-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators","md5":"24b426fea67958554911ff4c943fdfe4","sha1":"b92889146d4c1bbddccabe58ca15c814ea066f72","sha256":"335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c","sha512":"a0172c65ca763e22c0f5b02c46994d0be13937ef3750632452c8ce9ed72da0c34f42a85957444023e4c3f3ba84c9d86e91f4d9dd88c4c4c5312864baf31f1988","ssdeep":"","tlshash":"2621203ec1c1920a94171198b7d1b268265ac3419b930bb4364d7068f6cd0ee56a3bc4","first_seen":"2023-04-05T03:14:56Z","last_seen":"2025-04-06T19:58:46.424041Z","times_seen":23462,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"WhatsApp","trigger":"mail.bbtb.c505.net/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.839Z","timestamp":1701826818839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v6.0.0/css/free.min.css?token=869e25b803 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://mail.bbtb.c505.net/\r\nOrigin: http://mail.bbtb.c505.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 07 Feb 2022 20:11:39 GMT\r\netag: W/\"345f5ecc270c94968998574a2d37e31a\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0f5bbd5df79d112fd797e0d8399395b2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR5-P6\r\nx-amz-cf-id: 79_WnJRQfKSgKsZRU2g7_Hyk_Vi5CC-_k6gSEV7wCNRnBVLJKgq8ow==\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2BbTwxEvw%2BZMZhuJvLu%2BzV6kTxl7KTIo2Ri4kiv%2FeSC8ZKJb9j1QvFQh%2FRXsJ2gx5nao5KEZcny4o1e%2FXdNx5%2Bym1TKgnBichsLztUpVP9Df9SYW90HxSOMwS6tLRC9hdQvC3FcOkFA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8310d1ccfe346548-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89755,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"345f5ecc270c94968998574a2d37e31a","sha1":"4b1937ca073a8376a07161bc40549585493ffa3d","sha256":"efad9b46d0c00f2562eb53236717ff21ebd474f8d68f69b45f92c424bfd87e9c","sha512":"e5bc5d8230e9b70a0185b6fdf34dab79c84a9c9bb133ba63297b95fedbb46a92cfbbf99ad3adaf2eea13bfa01532248720bcbefdd64f32c2ada7210bb7774afc","ssdeep":"1536:ikMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV5UHsR++:Jd1NY95IV5UMR++","tlshash":"eb93b9e9e04c05d56732c44baf99b37ca5b6f73dd5810ca9f02f580c19d26a822c6f7a","first_seen":"2023-05-26T12:28:31Z","last_seen":"2026-08-30T19:02:57.081198Z","times_seen":499,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":117,"dns":14,"connect":30,"send":0,"wait":56,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.bbtb.c505.net/","date":"2023-12-06T01:40:18.847Z","timestamp":1701826818847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://mail.bbtb.c505.net/\r\nOrigin: http://mail.bbtb.c505.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Dec 2023 01:40:12 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 07 Feb 2022 20:11:39 GMT\r\netag: W/\"369cbeaee8e26da69cc5b0a0700cd62c\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 851879d53a84651e63e2408132976dfe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR5-P6\r\nx-amz-cf-id: YLqQ8GHhRNXDB07wHXnopf9mXH7g_zxM7x__uOwbLcgGFY3Z9mLjaQ==\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2UHEbQJBMptAX29PZ1PL3VmZX4FATSBpHOsvu7GWrpd6%2B%2FrNrtB%2FxfW9DUpdyDWDnRhcfWw8FV9lB97EypTOvzRDZgJlVSn%2BoC96Tfl9%2BkjycBJ8gSjFcd0fNyn0zg5BFHf8%2BkHEKA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8310d1ccfe306548-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1817), with no line terminators","md5":"3dedc00973400e03c5ede855beb3e8b5","sha1":"c72d245eb6fa18840821a7d53634a4f8ac5119d0","sha256":"a45344d4b89aadfcddc80ff5e6de83bcbb2799a2af99a046e1cea1dd6fe0f28c","sha512":"64de80f97ad91f878026b806ea8842ce366381c9716d0c418a1853895476ae51a0a14ecd639483a54602577c635d21bc2899e749511c03758af9f3c8889adfeb","ssdeep":"","tlshash":"9a31f02487d90071b4313f097ac67124feae70a75bf95e62c62e99090cbec55b3c6a44","first_seen":"2023-05-26T12:28:31Z","last_seen":"2024-12-30T20:01:16.694883Z","times_seen":328,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":108,"dns":10,"connect":34,"send":0,"wait":54,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}