Report - logindana.official-web.biz.id/

Report Overview

Submitted URL
logindana.official-web.biz.id/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 15:38:05
Access
public
Website Title
DANA - Apa pun transaksinya selalu ada DANA
Final URL
logindana.official-web.biz.id/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
logindana.official-web.biz.id	unknown	unknown	No data	No data	7.6 kB	114 kB	188.114.97.1
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	423 B	32 kB	151.101.66.137
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-17	474 B	2.8 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-17	1.7 kB	147 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA
2024-04-17	medium	logindana.official-web.biz.id/	DANA

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.5.1.min.js	90 kB	2023-03-07	2024-04-30
Pretty URL code.jquery.com/jquery-3.5.1.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-30 19:07:37 Times Seen140455 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	logindana.official-web.biz.id/	135 B	2023-06-29	2024-04-30
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-30 18:26:05 Times Seen707 Hash 8135d55bdb3fdd9003e5226986c539f4 17796aff7fea44999042478f0340bdc87776acab 0c472d92c58eac469153a6fa27f2fb758ae436804afed1b0689bd9e33c15a0eb Loading...

	logindana.official-web.biz.id/	66 B	2023-06-29	2024-04-30
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-30 18:26:05 Times Seen696 Hash b7ec93a09110dfd8bb76196fe658a2ca fa0e9eecd598aa16a419e4e799c4694469ecf9f3 5ef8108dc8ed8de6d3ce2b0a190bcde518ac3f55143f767074e421359a2ee58a Loading...

	logindana.official-web.biz.id/	214 B	2023-06-29	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-29 07:20:47 Times Seen683 Hash d5d8d7e5364c28cf2a6bdb2d1b533425 38c68da0d60983a3f9fa085872d27ad97f5707d0 73e91b6f1b1b5cf60d3701b6e287a052b09787492ee66fd00288d6d29c5b1f75 Loading...

	logindana.official-web.biz.id/	690 B	2023-06-29	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-29 07:20:47 Times Seen693 Hash 37b6cc906dee95ba31d6dc3561093274 cf09a304a41aafdb080861bc47d37f346def78d4 f2e9070c480bcec6af473420c44054580f46caddad6daed002db97fe1790daac Loading...

	logindana.official-web.biz.id/	689 B	2023-06-29	2024-04-30
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-30 18:26:05 Times Seen708 Hash b05c8bd1528cb5466392fb8d88178905 84590a391d262608fef98d82cc37bc399c656c6a c5ed1f676d19f816f1f227611469605003b0e57edc27aaf55f51a654aa6134e2 Loading...

	logindana.official-web.biz.id/ast/jquery.mask.min.js	7.9 kB	2023-06-29	2024-04-30
Pretty URL logindana.official-web.biz.id/ast/jquery.mask.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-30 18:26:05 Times Seen903 Hash 2e961f240d376e0a83c885a07f00762e e9f1d4a792dc3fb06f8d65d68a607738f3b4070c 470a65fdd4c44fa96ef232acb2a308ca73a3f17d6accc399d0c7a28a21d532d9 Loading...

	logindana.official-web.biz.id/	429 B	2023-06-29	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-29 07:20:47 Times Seen683 Hash 4d1528243a309f4162fe80c2cde9ae93 8f3ed458f48f58e15538686dc001fd0ae8fe2079 917bd4fc4ff0da5f10b0e353b4dc49b8cf8962d64e04c7f8095fa046360a2d40 Loading...

	logindana.official-web.biz.id/	385 B	2023-06-30	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30 13:24:45 Last Seen2024-04-29 07:20:47 Times Seen491 Hash e53dd890537cb82df8bdb8b263d68b65 9cfa3a52757641af1f9b5306d974d2755201e4fd 8fcdeb22f835d59cbc08d2183aed7c944b8ddaed88592d3d9d0f7513e36583d2 Loading...

	logindana.official-web.biz.id/	307 B	2023-06-30	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30 13:24:45 Last Seen2024-04-29 07:20:47 Times Seen491 Hash df4e0d67a093f28be8e21892df8bd0c3 9516b9f3d95e107d4ce97961401f68d6f36c84a4 fb64d18d5d3f33a9f556552f2321e3aa2b68aa93b3b417549ed298c2ff5c9164 Loading...

	logindana.official-web.biz.id/	401 B	2023-06-30	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30 13:24:45 Last Seen2024-04-29 07:20:47 Times Seen453 Hash 4c28d412cbc4b680c5b0bf9b00888db1 e8064f30f12f8740d8e38dd50eca327c191c2ba7 4d03a6ec6823d126e58e1c8fe43dbc14650d5c1bdecdb98139de50ffdb07b648 Loading...

	logindana.official-web.biz.id/	156 B	2023-06-29	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-29 07:20:47 Times Seen692 Hash 00c3ff7222ce30d0151b609ce9b1dd00 28fbd8656f7edc3e6f92e420aa6c8bba22be6049 aaaee6f16237a69ade0d0a8e1246b230292a6eead0155f688c49e8de8b5a35c2 Loading...

	logindana.official-web.biz.id/	382 B	2023-06-29	2024-04-29
Pretty URL logindana.official-web.biz.id/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59:08 Last Seen2024-04-29 07:20:47 Times Seen699 Hash 7544c9acf4737e54470eb118ba8361a5 6a4d26abaec547bb911dcd1d131505512c3d5dfc 15d88dfd919c1a4ae658e43cfb9c9bc3dc298440028e47b065e43b2218c52f21 Loading...

HTTP Transactions (21)

URL IP Response Size

logindana.official-web.biz.id/ast/img/dana_logo.png

188.114.97.1

200 OK

13 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/dana_logo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
Size
13 kB (12786 bytes)
Hash
6fd5a7d18a8f7c04bc5effcdc5235987
c4852c577f44fcdf78fb439a30ea2c6c6983b140
c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/dana_logo.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 12786
last-modified: Sun, 30 Oct 2022 23:38:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3oCvEQQvC5S8iu3XvBakJvOV3YEKXYLfTKRQ3CIAidXVsWqRnMA0PPU4iZz0bSQHElq5bjEkdjeNTyYA99uWw4EeLosHKKXTEdEr8VS2oNeUGHvlgzEvRU3xf%2B0HyA3FLxsNqQJoOHF6gBIDElzSCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f6ebe60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/dana_text.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/dana_text.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 480 x 118, 8-bit/color RGBA, non-interlaced
Size
11 kB (10588 bytes)
Hash
3dc459976e4f7086419105435a80fc25
4a79a70ae98be7b6386ddde8609d83eee4777373
8af7f1691e018bfc400432dfc61455f26f63226ab369e675c80cef5a93334e87

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/dana_text.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 10588
last-modified: Sat, 05 Nov 2022 21:15:06 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1uDpniIVxmaYz7zoxCIVOnnVJkA7G9burfe8O5sVPp417L5LK6AtX2eANVJ0hC74xtgYEgst0z1Y2mPzPOVqByzGQLpDAgkZxh5MYiSKzHtMLNgPfkBTkmqzEgh8sjffBiDeJYrZuvH7OvGQU9uVSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c5f76be60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/bi.png

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/bi.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced
Size
16 kB (16542 bytes)
Hash
6e77df79b301b9fb95fdf50d66e3ceb7
1c93476fccf582d5ea0fa88ec8b1becc00d9edb5
4262dc8d42209d7e2a597f7f1098880e75ad0f6a53a66da1a7bd094a5f778199

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/bi.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 16542
last-modified: Thu, 27 Apr 2023 19:18:12 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KIEleaDIPaLBuAL%2BuHrXXqGojQU%2Foe6U05ciOo932Pn3ztRYnaPiC%2BgL94BhfDtiKheDUnML9ifrvivu29u2nvQl%2BMSaiAW7s8atO%2Bsm0bbagQnYYnf6nyvnzq0PpEOUtt4w0fW2oCydqEOYWrCy4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c5f79be60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/kom.png

188.114.97.1

200 OK

8.5 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/kom.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
8.5 kB (8484 bytes)
Hash
74adb66e545a68df7e5a0442a02fa8e7
a1692d3bfbde3c0cb3a8bc9b9b1fb2de4d570e85
4285db40c51cc53230cab0490df40566e285b48fb2b2e4729b42ff2a26c74480

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/kom.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 8484
last-modified: Thu, 27 Apr 2023 19:11:54 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nP2c2QiST8ILrDnUeosmgTRkh%2FCg3tGno7WHr3SrsglxfrSLC48T7iMqpSeco6vZjtYK2BE59ODir2H9ZNavLsEGbf3KAdZWWSzBOyjBWCZoITNqYl6GYrJrxw6TNNaesJyCux0%2F4%2FNgKTFOLEgizg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c5f7dbe60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/load_bg.png

188.114.97.1

200 OK

7.9 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/load_bg.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
Size
7.9 kB (7863 bytes)
Hash
bf1d4a90de7e29b2be55237982cb30b4
ef942049631b598767fda52d54458b9f9680ee87
46518758f002d85cff9220609163f23b7e9f8f2721561d1e0ba79c4f17425c58

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/load_bg.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 7863
last-modified: Tue, 01 Nov 2022 13:12:02 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WzpL6I6HAydlALaHyGurjUFHBADvFJ3bQk6RJc0LTV9fzuVg%2FIhlexX8C5xPDqJohUQ827AlK7NqDqdJsh1Wk96hfyAnmL47Y5GW8KG%2FUhm%2FDG7I%2BvY5AH6VM%2Fn7xFTWX38hmt3%2FOtZ%2FIIJgnmjeJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c5f86be60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/load_spin.png

188.114.97.1

200 OK

5.1 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/load_spin.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
Size
5.1 kB (5078 bytes)
Hash
e8e4e4432355a07040a7327673850223
b07f6cfaacb6a2093778b08dd8d9b8f7d718c119
50b4bad00572d07c6158459a5cb93b1b3f9bdea95d393aa56970afded2f58913

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/load_spin.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 5078
last-modified: Tue, 01 Nov 2022 13:12:06 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qXHa%2BfotH1F7SXYKO5ZYgvqt5FgwBHoc97kWllU6g3GCyBVVxyi3%2FVscUtxX3YisHgitrHpijnYsDXVKlUSA8Q8Q%2BxWFpxex2VaFvBxKld1SRZnOUlr4MoygyaRdKswxppPGP%2FCgaWE63CJMNnZGaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c6f93be60-CPH
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/img/indo.png

188.114.97.1

200 OK

741 B

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/indo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
PNG image data, 80 x 45, 8-bit colormap, non-interlaced
Size
741 B (741 bytes)
Hash
c15c95b8db17f44e5826bb7839278578
5be0ab5aba6201a0a3a3423f9db8008ed2385430
af52bfb0ab7606d185db1457ddc3edceb61c7fe9675e099cae3e3be1eccf152c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/indo.png HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/png
content-length: 741
last-modified: Sat, 29 Oct 2022 11:42:20 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wI2S8RywJeLoZt824M%2FAAz0sxCELnWmK%2B1f99QPp%2FK4y43Hr6Oh3MBxbFLZcc1ZNuxuI%2FrnOX%2FkqgVW996fEncA7dVCBGYQHY18NUxLaECpghlgQhlFeKbj4yHqp93hJWvWvMWkaE02z9A1gavVnFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c6f9abe60-CPH
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery-3.5.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.5.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30879 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 15:37:40 GMT
age: 3325102
x-served-by: cache-lga21981-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 300368
x-timer: S1713368261.984975,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap

142.250.74.106

200 OK

2.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
2.2 kB (2155 bytes)
Hash
4c64175875b91f7f19a1ef17498dcc53
075984adef33d715f3ffcac1181366753de37202
297c0a93aab9a35e631485e6fb89013c99b93742d5ac1fe7a6633ff7c0adbabb

HTTP Headers

GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 15:37:41 GMT
date: Wed, 17 Apr 2024 15:37:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logindana.official-web.biz.id/ast/img/hero.svg

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/img/hero.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
SVG Scalable Vector Graphics image
Size
12 kB (12127 bytes)
Hash
bc0ceea50591f74883dd9b92b19b852c
5617f0be48b9a0973c24ff0e1d200201549a4a50
a3d7991adee411105f2ddd533c34d0f0afd141187bc13503fd035de014f954d8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/hero.svg HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: image/svg+xml
last-modified: Fri, 28 Apr 2023 12:19:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aKOvPSssfL62Z4qPPAm7J%2FjwVXfv5RB9Pf98PpPWmzuvajA%2Fji%2Fx4ZjQkMy%2B5u39bJFTlZD2LQAGuXtFWyXmuikH9ijX9OrLMBunZA5Hma1IBagneIAEqblMa4j4wYZdVv9E31I07%2BBF4ikCFMERTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c5f72be60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://logindana.official-web.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 565361
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logindana.official-web.biz.id/ast/6990a7033bbaeadc2040ac863ff124fd.css

188.114.97.1

200 OK

904 B

URL GET HTTP/3
logindana.official-web.biz.id/ast/6990a7033bbaeadc2040ac863ff124fd.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
ASCII text, with very long lines (1255)
Size
904 B (904 bytes)
Hash
e2a320730ef8a296909722d232ae202e
1fa905b79ff205824aa73a08fa4cdd6980e08297
9cfafe8abebe3f03670b51ad157009cc0d2c2015a17aead016e387f2b5d8a94c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/6990a7033bbaeadc2040ac863ff124fd.css HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/css
last-modified: Sat, 29 Apr 2023 19:38:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2g%2FJrvYT9lQKfo2hLnsJlHyzg%2B2YmWcD8%2FYaXcuxvNvWocNelz4ER6YL%2FwmIzLejuinSvaiLK%2BAYnDRgQqfUlJ9VE794UWy%2BvhOmuZEoGvZFFQNzjYI4N9dfWr%2BEZj0218JYCy4zTwmEb9BVwHJV4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f68be60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/jquery.mask.min.js

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/jquery.mask.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
JavaScript source, ASCII text, with very long lines (551)
Size
11 kB (10857 bytes)
Hash
2e961f240d376e0a83c885a07f00762e
e9f1d4a792dc3fb06f8d65d68a607738f3b4070c
470a65fdd4c44fa96ef232acb2a308ca73a3f17d6accc399d0c7a28a21d532d9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/jquery.mask.min.js HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/javascript
last-modified: Fri, 28 Apr 2023 03:08:52 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=paGmePIXOOQBuPO5v%2Bfvcdj85SqcILt1U4fbs9h4LiekWsZk5N9rm9tR%2F%2FEPpGVCw%2Bf5yaLnBx8%2BdZJiIZMonBoiXA5RrHAfY1avjE%2F24SQ3ETmUXgUc3ZHRr2M%2FlS7dOgPzJDxZWJo%2BH3xJd2RkTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c7fb4be60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://logindana.official-web.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 565365
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://logindana.official-web.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 565365
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logindana.official-web.biz.id/ast/00b9d2e9f52e505c013c16bb638a42a4.css

188.114.97.1

200 OK

666 B

URL GET HTTP/3
logindana.official-web.biz.id/ast/00b9d2e9f52e505c013c16bb638a42a4.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
ASCII text, with very long lines (666), with no line terminators
Size
666 B (666 bytes)
Hash
f04c34e455649c317cbfe449a7c5b10e
07c192cd6c0d6b6a96ddd3fe56ffc5762c2f6eb7
963ee000ea25a124a63e7dd4ded8a9adc4d3501de7d0bf47f78f6fa4bc4ee472

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/00b9d2e9f52e505c013c16bb638a42a4.css HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 17:53:58 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hPJRgvzzcYc9fHYSZolyFc%2BXgeMdnmpdrm3K1pkjTptApBxWBPWZvnmX0nAeHe2SQ1%2BQDKr4IlHdBGnsEdoiBCqeAcnAueDcnSBDGWbXO0GDiBkPBzEfKBuebZpUkA7aTgHMLNWlWTRsxia%2FJIRA0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f60be60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/3fadc676582b9542004b502ee03df3a3.css

188.114.97.1

200 OK

1.6 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/3fadc676582b9542004b502ee03df3a3.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
ASCII text, with very long lines (1561), with no line terminators
Size
1.6 kB (1561 bytes)
Hash
553a4feacebe4a339e3f83b082684ff8
7334803536f6429c43ad344da92e22414e5882c2
94e570a73c7171a271962b2c59739196b2101bba6ce3257e1e60743013cdaf32

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/3fadc676582b9542004b502ee03df3a3.css HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 17:52:48 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ksSD2fZh5CZu1aSbbCcKhEd1gY7Yj4JIHwlpDyTKORoCvxQ3Om69rlB9Fosn4Vj%2B2C749uEWEl%2BtpsCexkvjGSDbwx%2BTHmI8EQNs1SH5oivRCYlDp50comgr3PpkC13EP%2FCrz4feNsTbEOiWuO3ECQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f6abe60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/favicon.ico

188.114.97.1

404 Not Found

315 B

URL GET HTTP/3
logindana.official-web.biz.id/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 15:37:41 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dX%2FWgUGLriN%2Baxyuh2US3tuneD5AKu%2Ft3eREPJwT%2BPXKpFP1oOFXoB3Si%2B8exDgQx0IFpxf5NVwzgYGYyfOoJ7x%2F99rDxMtbn%2Fcsy%2FXngj4HC1ZJb9Ftg%2FU3m1IXNcvPZ%2FiAEe0r%2BatvzbZGnT%2FKpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f724988be60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/

188.114.97.1

200 OK

9.8 kB

URL User Request GET HTTP/2
logindana.official-web.biz.id/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
HTML document, ASCII text, with very long lines (10299), with no line terminators
Size
9.8 kB (9843 bytes)
Hash
4e218e2afc900bad867e57660030251a
dfb7a6e68de809cb15d38c78453e2d979cc562a3
02a688a59cbfd1826572149e8a383c2eee9a644abbbb80ead00de028df202abc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET / HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/html
last-modified: Sat, 29 Apr 2023 09:30:18 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LZF9Ql%2BAyu38EXxjV07RcBJV3hur0CJ3j3xeIyz0pxbmznG2pv2t9gSJN8NRSdimPlC6qROfOxiNVzJAgvR3Tqs1Rpklg0ImkR2iR5n4IXRBeyyrgh4m2ddaVSVUlScdjyp1nnYBcn%2BRzPel90gIpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875d7f6a0b888f54-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

logindana.official-web.biz.id/ast/8d62ea654fcf0e4cae001e344ee2592c.css

188.114.97.1

200 OK

3.9 kB

URL GET HTTP/3
logindana.official-web.biz.id/ast/8d62ea654fcf0e4cae001e344ee2592c.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
ASCII text, with very long lines (3850), with no line terminators
Size
3.9 kB (3850 bytes)
Hash
6a47026eae042cc9152e2ba28cae1688
11f91794ddadcd088a8e78720abd5cce59700198
a2a6e6317012a338c0dc67124f68f969166edc9f7c3f75d54ff48942d785e709

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/8d62ea654fcf0e4cae001e344ee2592c.css HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 17:53:16 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKZWWJsiaYdedz5xyNc%2F9vSZwwTwW0OKzEbZcbwuDHaU9yF0seEtBrZ05TrpUBekjop737ZFCbbLUR5BmzKK2nlByhie%2FcxaqmgUhwXxDAE5FBn8TS8HfLlCfxstdAPuFZpTd2oDokkP0vNpWupQnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f5ebe60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

logindana.official-web.biz.id/ast/47e4c58f6b9789b8a33f2525cf084599.css

188.114.97.1

200 OK

790 B

URL GET HTTP/3
logindana.official-web.biz.id/ast/47e4c58f6b9789b8a33f2525cf084599.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://logindana.official-web.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectofficial-web.biz.id
FingerprintB8:C8:BC:D5:6C:47:DE:D9:4A:32:25:49:26:B5:BD:9C:70:B6:A8:6F
ValiditySun, 14 Apr 2024 00:12:12 GMT - Sat, 13 Jul 2024 00:12:11 GMT

File type
ASCII text, with very long lines (790), with no line terminators
Size
790 B (790 bytes)
Hash
8308d2ea1d6ea02c0cb00f298799633e
6deedbf3eea7d45bd140179d681c8f78613073d6
fe9df1a47b206f90c0f6a9bd88239d8eb22313978376f04d9e3fab4a35317380

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/47e4c58f6b9789b8a33f2525cf084599.css HTTP/1.1
Host: logindana.official-web.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://logindana.official-web.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 15:37:40 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 17:52:26 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5v%2BI1aH%2FgTsdwgshhtGbtFIY77ziVo1cDFtjArzusQd6OOaK%2BrMRC2BHyEXjwfbQ%2BpF7ET3lRO5uB9Grgstju7mm6EfCKImzjnf9xoDXkPQpqvRpesn1iKArLcuFiHQV0Y9dJb8QB9R2qL9QtBobgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875d7f6c4f6bbe60-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML