Report - kaysix.com.my/

Report Overview

Submitted URL
kaysix.com.my/
IP
103.8.25.126
ASN
#132241 SKSA TECHNOLOGY SDN BHD
Submitted
2022-10-14 22:02:35
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	594 B	127 B	35.164.146.235
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.7 kB	68 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	758 B	2.8 kB	143.204.55.36
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	1.6 kB	4.4 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	401 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	321 B	229 B	34.117.237.239
kaysix.com.my	unknown	2020-08-19T06:09:39Z	2023-03-06T09:03:55Z	9.5 kB	1.0 MB	103.8.25.126
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	329 B	797 B	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-14	medium	kaysix.com.my/	Phishing
2022-10-14	medium	kaysix.com.my/	Phishing
2022-10-14	medium	kaysix.com.my/vendor/bootstrap/js/popper.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/jquery/jquery-3.2.1.min.js	Phishing
2022-10-14	medium	kaysix.com.my/js/main.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/countdowntime/countdowntime.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/bootstrap/js/bootstrap.min.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/select2/select2.min.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/countdowntime/moment.min.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/countdowntime/moment-timezone.min.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/countdowntime/moment-timezone-with-data.min.js	Phishing
2022-10-14	medium	kaysix.com.my/vendor/tilt/tilt.jquery.min.js	Phishing
2022-10-14	medium	kaysix.com.my/fonts/Poppins/Poppins-Regular.ttf	Phishing
2022-10-14	medium	kaysix.com.my/fonts/Poppins/Poppins-Thin.ttf	Phishing
2022-10-14	medium	kaysix.com.my/fonts/Poppins/Poppins-Black.ttf	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	kaysix.com.my/vendor/select2/select2.min.js	67 kB	2023-03-07	2024-05-07
Pretty URL kaysix.com.my/vendor/select2/select2.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:24 Last Seen2024-05-07 10:33:06 Times Seen1538 Hash e87ca4c3554f7b9e693605ce12d3a234 fffd0bf48918d33bc612be1fefc120ee23b1a1ee fa659dfc6ebd4b8aad80fa304842c879502fefe16e2fcef55976a89605e7af04 Loading...

	kaysix.com.my/vendor/countdowntime/moment-timezone.min.js	6.0 kB	2023-03-07	2024-04-12
Pretty URL kaysix.com.my/vendor/countdowntime/moment-timezone.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-04-12 00:28:35 Times Seen218 Hash 815209b1a2020b5cf4ed070ef41a6540 5f189bd893458547f396225485d19db609cc6378 c2795fbf648c3d76b2f15cb04644622f9cf2b098709f663476eee98367e4a046 Loading...

	kaysix.com.my/vendor/tilt/tilt.jquery.min.js	5.6 kB	2023-03-07	2024-05-01
Pretty URL kaysix.com.my/vendor/tilt/tilt.jquery.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-05-01 11:00:28 Times Seen1651 Hash 034d38aaa44f4ac1723c041d215eb146 6dccde4d78b77b035d9da0396385ade6141864cb 6951eec0a8c0c9b2eab72c4f579765e0f190165822919ddc791bb391096fd7c0 Loading...

	kaysix.com.my/	44 B	2023-03-07	2024-01-08
Pretty URL kaysix.com.my/ IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-01-08 23:21:28 Times Seen50 Hash eccf99b04d51d625186d7150b133d165 cfc0211104deb4da4572d31484849a39cf88683b f30490788f593b3a1f9486d2c03a1d7c3350a945416478cef488d020bb8e96d6 Loading...

	kaysix.com.my/vendor/bootstrap/js/popper.js	82 kB	2023-03-07	2024-05-04
Pretty URL kaysix.com.my/vendor/bootstrap/js/popper.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-05-04 10:42:44 Times Seen838 Hash 426ce17eeabd071e85b0bb50e5a18c6c 00e2321a61daaf93f57669a81f0484d75eca8158 a93f37c5c32d030a1d831b5023b6b29bc93290f5423debaf47c83b6444528059 Loading...

	kaysix.com.my/vendor/jquery/jquery-3.2.1.min.js	87 kB	2023-03-07	2024-05-07
Pretty URL kaysix.com.my/vendor/jquery/jquery-3.2.1.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-07 13:50:31 Times Seen65020 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	kaysix.com.my/vendor/bootstrap/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-06
Pretty URL kaysix.com.my/vendor/bootstrap/js/bootstrap.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-05-06 22:18:25 Times Seen1472 Hash baaadea4492b059f284187d75af46063 7326bf5e023f871afcf6ebb18cb89109f81a7708 0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b Loading...

	kaysix.com.my/	341 B	2023-03-07	2023-03-10
Pretty URL kaysix.com.my/ IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2023-03-10 09:27:00 Times Seen1 Hash d52baf230d01ea07ed5b5c44e6024766 56def7a9934f8172d1a18e2837678cf0f1d7a037 b2b2d82d815cf28ed190ab668fddae72600eba99e940f38166c6db6770e4012f Loading...

	kaysix.com.my/js/main.js	2.1 kB	2023-03-07	2023-12-20
Pretty URL kaysix.com.my/js/main.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2023-12-20 20:29:55 Times Seen8 Hash 89895cbe4c1eae6ca0c9ca556f2e1833 01fcc96cfe05a58b2f308e08de4b2968e08fd4da e7affedb83e512a6790f2f8af4d0bbcf97289278d25ebc2d55d3f77b5236e541 Loading...

	kaysix.com.my/vendor/countdowntime/moment.min.js	52 kB	2023-03-07	2024-05-06
Pretty URL kaysix.com.my/vendor/countdowntime/moment.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-05-06 18:56:40 Times Seen385 Hash 5ff1de69e6fd137a6dd511205ea7c49e 91a29a02cca99f32598f7b5764c610ab3cc89fba 001564a706fd2bd3f1b9bbd1ac732493ac2659c207504f5e0713592d7610f389 Loading...

	kaysix.com.my/vendor/countdowntime/moment-timezone-with-data.min.js	184 kB	2023-03-07	2024-04-12
Pretty URL kaysix.com.my/vendor/countdowntime/moment-timezone-with-data.min.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-04-12 00:28:35 Times Seen241 Hash e151e6df5d3a88137025e187789d6dec 56beca5d01b162efc76849bf97344281ba89946e 14964e10b8309df411746f0a65449609882e7040837f8c3991f41d41219b5692 Loading...

	kaysix.com.my/vendor/countdowntime/countdowntime.js	2.8 kB	2023-03-07	2024-03-20
Pretty URL kaysix.com.my/vendor/countdowntime/countdowntime.js IP 103.8.25.126 ASN #132241 SKSA TECHNOLOGY SDN BHD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:40 Last Seen2024-03-20 14:45:07 Times Seen174 Hash 9f7c1f781d72385623259882bbfcf6c2 94f04b927588dc2362dfac9a66add708e6cddf40 680d7dccae0057987af6da8d83e6a49dbbd0d66ffe173471c47d3ac3caa8f71a Loading...

HTTP Transactions (42)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 14 Oct 2022 21:49:54 GMT
Expires: Fri, 14 Oct 2022 22:33:27 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YYPGrDRMkNXsAr4VDIJrTr7r-V_S6DtogeSuvkxY21p_xTKUlVfz-w==
Age: 750

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2b424d8c01b211c56d5b44b92e4e4153
b1fdab18f23271eee58ae1482f8af25badc2ffda
1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3430
Expires: Fri, 14 Oct 2022 22:59:34 GMT
Date: Fri, 14 Oct 2022 22:02:24 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c5afb6d2acaf66af4c3fd458a0b70e17
ae58844d8753fe1b62240067b7c0efba86a858d0
42b37d16055f0f3ec52cbb45b4af4900baac4352e87c662811cdb377eb2d3c3e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "42B37D16055F0F3EC52CBB45B4AF4900BAAC4352E87C662811CDB377EB2D3C3E"
Last-Modified: Wed, 12 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4515
Expires: Fri, 14 Oct 2022 23:17:39 GMT
Date: Fri, 14 Oct 2022 22:02:24 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 24hnst44RWRzNcacYidHG2SpaJTWBC5nmib36PvubADLAy7uWqfJc7qxBdvQ/9Cf8OB82MmNd9s=
x-amz-request-id: EBCWYACSVYCZTC03
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 14 Oct 2022 21:34:22 GMT
age: 1682
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 14 Oct 2022 22:02:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 14 Oct 2022 21:07:43 GMT
Expires: Fri, 14 Oct 2022 21:49:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p_I5KvdxHI4mefqJaxpAh600naMJ5Kn9d4lPcmWWvpZ_2MkPVv294A==
Age: 3281

kaysix.com.my/

103.8.25.126

301 Moved Permanently

145 B

URL HTTP/1.1
kaysix.com.my/
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
145 B (145 bytes)
Hash
008039b8c34da5efb3d1faf0b73a5462
6598bff0a0cc8085eade00d38fd49ea41910baa8
7caacfa130a8be29108f6b45bee46b76b340521bae06008e660d3cac42530f61

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://kaysix.com.my/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Fri, 14 Oct 2022 22:01:49 GMT
Content-Length: 145

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
90336661a2936bdb9efcc26998693b34
bee3b0e35ce901bff835d43a0f22eb0765ab8264
717bf09925581cc0668632ad10dfc2b714e77f9ba2c3852e8cf3ead552fde950

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5531
Cache-Control: max-age=128198
Content-Type: application/ocsp-response
Date: Fri, 14 Oct 2022 22:02:24 GMT
Etag: "6349189b-1d7"
Expires: Sun, 16 Oct 2022 09:39:02 GMT
Last-Modified: Fri, 14 Oct 2022 08:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.164.146.235

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.164.146.235:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7npcYPEE50e5rC2kUVOAUw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zPjp6ggDaqcdDCtcIQpH5fW1IoY=

kaysix.com.my/

103.8.25.126

200 OK

995 B

URL HTTP/2
kaysix.com.my/
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
995 B (995 bytes)
Hash
64ecaee3d08cbe0b0dea330708387146
258ff6f89d4cad7ae69687c20f1c9bb47241e7ad
a400eafdaa054342043aa1ed6ba4b7e880a1a478894bd56c23849cf970f16035

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
content-type: text/html
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:01 GMT
accept-ranges: bytes
etag: "80e2a7aae875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 995
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4461
Expires: Fri, 14 Oct 2022 23:16:46 GMT
Date: Fri, 14 Oct 2022 22:02:25 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4461
Expires: Fri, 14 Oct 2022 23:16:46 GMT
Date: Fri, 14 Oct 2022 22:02:25 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4461
Expires: Fri, 14 Oct 2022 23:16:46 GMT
Date: Fri, 14 Oct 2022 22:02:25 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F560d2eb7-40d7-4861-8041-41b8184de030.jpeg

34.120.237.76

200 OK

8.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F560d2eb7-40d7-4861-8041-41b8184de030.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.2 kB (8183 bytes)
Hash
c3368090318fe53289f4e0fe284ee1e2
ec5e3f3d6a334d0b8a92ce06327b5b145002087c
73bb52c89af285a60360a119d3f21b0d7309ea7fd26a36c1e46fe6b1b9f25164

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F560d2eb7-40d7-4861-8041-41b8184de030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8183
x-amzn-requestid: f41fdb47-83e8-48f9-95ac-a79e2bfc521d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z6Tu8FwCoAMF_OQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347332c-67bc08ef6315488e07fc3c4c;Sampled=0
x-amzn-remapped-date: Wed, 12 Oct 2022 21:35:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CGpa_I95VYqIP5j-OWRJ_xLopy7H9wlZRPSTP_mL-hymbOqhelsTCQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:47:33 GMT
age: 892
etag: "ec5e3f3d6a334d0b8a92ce06327b5b145002087c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42e00752-5abb-46e6-8a0d-c47f96af6b9f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9622 bytes)
Hash
07dec47a418618af22b7104e1bbde5e6
c34dd1552df55e8b62e699a5efb14e7f26a60acb
5eb94cd99c5187faa2c0c8f5ef5b9786009d37c2950ca0048eb3f737e45c363b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42e00752-5abb-46e6-8a0d-c47f96af6b9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9622
x-amzn-requestid: 340d7e66-1eb4-49fc-bf3d-56e5cc4af771
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9n2_HXqIAMFzsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63488692-78ea067c541cb84f75741d22;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:43:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uN6RkKHKGjhauRGxTQiyluFaTwFaGBgtkJsdFMcxUoZNEu_05ocMZg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 23:14:16 GMT
etag: "c34dd1552df55e8b62e699a5efb14e7f26a60acb"
content-type: image/jpeg
age: 82089
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ada65cb-c437-4614-ad56-8612a5eb3d39.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (6005 bytes)
Hash
5c2fb169144739a1240a832df181cf24
a7eb3a1289135eeafd639dffba6daf3e0bd0aee5
6f471bf8a40088a008efc818c762f8ec99988b9b68478034762cf872c809d246

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ada65cb-c437-4614-ad56-8612a5eb3d39.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6005
x-amzn-requestid: f9cd6d19-f5f8-44ad-a809-9c66b2cea9ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9m7YEw7oAMFczg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63488515-74c9354b031430335dfea732;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dSDauJG-Hs8miFUq5oD_KoUTQiEm0K4URy1rltHfGRr185DZroLdOw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:48:24 GMT
age: 841
etag: "a7eb3a1289135eeafd639dffba6daf3e0bd0aee5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98481d75-e189-4e2a-94de-5d6c94c4ea9e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.7 kB (6685 bytes)
Hash
b1a0e7692a42450c5880b6bf2c3e600f
3c567806bfec9a195235f1c1e3c3e4bc647fdde9
318e462ae5b2da302cc3fa6539270866a352f011ebcc9ea35eef50c38fe9fe24

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98481d75-e189-4e2a-94de-5d6c94c4ea9e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6685
x-amzn-requestid: 8d5aa091-bf24-4ab1-a33b-73795e951da1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9m0EENeIAMF9Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634884e6-36c8c3d75b57c8df3b0644a0;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:36:38 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf8nte3n3LzQdLXnv6MfnVk2LO0b0CjSfyiaxK2UWsM2DLsm-xEAgA==
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 22:56:52 GMT
age: 83133
etag: "3c567806bfec9a195235f1c1e3c3e4bc647fdde9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29dee6f-934c-4a9c-a8aa-8da6931e92e3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8890 bytes)
Hash
05cbae7a5598ecb6de18ba845117b543
00c5b6a969acf49d11b963ed509f4c7c0a767438
f915a4215fc3bb08a43b38352dec8ef798d0e7648df20cb53c968c52108216f3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29dee6f-934c-4a9c-a8aa-8da6931e92e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8890
x-amzn-requestid: 53e8447e-dbb7-41f1-a184-ceea0e33ed3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9nLqG2voAMFc-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348857d-302e435a359d84ab25d3b003;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ashiRI0jxjFwVDJaldk8AwtX2z8p4j4Vvck78BAAnazxoIfBFbHwdQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 22:38:13 GMT
age: 84252
etag: "00c5b6a969acf49d11b963ed509f4c7c0a767438"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66af0895-4532-481a-84d9-523353a6c160.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9350 bytes)
Hash
e80557033ce8935b57b87fe59633393e
6c055a00a12067ab5b11458bb614bc6f1028c28a
8a88d7f2110e5c200f6f26ed5e6c7b299b9c76654f095b870cfffb2a8d7b96d9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66af0895-4532-481a-84d9-523353a6c160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9350
x-amzn-requestid: fd2ec00f-7ef1-4e4a-a652-a388dcba3e16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9m0EHctoAMF8Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634884e6-7e945574599f2ec67e824671;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:36:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jwQT6vQNNLDQFqrROqQ-prpvIGnhB5aK-hVVwZRClZQP5fnbgpfOuA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 23:04:28 GMT
age: 82677
etag: "6c055a00a12067ab5b11458bb614bc6f1028c28a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

kaysix.com.my/fonts/font-awesome-4.7.0/css/font-awesome.min.css

103.8.25.126

200 OK

9.2 kB

URL HTTP/2
kaysix.com.my/fonts/font-awesome-4.7.0/css/font-awesome.min.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (30837)
Size
9.2 kB (9189 bytes)
Hash
4e0ac5733898d52fa4c4f5e12421d75c
958ec0cb99c66a032c3340e49da162e5c15de263
1a581caa95b3a3c26c7b4756bf0d5c4ee9365e36cd32770ac6b7e8bbc0ab53a9

HTTP Headers

GET /fonts/font-awesome-4.7.0/css/font-awesome.min.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:04 GMT
accept-ranges: bytes
etag: "8ec8b8ace875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 9189
X-Firefox-Spdy: h2

kaysix.com.my/vendor/animate/animate.css

103.8.25.126

200 OK

5.2 kB

URL HTTP/2
kaysix.com.my/vendor/animate/animate.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text
Size
5.2 kB (5205 bytes)
Hash
c93fed68cbc05087131bded85bb0cb0e
9d00a1bf884df756ce0911295e1fcf1cea8cacac
f6e525e31f36c6252898812502ac0a383ff9c2c8fc875bd078cbadab6d9376de

HTTP Headers

GET /vendor/animate/animate.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "ad8fd4aee875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 5205
X-Firefox-Spdy: h2

kaysix.com.my/vendor/bootstrap/js/popper.js

103.8.25.126

200 OK

33 kB

URL HTTP/2
kaysix.com.my/vendor/bootstrap/js/popper.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
Unicode text, UTF-8 text, with very long lines (337)
Size
33 kB (33424 bytes)
Hash
2509af06d6bed7924b35c595a01716c5
788a70088756657b26dac979c0452160062677ba
b54705d7d598ffa90ebc82b893db740d67ca66f0acefc69d728deade31480c89

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/bootstrap/js/popper.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:10 GMT
accept-ranges: bytes
etag: "93547fb0e875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 33424
X-Firefox-Spdy: h2

kaysix.com.my/css/util.css

103.8.25.126

200 OK

16 kB

URL HTTP/2
kaysix.com.my/css/util.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with CRLF line terminators
Size
16 kB (16406 bytes)
Hash
42268ac778f86cc5eb25185d6bc3e16e
278bd373787410cc0d71f2b78dc41279f4b4ead6
18f58d421726ab19e8e9db4f92608b442ba894cd685467009fbd7890e5284084

HTTP Headers

GET /css/util.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:01 GMT
accept-ranges: bytes
etag: "9edfc8aae875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 16406
X-Firefox-Spdy: h2

kaysix.com.my/vendor/select2/select2.min.css

103.8.25.126

200 OK

3.9 kB

URL HTTP/2
kaysix.com.my/vendor/select2/select2.min.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (15195)
Size
3.9 kB (3874 bytes)
Hash
f45e5fc082da6134a102904bdd1770e3
96320f5e24fcbfebf2ac355b38f418bcce36a43a
76e02ba15de86b471de78fecd97c0d63509dd858bdc5dbb42273792799f9fe85

HTTP Headers

GET /vendor/select2/select2.min.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "2fb157afe875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 3874
X-Firefox-Spdy: h2

kaysix.com.my/vendor/jquery/jquery-3.2.1.min.js

103.8.25.126

200 OK

43 kB

URL HTTP/2
kaysix.com.my/vendor/jquery/jquery-3.2.1.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (32058)
Size
43 kB (43351 bytes)
Hash
db11aa687b823bb3bbade0f715273f3b
7ad94e886c59058c77f8886904ca041a6e812100
0083e1fad9387be8a048b2ffaf9f782a61cb7456183eacb42c4f91b25f15b4de

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/jquery/jquery-3.2.1.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "a3b238afe875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 43351
X-Firefox-Spdy: h2

kaysix.com.my/js/main.js

103.8.25.126

200 OK

810 B

URL HTTP/2
kaysix.com.my/js/main.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with CRLF line terminators
Size
810 B (810 bytes)
Hash
5c773cf1f219e5c83107f3e6198b3822
05297f729c9c0e0ce3d923a7579b979b2480abd4
e6210c94494e77759f12babfada0b83ab4306e627cfcd73c9d627f4a8bba3a6c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/main.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:07 GMT
accept-ranges: bytes
etag: "876aaeaee875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 810
X-Firefox-Spdy: h2

kaysix.com.my/vendor/countdowntime/countdowntime.js

103.8.25.126

200 OK

970 B

URL HTTP/2
kaysix.com.my/vendor/countdowntime/countdowntime.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with CRLF line terminators
Size
970 B (970 bytes)
Hash
de502a5fad77a28ce6d6bf9a4e021d17
e566295785400f904e9ab2de2abd35acdce12610
845bec731340af635debf0b4fa86634ea84e1431257b286f7bc1ce4860aad3b0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/countdowntime/countdowntime.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "2119deaee875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 970
X-Firefox-Spdy: h2

kaysix.com.my/css/main.css

103.8.25.126

200 OK

2.6 kB

URL HTTP/2
kaysix.com.my/css/main.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with CRLF line terminators
Size
2.6 kB (2574 bytes)
Hash
d95fa06cf916b356b5c901d9892c739f
8288e2dcb30c5fff0d1599d992c1013ad0265b60
5709b19df62e27b0f59f26b3a1cf273ff81af3fc8339863af53f6c971b2484ab

HTTP Headers

GET /css/main.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:01 GMT
accept-ranges: bytes
etag: "9b9c1aae875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 2574
X-Firefox-Spdy: h2

kaysix.com.my/vendor/bootstrap/js/bootstrap.min.js

103.8.25.126

200 OK

23 kB

URL HTTP/2
kaysix.com.my/vendor/bootstrap/js/bootstrap.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (50904)
Size
23 kB (22929 bytes)
Hash
002e2aca38bbe9f9f6542de84e663a99
ab37d4c6741332c6b922fac15c3dddaa0f2b54c7
6791f581f634baab383b24e154da5467414846b11a871dafc7a56abe2bc4200e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:10 GMT
accept-ranges: bytes
etag: "b81965b0e875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 22929
X-Firefox-Spdy: h2

kaysix.com.my/vendor/select2/select2.min.js

103.8.25.126

200 OK

28 kB

URL HTTP/2
kaysix.com.my/vendor/select2/select2.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
Unicode text, UTF-8 text, with very long lines (32091)
Size
28 kB (27762 bytes)
Hash
bc7c02b28729d13e6647ef4885a81379
28d5b5b1b9889c4d37022ce0c08eea952d414b54
6a60bef35538de7cebb98e905b5b45c26a17b2f62625c3c63f5d954ad4e1de09

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/select2/select2.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:09 GMT
accept-ranges: bytes
etag: "44886fafe875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 27762
X-Firefox-Spdy: h2

kaysix.com.my/vendor/bootstrap/css/bootstrap.min.css

103.8.25.126

200 OK

34 kB

URL HTTP/2
kaysix.com.my/vendor/bootstrap/css/bootstrap.min.css
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (65320)
Size
34 kB (33971 bytes)
Hash
3b1de5fd30eed37c8889621027167c49
f7f230365c1e10cf8a440f734e56904194afd4a9
10968031e688b45b6ca390ce513b0f88faba27aa37827b0fd4db60105c828508

HTTP Headers

GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:10 GMT
accept-ranges: bytes
etag: "6a1d27b0e875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 33971
X-Firefox-Spdy: h2

kaysix.com.my/vendor/countdowntime/moment.min.js

103.8.25.126

200 OK

23 kB

URL HTTP/2
kaysix.com.my/vendor/countdowntime/moment.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (51599), with no line terminators
Size
23 kB (23346 bytes)
Hash
59dbc5a631970ea87abe6ab551c905bf
ee980e91a03a3168600696b8f3e9e59571564935
cc229674771624d52c3657687272a49a9a2aad31e8b15883377481fa5c73b442

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/countdowntime/moment.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "743e4afe875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 23346
X-Firefox-Spdy: h2

kaysix.com.my/vendor/countdowntime/moment-timezone.min.js

103.8.25.126

200 OK

3.3 kB

URL HTTP/2
kaysix.com.my/vendor/countdowntime/moment-timezone.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (6017), with no line terminators
Size
3.3 kB (3271 bytes)
Hash
0df1d0b6a2a7d9254401201f439a33c1
8f8e71ca722ffeff8b622610d6f78c5af04d644b
7b88356fe26d8323a8e32944465bfb5cc042724d757874f5cb71e27d2aba0353

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/countdowntime/moment-timezone.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "2f2bf1aee875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 3271
X-Firefox-Spdy: h2

kaysix.com.my/vendor/countdowntime/moment-timezone-with-data.min.js

103.8.25.126

200 OK

45 kB

URL HTTP/2
kaysix.com.my/vendor/countdowntime/moment-timezone-with-data.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (65536), with no line terminators
Size
45 kB (45138 bytes)
Hash
927b65eb8584a03f3b68d0cae77725e2
93f9c7ccd4d45caf28a214c07e012ae175af6da6
9a8c5137f3f7257e5153cdf37510fa61ccbed7361f4360d0a429f81da7c9116b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/countdowntime/moment-timezone-with-data.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:08 GMT
accept-ranges: bytes
etag: "2af0f5aee875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 45138
X-Firefox-Spdy: h2

kaysix.com.my/vendor/tilt/tilt.jquery.min.js

103.8.25.126

200 OK

2.3 kB

URL HTTP/2
kaysix.com.my/vendor/tilt/tilt.jquery.min.js
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
ASCII text, with very long lines (5640), with no line terminators
Size
2.3 kB (2298 bytes)
Hash
9ec3c77add3e3e0502f8360207a6e74c
164dbadbf6ede7ae5abf4f4de1bd7a8f8b090645
7abeb68b2e182918f3f872f3c95277ab654c806c2124e5d6b3c27bc2bf29e578

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /vendor/tilt/tilt.jquery.min.js HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Wed, 19 Aug 2020 05:22:09 GMT
accept-ranges: bytes
etag: "9ad49cafe875d61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:51 GMT
content-length: 2298
X-Firefox-Spdy: h2

kaysix.com.my/images/bg01.jpg

103.8.25.126

200 OK

102 kB

URL HTTP/2
kaysix.com.my/images/bg01.jpg
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1900x900, components 3\012- data
Size
102 kB (102266 bytes)
Hash
13a321052c7cddae99972e47b12a48e7
95ce8a59e9b4ed973247052d3bda5f175d8c5ae6
b821b01439eab40ed4ee227728aab06052b41cf725d7aa41b05a2c458be40e89

HTTP Headers

GET /images/bg01.jpg HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 19 Aug 2020 05:22:07 GMT
accept-ranges: bytes
etag: "e0a94caee875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 102266
X-Firefox-Spdy: h2

kaysix.com.my/images/bg02.jpg

103.8.25.126

200 OK

185 kB

URL HTTP/2
kaysix.com.my/images/bg02.jpg
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1900x900, components 3\012- data
Size
185 kB (185088 bytes)
Hash
429b566850f67d8f24792fcefd1ba9dc
fa1aca1d6c786de25fd1fa1dc496aea175410ba4
bb02c7a855db20e456b730cef51b2b970096f16d2620c5f58f784c39480ad4eb

HTTP Headers

GET /images/bg02.jpg HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 19 Aug 2020 05:22:07 GMT
accept-ranges: bytes
etag: "a56e51aee875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 185088
X-Firefox-Spdy: h2

kaysix.com.my/fonts/Poppins/Poppins-Regular.ttf

103.8.25.126

200 OK

145 kB

URL HTTP/2
kaysix.com.my/fonts/Poppins/Poppins-Regular.ttf
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 13 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)PoppinsRegular3.010;ITFO;Pop\012- data
Size
145 kB (145312 bytes)
Hash
731a28a413d642522667a2de8681ff35
440dc8992517a306d66e55cb0afed0cfe9b971b5
2425ebbc021bfdd18fe55edbeeb1539d22a217212c14430a7d4d75266a333bbc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Poppins/Poppins-Regular.ttf HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Wed, 19 Aug 2020 05:22:03 GMT
accept-ranges: bytes
etag: "692f5eace875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 145312
X-Firefox-Spdy: h2

kaysix.com.my/fonts/Poppins/Poppins-Thin.ttf

103.8.25.126

200 OK

149 kB

URL HTTP/2
kaysix.com.my/fonts/Poppins/Poppins-Thin.ttf
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 15 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)Poppins ThinRegular3.010;ITF\012- data
Size
149 kB (148976 bytes)
Hash
735aa7d8e35b63068b9113ea2545f0c3
b55ce67e46964f1230492a16ef40a6186335658c
609ae3f057d392507fed90188cf6f9d5f85bb59f613c0decb2ecc9f51312a5cd

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Poppins/Poppins-Thin.ttf HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Wed, 19 Aug 2020 05:22:04 GMT
accept-ranges: bytes
etag: "6bde8dace875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 148976
X-Firefox-Spdy: h2

kaysix.com.my/fonts/Poppins/Poppins-Black.ttf

103.8.25.126

200 OK

139 kB

URL HTTP/2
kaysix.com.my/fonts/Poppins/Poppins-Black.ttf
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 15 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)Poppins BlackRegular3.010;IT\012- data
Size
139 kB (139056 bytes)
Hash
8971d1710cbf4c91bca1b460aec154d7
86a24baced6e165f2d64901ea61b8a6f0efba553
2535406edd2aa55242329705ca9418a07d3a51ae28cadca3ee5becae61aa8987

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Poppins/Poppins-Black.ttf HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Wed, 19 Aug 2020 05:22:02 GMT
accept-ranges: bytes
etag: "9b35c3abe875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 139056
X-Firefox-Spdy: h2

kaysix.com.my/images/icons/favicon.ico

103.8.25.126

200 OK

32 kB

URL HTTP/2
kaysix.com.my/images/icons/favicon.ico
IP
103.8.25.126:0
ASN
#132241 SKSA TECHNOLOGY SDN BHD

File type
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel\012- data
Size
32 kB (32038 bytes)
Hash
7d4140c76bf7648531683bfa4f7f8c22
c072bf985086c9a05c7ecede6eedaa02f76a840c
4d663e7a6b4e495a7261593d9d5e66489adbf75e029604ff6e65c4f0fcd97cd0

HTTP Headers

GET /images/icons/favicon.ico HTTP/1.1
Host: kaysix.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kaysix.com.my/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
last-modified: Wed, 19 Aug 2020 05:22:07 GMT
accept-ranges: bytes
etag: "e597caee875d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Fri, 14 Oct 2022 22:01:52 GMT
content-length: 32038
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe601c322-0073-4b24-8118-55869adbeb98.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12311 bytes)
Hash
a9c5be9ddedaa70a8e03c2caa6612e50
aee7bccc46ab5f49f91f469058958c38b957564a
d2c07961af9586fd776ab456b37516d0da1512bd511411f025c6e624442ec334

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe601c322-0073-4b24-8118-55869adbeb98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 12311
x-amzn-requestid: ea7249c5-3474-468f-95da-f72348359496
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3yJEFDGoAMFo8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634630a0-7e14ca5f47e01f696db40261;Sampled=0
x-amzn-remapped-date: Wed, 12 Oct 2022 03:12:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ob3vdgFus0FNjPIM2kFx4W-lUaeoajDM4CmrcrJH3VP3Qs3yJcji_A==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 04:01:44 GMT
age: 64848
etag: "aee7bccc46ab5f49f91f469058958c38b957564a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations