Report - ozkwn.inclaim.my.id/

Report Overview

Submitted URL
ozkwn.inclaim.my.id/
IP
172.67.153.166
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 16:38:00
Access
public
Website Title
Garena Free Fire. Best survival Battle Royale on mobile!
Final URL
ozkwn.inclaim.my.id/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
72

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
telegra.ph	61046	unknown	2016-03-03	2024-04-22	440 B	11 kB	149.154.164.13
ajax.twitterapis.com	unknown	unknown	No data	No data	1.7 kB	0 B	0.0.0.0
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	463 B	30 kB	142.250.74.106
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	1.1 kB	46 kB	104.17.25.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-23	414 B	33 kB	151.101.2.137
i.ibb.co	13485	2010-07-20	2018-11-25	2024-04-24	433 B	29 kB	162.19.58.159
ozkwn.inclaim.my.id	unknown	unknown	No data	No data	14 kB	1.4 MB	172.67.153.166
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.0 kB	32 kB	216.58.207.227
a.top4top.io	588496	2019-11-19	2019-12-05	2024-04-17	501 B	18 kB	65.21.235.194
l.top4top.io	926491	2019-11-19	2020-01-15	2024-04-17	501 B	20 kB	135.181.63.70
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-24	462 B	18 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena
2024-04-24	medium	ozkwn.inclaim.my.id/	Garena

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	twitterapis.com	Sinkholed
2024-04-24	medium	twitterapis.com	Sinkholed
2024-04-24	medium	twitterapis.com	Sinkholed
2024-04-24	medium	twitterapis.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-1.10.2.min.js	93 kB	2023-03-07	2024-05-05
Pretty URL code.jquery.com/jquery-1.10.2.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-05 19:24:48 Times Seen10439 Hash 628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988 Loading...

	ozkwn.inclaim.my.id/	6.1 kB	2024-04-24	2024-04-30
Pretty URL ozkwn.inclaim.my.id/ IP 172.67.153.166 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 07:13:27 Last Seen2024-04-30 07:53:26 Times Seen6 Hash b4f224e239fa064a0bd28ec64ca26e2f 97db52662d0744d2bbaef5c6f86a1a1e51e069a1 52ef4efe56e29fe30cda018d46a567715c350186d477b0cd386344607ad7ab6e Loading...

HTTP Transactions (47)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css

104.17.25.14

200 OK

5.8 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
5.8 kB (5845 bytes)
Hash
e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56

HTTP Headers

GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:37:34 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1157807
expires: Mon, 14 Apr 2025 16:37:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agLZgHRryBVNQvj8AmFw9mEAOFy2GR%2BSfgL8%2BFWwJ4%2Fm8TfgkHC6qhv0sCPitpruhXhyGxcK2mSiokh0DC0Dne0%2BoW5%2BzYnTBLtLeReoM8TnQq%2FVZxvwqriji2yFguRGK3T84END"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879784cb7b52b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

telegra.ph/file/d8f63c616348e86fb7ac2.jpg

149.154.164.13

10 kB

URL GET
telegra.ph/file/d8f63c616348e86fb7ac2.jpg
IP
149.154.164.13:0
ASN
#62041 Telegram Messenger Inc

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegra.ph
FingerprintA4:8C:17:73:1C:81:F5:01:E7:C4:0B:2C:96:22:5F:A4:80:CE:4A:55
ValidityTue, 05 Sep 2023 19:09:41 GMT - Sun, 06 Oct 2024 19:09:41 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 512x512, components 3
Size
10 kB (10340 bytes)
Hash
2c37914ef06b1c3c379fca122ced0513
23973cafe2108868ef3de6cac3cba6f95647eb58
aab6f15b5d13e0ab98cf29eccbe27af4ebc48056c3155e5f0b1bc39cfd5d6962

HTTP Headers

GET /file/d8f63c616348e86fb7ac2.jpg HTTP/1.1
Host: telegra.ph
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 24 Apr 2024 16:37:34 GMT
content-type: image/jpeg
content-length: 10340
cache-control: max-age=10800, must-revalidate
expires: Wed, 24 Apr 2024 19:37:34 GMT
etag: "7c706a64504c2cb3fefd07de3e81a66d36761c4b"
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

code.jquery.com/jquery-1.10.2.min.js

151.101.2.137

200 OK

33 kB

URL GET HTTP/2
code.jquery.com/jquery-1.10.2.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32072)
Size
33 kB (32788 bytes)
Hash
628072e7212db1e8cdacb22b21752cda
0511abe9863c2ea7084efa7e24d1d86c5b3974f1
0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988

HTTP Headers

GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 24 Apr 2024 16:37:34 GMT
age: 19176048
x-served-by: cache-lga13622-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 119376
x-timer: S1713976655.735063,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2

i.ibb.co/Wg8qQxh/facebook-text.png

162.19.58.159

200 OK

29 kB

URL GET HTTP/2
i.ibb.co/Wg8qQxh/facebook-text.png
IP
162.19.58.159:443
ASN
#16276 OVH SAS

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerLet's Encrypt
Subjectibb.co
Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D
ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT

File type
PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced
Size
29 kB (28789 bytes)
Hash
74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401

HTTP Headers

GET /Wg8qQxh/facebook-text.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:37:34 GMT
content-type: image/png
content-length: 28789
last-modified: Mon, 18 Oct 2021 19:35:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/img/tokens.png

172.67.153.166

200 OK

16 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/tokens.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 480 x 120, 8-bit/color RGBA, non-interlaced
Size
16 kB (15680 bytes)
Hash
28e321820daf1483a6959a6093cdb56f
adb917c80248fb4d93a811bf271e040fe1de79fb
1cd911a6e426446929b5b630569ecb9e212cfb8dff9e920453fb54ea94f5feb1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/tokens.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: image/png
content-length: 15680
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:34 GMT
last-modified: Fri, 19 Apr 2024 18:33:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5E229FaiG1byPXSMDppQ01XHONQK95HPvwgtYKSvaDGOEhhGoR7MqcqA9BcU7F3poF0GVkJC6goyPKAETmaLVCtl5itWee0l0f7RA1xFM9nPxNfDb6vYYTq73siXx3f5cMQaKuAj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d751c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/7.jpg

172.67.153.166

200 OK

25 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/7.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
25 kB (24640 bytes)
Hash
417823719e6cfa032ab103bcd9ddc001
d783c6f4565097023f9205b3c39eee8b103c366a
465bb1e330b8cfb4d8500a5f3512c07d37c11d52df2caf4e91497adf87279869

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/7.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: image/jpeg
content-length: 24640
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:34 GMT
last-modified: Thu, 18 Apr 2024 12:19:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2XAS0rBNJmUw2HSrCWloMTLbiClWkLv64mPkMNm7tPtOWr1Ndm1WM2WKC%2FNzWh1uzc2hC7oxaZbt%2FAt5ZDqwS399iDBwIbtfGtAu2C1Rx%2FTZwKqzvjUX9ohZIjLQlcMMFBJI8reo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d7e1c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/3.jpg

172.67.153.166

200 OK

31 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/3.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
31 kB (30888 bytes)
Hash
1c88d95060ab733a9b2ba6989f2c8f49
07bf082e05dadf6e0eda4c5d2a12397ad23c4b78
fbf3170ab0dac3a8f61f37e3a7cdafd2734b9aaf89e4132777f9a0bf922a0c61

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/3.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: image/jpeg
content-length: 30888
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:34 GMT
last-modified: Thu, 18 Apr 2024 12:17:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8XrEMnUGNCJfVXygu6H9J%2FZ8rOCTremH3RXjX%2B5atxJzLuMBOLuVaPQtkbGyPb%2Fx%2BIRYHzAjP62XCqmwyFeoKZI49D8cPAp07swRtiX302ss45j2Lp1QZhYnhMRu7n%2B682V1TMuI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d791c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/9.jpg

172.67.153.166

200 OK

41 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/9.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
41 kB (41316 bytes)
Hash
0a3bc56ffdbafea57688e25dd7d9df6a
9e99435786062b48bb69c5a1877d5e42a6772c3b
b37ed8c76cdaaf9d952723eecbec7f63714c2d9edd875002df0bc8e2e08e4081

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/9.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: image/jpeg
content-length: 41316
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:34 GMT
last-modified: Thu, 18 Apr 2024 12:20:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dWmjTLJ8Q3yqx9hP6ybit8K%2FP3ZBeLTsVJaiOPznS%2B22pEMSkQhBtNhwtiojJ3fE8mLDxIzqCC9IsS1zRHCttgpN7ebE0h7CxpcIW0HHS2I94MBje9ozI3HhLtNoFI%2B8D%2FfH5LoF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb7d811c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/popup-close.png

172.67.153.166

200 OK

422 B

URL GET HTTP/3
ozkwn.inclaim.my.id/img/popup-close.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
422 B (422 bytes)
Hash
d45afd0750df1473f2835dceb7933be8
25fe98b2ed17c8d857094d1d254fcc2a2f34c363
fd5d4a16b40eb27ac0372e93f5f0f9faa21032d1004a980838024f99798b37c8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/popup-close.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/png
content-length: 422
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Fri, 24 Jun 2022 10:10:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ddRBBswqFmeKW2bu1CDW%2FlGaCTuPhxwa1OoRNcEtozsVkR0O2eMNmusyelvSpOa4HvqY6JwH8B2UA7S1dav2OK3h%2BsfquIQgQ8iyCJujxdcuQ9oiV9ecTGGFLusC0%2B7SWz9lYLu6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb8d931c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/bff.png

172.67.153.166

200 OK

11 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/bff.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 459 x 138, 8-bit/color RGBA, non-interlaced
Size
11 kB (11185 bytes)
Hash
f77fe97fc8f4d06fd93eaf7552c4a3e9
c73f03f3e5a9f460eb83e10ae7312738a36ce720
b695d33c5ece1af9739e89855c4cc718fd6e9550528009ee5ff644cac193cb41

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/bff.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/png
content-length: 11185
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 11:36:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xbaq5DmlLDmeo07BWSTmH2S0b6%2BC320F6SKD20fAKnABaygyqJMf9WNEjwmfzGY1AnaVXvHisjeRvQdApw08iMWrsX6DmHK%2FaHkQlU%2BwZ%2FsZ9qe2mUP91MUS4jCEcRKv%2FYnka9tG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb8d911c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/heade77r.jpg

172.67.153.166

200 OK

634 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/heade77r.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Size
634 kB (634353 bytes)
Hash
f1eb8abe2de00a07c0bcc26b8123cb68
9472c04313084215b2b10950063ca6fb2ae9b37c
2d84b08c1d3e4dce9f22f9f921c808f974de9ba6d1773c16fadc8a6748f55198

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/heade77r.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: image/jpeg
content-length: 634353
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:34 GMT
last-modified: Wed, 17 Apr 2024 17:20:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KkvSha21%2BEtK6qLqjM7pgNZe1KM2y%2Blhx%2B2JOyQFacd69S4WtAnh0%2FkTo3bjWq5qEAksHSxMfiWNbqcEeCxf65opgAuRLOzAzlbnGFwlchsT%2FqqPV2giHA6SYCdjCXp43x2r%2Fh7X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d711c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/5.jpg

172.67.153.166

200 OK

27 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/5.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
27 kB (27367 bytes)
Hash
e2ccdc69aa8d9dc22e63f6ed0dd299a9
87845ddd7b94fb61e19c28ffa9df83b4ca57be6e
c6ec45b17e5977709a95e028613f6ce7418fc5c349a2771ed7e5df7ae59a1955

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/5.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 27367
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Thu, 18 Apr 2024 12:17:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B86d4IKR%2BrAVVhD8pCh2TZ3KxTEbnSojZxqxrcK%2FodZ%2FHLnw0hg8Z6uKkKL8p%2BamrKk%2BUePrGjD7mnJZ5l0HtsAVpaQaogC4KRkFKNwLex22wMVWAygx0ejyJLH2cDS8XEZuvsrI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d7c1c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/6.jpg

172.67.153.166

200 OK

23 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/6.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
23 kB (22569 bytes)
Hash
b92f86713a796e10f6b9ac90a666664f
c4f8d34d0677e07c9ab3321ac00ae26695f708c3
759759f31a3cca1ad1754ed870a0f987c76a1c08452bb2ba23c3a3a6b1d015b7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/6.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 22569
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Thu, 18 Apr 2024 12:26:04 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYHqE2bdGJextTtGNrmCjL4piu5NFxv34LcRDuDLazbbd9glgn0dL0uPRmy7OiwCVApRyYRz%2BJUgfrU3v%2FJAtPCxoVt6RDNNWikKEnUDnsMQhqiTR%2F9GO%2Bz%2BGuyv%2Fi5BT10wI1ZX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d7d1c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/2.jpg

172.67.153.166

200 OK

23 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/2.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
23 kB (22804 bytes)
Hash
950ebcbde26134cbf74bfe2d753761c6
510ec4714b4923eef01c79c29c2736b9f55ceaaf
056a23671e32c208d1e1f83f7ee4396e2e1e72c27ec47257eceb4fbf0905ea39

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/2.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 22804
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Thu, 18 Apr 2024 12:18:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ooB8uElH9xW9aPM3eJWD6iJY6CsWnOZTLPga%2BlkF4F4LlA8h2llPZZEaAzgKpHgUpGgfCS%2BRQOZHaR%2BKR2wRQ44B7WkkeogKDbCt7UYAWzaOCkKXHmMtIbLuZH7Z0M2XSTJtMIPw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d761c06-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0

104.17.25.14

200 OK

38 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 38384, version 1.0
Size
38 kB (38384 bytes)
Hash
a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c

HTTP Headers

GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ozkwn.inclaim.my.id
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 38384
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03ed9-95f0"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 773765
expires: Mon, 14 Apr 2025 16:37:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mq2Slf%2Fmw%2BTR3%2F%2F5Hn9BPrj5RmSLfQdU4H1kGJeFxiIscXhG%2F64R4PVjTk5eczamwMYFip%2FN2f%2BySf2%2FwsMaipKOfIUYA%2Bcg1JjYh%2BG6fFKU25BX3Vth%2BaVNUK2Qr2U%2BdI1tnQSE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879784d5df465696-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/1.jpg

172.67.153.166

200 OK

28 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/1.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
28 kB (28200 bytes)
Hash
e30bcec75f2c4c077d907d4bbcd499be
c3d769b0d136589e4f4c4d6ad4ab62a804cd9257
c54db05983dc834cdacc66e3d4bf97b9714c51c7252dfe2beea29dd290cfd42d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/1.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 28200
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 12:17:46 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z1XIeV30joM3PeqC72sha8OUEIvtO36iZ4ycaQKzM8cU%2BR%2Fwb%2Fkk8%2BFH1Hrzr9lUYd7Y4%2BW6UiF4rSYyYw7Qc9jaMuQD4u6%2FWhrr%2BF7q5pcxhE4SCtIzZA7v1HA%2FFtG4xbpK9O34"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d731c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/4.jpg

172.67.153.166

200 OK

27 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/4.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x480, components 3
Size
27 kB (26863 bytes)
Hash
99b68ca57582eeceab2beb71b7d12baf
29dafd5aeef8e9f765dcd457b773f8008aed5021
a89a0129966d6a3dd8dea5a3c498894dc66821e62668431f6ab474c00e70f405

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/4.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 26863
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 12:18:28 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abor9GZY1Xlk3Z9FnQVErj0OI9lZtfbZb6xzWXi0LYCWMt4IEvGfWFLj0Cf2hO5OZYdKSitASDKU07T6QksRjJIN9j8VZm5cv2Is7BRpVlQxoAcXLpQ5c2xFxHsZ%2BmRtsv9%2B8jk9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb6d7a1c06-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15044, version 1.0
Size
15 kB (15044 bytes)
Hash
4806226b885b3b3d0ae52142f6bfb3af
2ea5cc6d5e4adb874989a2b74bda062296fb1ad3
714088bef569d6981bfae79530ef315f4d6505f302a944ce9063601919977e6f

HTTP Headers

GET /s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ozkwn.inclaim.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 20:39:45 GMT
expires: Tue, 22 Apr 2025 20:39:45 GMT
cache-control: public, max-age=31536000
age: 158271
last-modified: Thu, 24 Aug 2023 21:55:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15044, version 1.0
Size
15 kB (15044 bytes)
Hash
4806226b885b3b3d0ae52142f6bfb3af
2ea5cc6d5e4adb874989a2b74bda062296fb1ad3
714088bef569d6981bfae79530ef315f4d6505f302a944ce9063601919977e6f

HTTP Headers

GET /s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ozkwn.inclaim.my.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 20:39:45 GMT
expires: Tue, 22 Apr 2025 20:39:45 GMT
cache-control: public, max-age=31536000
age: 158271
last-modified: Thu, 24 Aug 2023 21:55:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/img/gamecon.jpg

172.67.153.166

200 OK

85 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/gamecon.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
RIFF (little-endian) data, Web/P image
Size
85 kB (84850 bytes)
Hash
e4dd890e64827b632c6f2a9f7960b709
fe750e7afa5634af5fdd82815a599817c9e227f0
163aad2fec6b167bec769c24b4156222392ebf25b9377d9278e20b811bc24d06

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/gamecon.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 84850
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Wed, 07 Feb 2024 22:04:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRsYN57w4AvikGcGAchnAZ7P6eNGD5FHFsNxLtot37OBEuZQ2f8L46LmjVFKZ6Wx54Ww2F8koyo53wrTrBp%2B5YlHyAu3xz6lP1hb5%2FZ7agEH1TFX0K3p0X7uCanDmCuZ9H7fOT0E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb8d991c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/11.jpg

172.67.153.166

200 OK

45 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/11.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
45 kB (45021 bytes)
Hash
f19212e0972cd4c0cbd1ae3b3e2f9bbc
14a1153ec4b178d369418a9084f79f235633f71b
c6f38a26ae871b4f86d83579fd963468bf2e994b7f058b6047f98f89243ee968

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/11.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 45021
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Thu, 18 Apr 2024 12:19:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3IOGk34kT2ki9mSzGGydbxlDfemRlpmImMC%2Fu9irg9k5l%2F%2F3bnuTXQ7ZxMq2D3RVRIauGlojNQYKtv4djIzPlsY8%2FcjsN7cxK2VJQ5YY3I76Fm8lEXReHeE0%2FP3TZ7sFOCsBKRNS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb7d831c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/10.jpg

172.67.153.166

200 OK

43 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/10.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
43 kB (43269 bytes)
Hash
b21d09600cb975ab27eb9079632386a8
16ce983e518d684c3b60af13624dc642068bbfb9
843810e9023f0e9dafbd0baa8266f5c83eaf4ed7b23975554f0d32cf5de6fb5d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/10.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 43269
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Thu, 18 Apr 2024 12:19:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2FzQYjMDEjrtETNvMCZ%2BUnt9sV8hyky3O1ZAydJYUzA17g0NTafETJATkbWnK81%2B7iM%2B6qOFLVxrh9jhg7juej8Rzwicx0fub8HjaHij%2FsDsJcIhKC9XMBvEnNyT84YNx%2F04q4SL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb7d821c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/8.jpg

172.67.153.166

200 OK

45 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/8.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, software=PicSay Pro 1.8.0.5, datetime=2024:04:06 18:10:54], baseline, precision 8, 480x480, components 3
Size
45 kB (44897 bytes)
Hash
5aef10801a628f517f3fa40666a87f69
15122c24d494069114e94a966b2986375509c341
cb1f70e59a10258ae97521fc26ea10c2987a568835ee042706fb34e51363fa35

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/8.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 44897
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 12:20:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHOIPLtq4Szuo57bFVOXhqJl9QpKe3drf6sbKlzgkir8wvNDsQO%2BY08rpnO20mwpDfFTjiH98Txfmvv%2FtD808G8wzbyC9tvsJgFPVuz0G%2B7Nl9%2BgijwjnVN%2B18lyTLzx5iyXUTzE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb7d801c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/rewards/12.jpg

172.67.153.166

200 OK

43 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/rewards/12.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3
Size
43 kB (42788 bytes)
Hash
a0c69273a26e8758529afbc255447a91
72ee2402ab145333749ab2b3f2a9ea650c17dea3
b7c04cfefa5ca5332c50be84d64b30cdd30a5ce6fd8e9d77c46b9399448056c1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/rewards/12.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/jpeg
content-length: 42788
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 12:20:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RlcevipzgdcZP6QWSJ0Uwi3oe0s3LvlKjx%2BYNbHBSo0u%2BVO8aTZpJ%2Bu2gMlVED15IjlLlq9gJLNyXD3WdvKl89L9P04h1qbEUv%2B4hbGHmaDu%2FJAspTxm3TBNgvZE72%2FHEn2Sa94Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb7d8d1c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/event-theme.png

172.67.153.166

200 OK

19 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/event-theme.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 858 x 111, 8-bit/color RGBA, non-interlaced
Size
19 kB (19354 bytes)
Hash
d46f39c2f22cc01a71d52bdccc050728
5c411127a00ac1c13fc7c212e3212e54c2043228
da72b0015459d762198b95e8fc6111b1689652ae72b449f8fcff4ab6c2ffd53f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/event-theme.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/png
content-length: 19354
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 12:10:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4CDKhqB5RDiVyQIgt7gPhH17QMgV8r3Ok4Pdp2J7KV3CMdqRFbRPp3yT8YqT8yHQefcc0zt%2B1L4Qtf24G%2BxNi1M7%2FyPRgJmOOJb7TWcYrviNeFd8mDo5raT1jy99GKrBk2rv9cT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d5ac181c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/popup-footer.png

172.67.153.166

200 OK

1.6 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/popup-footer.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 480 x 45, 1-bit colormap, non-interlaced
Size
1.6 kB (1606 bytes)
Hash
ff0757ae087db7b747fd2edd05fb05bb
8f545db349797e3499cc283b7d6427a572c3223b
239c98a9d91bad31fba09475147cc928f5a0f076563ac4e21f3182d44209a07d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/popup-footer.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/png
content-length: 1606
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Fri, 24 Jun 2022 10:10:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1emgju8iL7G8pYpGUlO6SUjPxefvpJmzwdSzlpku4C5FRDUJHS6od00pFNlKC7QdrC594Wq%2FgaALy788WKPJmwKGVDKDlcdhFUeBi%2BHTK0H01T9j%2BVysgTXmSZH35zOnSSXrW96G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d5bc241c06-OSL
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/img/btn_item.png

172.67.153.166

200 OK

44 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/btn_item.png
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
PNG image data, 1280 x 433, 8-bit/color RGBA, non-interlaced
Size
44 kB (43770 bytes)
Hash
5275d53998d2f0983901cfb7eff3c15c
fe22b6a215e341dba12443ad785362e0d5c1b726
dafc6643f0ea080b4db78a45ec8f3fe634a53f98922ee14cd2446bc7c430e565

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/btn_item.png HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: image/png
content-length: 43770
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Thu, 18 Apr 2024 11:59:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKe9VyBskW0uKd6LLPwOs%2FLbfqZd6dgVBoE%2Bq8Dlabg3oHiLrJRnRZAjS10K2Twx10VWDbn3DqU6iGlC3fKNDKb3SuPCJ4INDfaIhAgQKs9R618oxH9AMxwdfzItCt%2FhoNXC%2FenZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d5ac1b1c06-OSL
alt-svc: h3=":443"; ma=86400

a.top4top.io/m_1725zobal2.mp3

65.21.235.194

206 Partial Content

18 kB

URL GET HTTP/2
a.top4top.io/m_1725zobal2.mp3
IP
65.21.235.194:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerLet's Encrypt
Subject*.top4top.co
Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2
ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
18 kB (17691 bytes)
Hash
70ded6b0b406f9710307bc35e221629f
7034ec2ff72c936255b04c0890ce8976599380cc
22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65

HTTP Headers

GET /m_1725zobal2.mp3 HTTP/1.1
Host: a.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
server: nginx
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: audio/mpeg
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Thu, 25 Apr 2024 16:14:16 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Wed, 24 Apr 2024 18:37:36 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2

l.top4top.io/m_1725u5z7i1.mp3

135.181.63.70

206 Partial Content

20 kB

URL GET HTTP/2
l.top4top.io/m_1725u5z7i1.mp3
IP
135.181.63.70:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerLet's Encrypt
Subject*.top4top.co
Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2
ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Size
20 kB (19781 bytes)
Hash
ee5b5d12064ae26f839b882edb33da62
6fa93ef00f294eec4ef05276e81813db1e95e346
4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54

HTTP Headers

GET /m_1725u5z7i1.mp3 HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
server: nginx
date: Wed, 24 Apr 2024 16:37:37 GMT
content-type: audio/mpeg
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Thu, 25 Apr 2024 16:14:17 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Wed, 24 Apr 2024 18:37:37 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/img/navbar.jpg

172.67.153.166

200 OK

28 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/navbar.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x172, components 3
Size
28 kB (27487 bytes)
Hash
1719363c262e5dc4a37c9781c363ae26
e3551b470efa9552c27c94ebdbae4b41618d6bb9
f555e12a2bb64109a2d5525f41b0220c200f63d2a0b6cc9525da06f3a67042ab

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/navbar.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:37 GMT
content-type: image/jpeg
content-length: 27487
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:37 GMT
last-modified: Thu, 18 Apr 2024 11:23:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJ%2B9puyhAY6rF%2BL0ZY93sPvh%2FX8m3LVPFA2C28hcK1FSiVo2kMXhCXf1hhHromJcPQW3DqMbM8%2FI35yTKEBOIfpLLdu310279RNXmB8T02XMPGx2m2lIxEK4jzaS77K1MobHHGw3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d59c131c06-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500

142.250.74.106

200 OK

30 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
30 kB (29559 bytes)
Hash
ab33401f844266b7163226fe72713f7d
728add14c488fb24cc7d3aaa6a4def71a02ec140
121461bc92c091b6edd400afdf67adcff981bf0ff97f59804fbca6d93e860e6b

HTTP Headers

GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 16:37:36 GMT
date: Wed, 24 Apr 2024 16:37:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/favicon.ico

172.67.153.166

404 Not Found

6.7 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/favicon.ico
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
6.7 kB (6736 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 16:37:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=citnbM6Hayntndz34EiWfdEve246Rnw4Tau%2Bjm5t8USl3U5P7nrOjaLMjqNOn5mKi1OqG6CMTqts7Jmid1AR7m2uQlOXKuip7vYGR4K8Xdqwg%2BAwkX16JICWLSdsiIRccO5rNqxF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784dc0f791c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.11.207

200 OK

17 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (30837)
Size
17 kB (16841 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:37:34 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 13350829
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879784cb7e6056c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/css/style.css

172.67.153.166

200 OK

7.2 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/css/style.css
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
7.2 kB (7177 bytes)
Hash
747d034c7700c73e05e1b6f6fd02f5ed
592b93b81853fa04e5895b9bab34774c65bee693
0de37de6202d786d56ba6afed2fbbbe24f73223323c3eb33bc17ee92fe58cb78

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/style.css HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:36 GMT
last-modified: Fri, 19 Apr 2024 14:12:34 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym8uJ2%2FA0zvwqlTqanG1Hyx6oC376h2I%2BPiAcpxDWKWAEZwKjg2HZT0Pg0RpoPx1cZ8%2FhEzP5jU9POUFJgh8yT2R5Jkp6zYE92pzXm8XB1%2BcRmNsqviepJ2OJdTyWs2GHPS7SIGQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879784cb4d621c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ajax.twitterapis.com/ajax/libs/jquery/2.1.3/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.twitterapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://ozkwn.inclaim.my.id/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.twitterapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ozkwn.inclaim.my.id/js/showHide.js

172.67.153.166

404 Not Found

1.3 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/js/showHide.js
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
HTML document, ASCII text, with very long lines (1285), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
94f08a3a6562f7f079c4f5a67b7260e2
cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823
44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/showHide.js HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 16:37:35 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cv7BOJo7MeY7Qrz0PoUpskqOBMAPujDJewlb1PXcRHVJCVxTZRFxlKYuKH8ag2cVFXti43%2FG1ELQMeo9vuS%2F7WaHgewFFRHiLgX2FYR0qOH0ivi6mPH%2FX520T4Rj6iRFwv0EQwjo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cbada51c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/js/showHide.js

172.67.153.166

404 Not Found

1.3 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/js/showHide.js
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
HTML document, ASCII text, with very long lines (1285), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
94f08a3a6562f7f079c4f5a67b7260e2
cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823
44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/showHide.js HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=65DOhaBG8R1GfJqE0JfS1nafjDcvOu8hS6GwnwERO2a6Qgt73vCH8rli2oChT3HzhWVwo6l%2BOTrrbYVMYGuXlNWhOOzAfq0xDx5JqkB%2F6l7eEgn2LkUOUO22ow938%2FNjtFoFAaZr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d7ed451c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/css/animate.css

172.67.153.166

200 OK

82 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/css/animate.css
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
ASCII text, with CRLF, CR line terminators
Size
82 kB (81519 bytes)
Hash
14f7a07011a763336109ffff5bd0d4a1
842fea0dc0aa64bfcfd24eb77fc880e73bce5b12
8e320187d4f00e2b9aa97f93f389c5c1c8ba9aa2cbb07f757a9ec0a2c59279f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/animate.css HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Fri, 24 Jun 2022 10:11:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7odJvslabUdUm4CYxBVp7f183bQVHWauaez1NoSsRZX3mbdhv8jGV0YUpak5QvfoZShcuOWHhkrNmnyBgo%2BoeekdfESPFtoPLMcZlIFKcqTZu1a2eeToVK%2Fi7g5Je%2FLLlBEB%2B4Gi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879784cb5d631c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/

172.67.153.166

200 OK

30 kB

URL User Request GET HTTP/2
ozkwn.inclaim.my.id/
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type

Size
30 kB (29485 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET / HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:37:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ICSVKMcStajwxSfJe8%2BXWGIrADORi57m%2FrKnoCOJOOZjVWmZIn%2FnclElY4gI4Bt%2Fy1YAhSxRuxY6JUvnbsl1ox%2F9QJXbUrYzPGQ2JkzdnKRP2wx6SRCaOmi7kYg1P7vk562V9hgG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879784c7488d7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ozkwn.inclaim.my.id/js/script.js

172.67.153.166

404 Not Found

1.3 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/js/script.js
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
HTML document, ASCII text, with very long lines (1285), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
94f08a3a6562f7f079c4f5a67b7260e2
cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823
44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/script.js HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8HYMGb%2Ftziq2PPUgtrIq6fns8cJlzUvX1i7U%2FTOvRJgkS%2FTOHva7ZdNNErFDmEb5H2EBTYOF5ZJikL6KTz7J%2BKSaIzk%2FoCK1Q2VyYRsj%2B4YGLc5NjqVXQzPAOtN%2B09wJUM8tE616"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784cb9da41c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/css/login/facebook.css

172.67.153.166

200 OK

3.7 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/css/login/facebook.css
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
ASCII text, with very long lines (4127), with no line terminators
Size
3.7 kB (3699 bytes)
Hash
237151604596d0e43759c893022b147e
b1a99fde79b252a90dc6b061716afe5850f678c8
145b21f00c40ca6514e0a4a1030206815e4ba99c7b4819ee9e9fa626c6cb7324

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/login/facebook.css HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Fri, 24 Jun 2022 10:11:44 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sjPIR%2Fv6NTX%2FGu3RyykKJcAjZZ9Nefn%2F2n53GqP3awCSJ0e8KgeXLkSVx7UPfz%2BTxcLkObAjMj7zGGTFJur%2BKYVSxqP2C0x4%2FzjKS9cYC6HgKO%2BivlQ%2BPUbxyYxhh%2BhS5ZE9mTiG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879784cb5d651c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://ozkwn.inclaim.my.id/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.twitterapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ajax.twitterapis.com/ajax/libs/jquery/2.1.3/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.twitterapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://ozkwn.inclaim.my.id/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.twitterapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ozkwn.inclaim.my.id/img/container.jpg

172.67.153.166

200 OK

29 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/img/container.jpg
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1399, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=527], progressive, precision 8, 527x1399, components 3
Size
29 kB (28662 bytes)
Hash
656a9909c48f54651964f1c8367701a6
089fb0764624c59412418aadac080f7b3e5f7954
49992ecbf7cfd2699670e3f0e5cd55ab9583ccc214f84fcbc6ab9e4e61b81a77

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /img/container.jpg HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:37 GMT
content-type: image/jpeg
content-length: 28662
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:37 GMT
last-modified: Fri, 24 Jun 2022 10:10:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L0X6WkWVxbp7GcxchCo%2BRkeRBa0P75I4GUNnppuyvZkr%2B6Cj3rRhNJ3egyky7bg4h7BG%2BqTpWzNtraMTrvHmcaBcE%2BEuHRpqi%2F8z70alfMn5kAH%2FlaRUhivqnHK6la8OG4FzKRr%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d59c121c06-OSL
alt-svc: h3=":443"; ma=86400

ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.twitterapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://ozkwn.inclaim.my.id/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.twitterapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ozkwn.inclaim.my.id/css/login/twitter.css

172.67.153.166

200 OK

2.5 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/css/login/twitter.css
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
ASCII text, with very long lines (2805), with no line terminators
Size
2.5 kB (2510 bytes)
Hash
7eb8548950ccbfbd2bc960987422c35b
f1dd90b00845e5e9c76a1f3e0c86046639ce82c3
788e3b67027bc969d860068f7a732f169160a43271eba9169eb534211a2628d5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /css/login/twitter.css HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 16:37:35 GMT
last-modified: Fri, 24 Jun 2022 10:11:56 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9AEWOyZiakLk1Z62EVsdwjTJUKuoJBS1HjBEBHeG2BipH%2BJXnRmhrSm0IUKT7xSVsggg3GgMiOeRNKBw7kcxSByqsyjm%2FSGAmPWxF%2Fk08JzjU3On9DeAZk1Mjymjr9IANYbDkHOL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879784cb5d691c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ozkwn.inclaim.my.id/js/script.js

172.67.153.166

404 Not Found

1.3 kB

URL GET HTTP/3
ozkwn.inclaim.my.id/js/script.js
IP
172.67.153.166:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ozkwn.inclaim.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectinclaim.my.id
FingerprintFA:44:D8:1B:4F:AD:8F:BB:66:07:6E:B4:FB:01:E2:88:2D:29:EE:76
ValidityThu, 28 Mar 2024 14:21:37 GMT - Wed, 26 Jun 2024 14:21:36 GMT

File type
HTML document, ASCII text, with very long lines (1285), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
94f08a3a6562f7f079c4f5a67b7260e2
cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823
44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /js/script.js HTTP/1.1
Host: ozkwn.inclaim.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ozkwn.inclaim.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 16:37:36 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fYP%2Bb54xeq3436C%2FsFvn96lpevZUcUEH%2B5Gq6p98jYs%2FhjtA8jOZv726rTsDP5hEfb%2FWqRQcEhBIDYuK2nqYjLMsgOJaLRuM748zitzIP%2FTiekD6cJhFin3QEA6WYq4sCoxnES0y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879784d67c7c1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (47)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN