grupwateigo.terbaruxx-xyz.my.id/bergabung/img/fb.png
188.114.97.1200 OK 29 kB URL GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/bergabung/img/fb.png
IP 188.114.97.1:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
File type PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Hash 74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /bergabung/img/fb.png HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: image/png
content-length: 28789
last-modified: Sun, 12 Dec 2021 19:09:22 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 54
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Qzv%2BDaZqWCVjvo9Dgexi3jLAsWpqWF2YvOgyykZiqp2IFno59%2FHZcRyqih1I39jV5Z0eV4WT0HWDxrR%2FFNKixO3OtZwl9Zj5wVPBlF8CG0Dqdlzx42tVd%2Fy4aCY9AGe8cX9ZDBDCtb1qhA8TebqpbPc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 828db067cbf8568b-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css
104.17.25.14200 OK 17 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css
IP 104.17.25.14:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65317)
Hash 6386fb409d4a2abc96eee7be8f6d4cc4
09102cfc60efb430a25ee97cee9a6a35df6dfc59
0df5a33710e433de1f5415b1d47e4130ca7466aee5b81955f1045c4844bbb3ed
GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: text/css; charset=utf-8
content-length: 17041
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "623a082a-4291"
last-modified: Tue, 22 Mar 2022 17:32:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2085132
expires: Sat, 09 Nov 2024 03:43:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NQTJBLvIwBs%2BtfAq9Tduu3NgnWMKeS0WZV3WWditdLKOc1YetawydfZ6LHSuxZgsDqidxCBgoj6NEJnhr2WPeJPAV6VFnEiSGBpVUysmEv4TSEyLoPONZrb1m7yC1%2ByKYc82HwFv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 828db067d9300b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/stylesheett/jquery.min.js@main/slim.js
151.101.65.229200 OK 42 kB URL GET HTTP/2 cdn.jsdelivr.net/gh/stylesheett/jquery.min.js@main/slim.js
IP 151.101.65.229:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hash f38b0ad9edf7a744f15cc89aa31f5553
d269ce63702073df08cd25d1ce356fa0fc80605e
30fd54eee527bda253b3f9c77b8bf581954036ea99bd8af3643a4ebf87b5b409
GET /gh/stylesheett/jquery.min.js@main/slim.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"2c68c-0mnOY3Agc98IzSXRzjVvoPyAYF4"
content-encoding: br
accept-ranges: bytes
date: Mon, 20 Nov 2023 03:43:30 GMT
age: 35779
x-served-by: cache-fra-eddf8230134-FRA, cache-bma1654-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 42436
X-Firefox-Spdy: h2
grupwateigo.terbaruxx-xyz.my.id/bergabung/img/pp.png
188.114.97.1200 OK 16 kB URL GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/bergabung/img/pp.png
IP 188.114.97.1:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 5a09c2a4bf8dda5fd038a992f246fd82
f1882004668613945f13e7185d2bcf75f2ee8419
19a733b22686d95b81b3990690e16dab03bb0ce1a13aaa5b751e6cea4ebb51bc
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /bergabung/img/pp.png HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: image/png
content-length: 15784
last-modified: Sat, 03 Dec 2022 02:24:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 55
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vGVlGi6xKTxurhuHnylrkSOaKn1UxZcW22umJ538BuVfwSlufj3qFzGa1XmweQHA%2FI9Xab6cw%2Baha%2Bm1qlR5YXndbNdz1exeCwmSVD%2Fln4aDfyQouui%2BUaZnLsZ4LMCT42qP2LBOX53isJiK70iO1JSW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 828db068ac49568b-OSL
alt-svc: h3=":443"; ma=86400
www-cdn.whatsapp.net/img/v4/whatsapp-logo.svg?v=46fe27fc8
31.13.72.52302 Found 0 B URL GET HTTP/2 www-cdn.whatsapp.net/img/v4/whatsapp-logo.svg?v=46fe27fc8
IP 31.13.72.52:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerDigiCert Inc
Subject*.whatsapp.net
Fingerprint95:33:DF:21:C2:2C:1A:59:40:0F:BA:A1:99:23:F2:E2:11:96:3E:89
ValidityTue, 29 Aug 2023 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/v4/whatsapp-logo.svg?v=46fe27fc8 HTTP/1.1
Host: www-cdn.whatsapp.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.whatsapp.com/img/v4/whatsapp-logo.svg
content-type: text/plain
content-length: 0
server: proxygen-bolt
date: Mon, 20 Nov 2023 03:43:30 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.whatsapp.com/img/v4/whatsapp-logo.svg
31.13.72.52400 Bad Request 2.5 kB URL GET HTTP/2 www.whatsapp.com/img/v4/whatsapp-logo.svg
IP 31.13.72.52:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerDigiCert Inc
Subject*.whatsapp.net
Fingerprint95:33:DF:21:C2:2C:1A:59:40:0F:BA:A1:99:23:F2:E2:11:96:3E:89
ValidityTue, 29 Aug 2023 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2793)
Hash f1ac791356b3b6a884f9d3341fabe1da
85c8d6a72ce89e3254dea435474c3ee04d0c8cbd
87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d
GET /img/v4/whatsapp-logo.svg HTTP/1.1
Host: www.whatsapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 400 Bad Request
content-encoding: br
reporting-endpoints:
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: fsJXHqK9koW3RGpd2eAQO5k6wv4rGkoQ97s6W+7UjWt78ZvaFs5nbBPimgaSP5erV/CF+Rba4gvQJrXkSpYNmA==
content-length: 2460
proxy-status: http_request_error; e_clientaddr="AcKU5y6qdLTIFrfSBGF9RJ28KrJzKWSZ_FjY2lPyPu-UCVP4i2ORVZ7QvqFjiED7dmRHRPop1dU2x67cxBnyi1mkhLUf1dclMvYpJBg2DeIy3XVWvw"; e_fb_vipport="AcJ2M4LKs3109p9ysDxOodjdu5tUTyLwHyLNUlLQRUHy31SE_FJeqJZNV7g-"; e_upip="AcIDidFUNzmJHnV_HZrw5T6SHch7SvsVQen-PFBWbFyRVGEPj8Mnv0D6AwTWOUwycOSe5JNbgf90IYmaBiIbBSopbB_q399SAFk"; e_fb_hostheader="AcIagxkQlIr9EaqnJUyHGSCKwzKOHQuvhKMB49-2RcQ_kZql80xtbY3dzijh96LfW_J0qU225iwwgQ"; e_fb_vipaddr="AcK_J3X_hlYGnaZyvMGnUoyxppylaqQm0y24SbeumegEUcP1ZJG8VYSYTnRX_nzxAEH6O4skYhxwjQyVnR_m6GvOYvV_KtBOTQ"; e_fb_requesthandler="AcIKkVVt8OP5W0R-eMpfxxcSp60KqXLYM9c6W5DarPdI_AD1hQvFUnqrwcGAn1hmmKexOXjTkx4"; e_fb_builduser="AcLPfaDnh5ds13Ye-cBulqTuCZnPSLA3LYQO7NnVUwvQ6D8TXTUckyu-xZ0lR6Z1FUM"; e_fb_binaryversion="AcIKxyMd_90cbXJg8md-QFsZ4RmgoVR6ET4iQzvkdR4vLeN2X5EktlEnyt0k-aTXVkIgTKXW7bG76mMjVzL-Amq0ZhQTo4nn1wU"; e_proxy="AcL12HpSyRifF4c3u6FdajncchJMingYJ9onUHk1F7SRpkQbyxklYDQnamdAfP8KLwOA_0ySFw8sJoWAv8S5", http_request_error; e_clientaddr="AcItoqYKAPf_YP2CjELmgq0FOnBbM2wunhK_tR23-rJmcL4ttr0sx6V5CRr2z3XkibuSnN5bh4Pkiu7M"; e_fb_vipport="AcIkOIOMclrxDcueElbXxSVfvtEWMZZJoCJ5RvgeqlpiiC7JXoiqwydYT-4s"; e_upip="AcJUHMdgF1ypt_Z1_aAwvrJfCD1BLz3U-aSk11kC66bnNsUSIo176jsjPKJrDjoJjKmjoHJq476Vcx-qmpy7COMiHU8n1ul3Jg"; e_fb_hostheader="AcJGYfcEitkpiWZubr-bDv5O4GB-vHAnCC2rruON9B6_BzNHiu12o4QGID7SCJi7GXUSIYahFkmI6w"; e_fb_vipaddr="AcLgTP1CEa98SmTZykVa9rlyPmGDL7eHGpgpTbXjeSPQMh5vSQrVfMRH0zF2hVNBknV-Egc"; e_fb_requesthandler="AcJWyFvwpMrLpi9EMrjBtTzElU9wbmeGpVyQH23q_6ufITMJMJ_S24Klrny9Q99ee1foXfygPZnabvrT"; e_fb_builduser="AcIa10b3DP8sXXHoTjs1Lge6Mb2Swp_riJVfhyfZ9kFfF1-XWFV5m_4g0qevGJIesC4"; e_fb_binaryversion="AcJYUhlNw0AvVIzBu4qH-s8XjxuIggs5wlNoNxwmOWq6UGZ7c8mMgSljF964iU1yq1_LIrmd2qW880VpRnbR7gCTms5x1R9K0Eo"; e_proxy="AcJaFMoIUUqitAxn2NDO-A_abqPAy2xr6AN2TGJjAj6xetYI2nb0WhyA_PslTK80CWIEYQZDIJ6VI2ZE"
date: Mon, 20 Nov 2023 03:43:30 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
z-p3-static.xx.fbcdn.net/rsrc.php/yz/r/lOol7j-zq4u.svg
31.13.72.54200 OK 1.1 kB URL GET HTTP/2 z-p3-static.xx.fbcdn.net/rsrc.php/yz/r/lOol7j-zq4u.svg
IP 31.13.72.54:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint8B:9C:2B:50:8F:D9:91:6A:7F:35:F3:77:A4:26:7C:F6:7F:60:B5:34
ValidityTue, 29 Aug 2023 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2647)
Hash 6b3ee5e3877cc19d1154cbe98eea6f66
56d4b7556cebad6129ebb61a980d5964be476b4a
533ef6670e3d9c0e44718d0afa43f2edda11b58586e9da4e8f621145cf84d4d2
GET /rsrc.php/yz/r/lOol7j-zq4u.svg HTTP/1.1
Host: z-p3-static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: image/svg+xml
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 10 Nov 2024 00:56:37 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints:
content-md5: vQiA34i6I9zhuN5oMyk4pQ==
x-fb-debug: dM+KrUnAhOaTjyHOZ7tW9VCuKcIIrw94euF3javezkzswKrXV/tqMgQpVxhpd/7f95Uue2UMgSvUQau+C489rw==
content-length: 1145
date: Mon, 20 Nov 2023 03:43:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
z-p3-static.xx.fbcdn.net/rsrc.php/yz/r/lOol7j-zq4u.svg
31.13.72.54200 OK 1.1 kB URL GET HTTP/2 z-p3-static.xx.fbcdn.net/rsrc.php/yz/r/lOol7j-zq4u.svg
IP 31.13.72.54:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint8B:9C:2B:50:8F:D9:91:6A:7F:35:F3:77:A4:26:7C:F6:7F:60:B5:34
ValidityTue, 29 Aug 2023 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2647)
Hash 6b3ee5e3877cc19d1154cbe98eea6f66
56d4b7556cebad6129ebb61a980d5964be476b4a
533ef6670e3d9c0e44718d0afa43f2edda11b58586e9da4e8f621145cf84d4d2
GET /rsrc.php/yz/r/lOol7j-zq4u.svg HTTP/1.1
Host: z-p3-static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: image/svg+xml
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 10 Nov 2024 00:56:37 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints:
content-md5: vQiA34i6I9zhuN5oMyk4pQ==
x-fb-debug: dM+KrUnAhOaTjyHOZ7tW9VCuKcIIrw94euF3javezkzswKrXV/tqMgQpVxhpd/7f95Uue2UMgSvUQau+C489rw==
content-length: 1145
date: Mon, 20 Nov 2023 03:43:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
111.13.153.152 600 B IP 111.13.153.152:0
ASN #9808 China Mobile Communications Group Co., Ltd.
Hash 416babca4b4f5669364bf04557854b08
74a89f1ef852659831e379d2c6a3cc4acd5c9fe2
79b5671ed68a4d584ea988c79790f831b0be65bcf0deee899e77c4528a5367be
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 20 Nov 2023 03:43:32 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 827b97b078dd67d9-SJC
ETag: "74a89f1ef852659831e379d2c6a3cc4acd5c9fe2"
Expires: Fri, 24 Nov 2023 22:57:18 GMT
Last-Modified: Fri, 17 Nov 2023 22:57:19 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb2
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjnbydvl44:16 (Cdn Cache Server V2.0), 1.1 12124589:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 655ad5e4_12A146831_11025-28180
via: n173-159-129.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17004518128e287c5acc1d8885fe691fcae5e4f354
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=4, edge;dur=0
ocsp.trust-provider.cn/
111.13.153.152 600 B IP 111.13.153.152:0
ASN #9808 China Mobile Communications Group Co., Ltd.
Hash 416babca4b4f5669364bf04557854b08
74a89f1ef852659831e379d2c6a3cc4acd5c9fe2
79b5671ed68a4d584ea988c79790f831b0be65bcf0deee899e77c4528a5367be
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 20 Nov 2023 03:43:32 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 827b97b078dd67d9-SJC
ETag: "74a89f1ef852659831e379d2c6a3cc4acd5c9fe2"
Expires: Fri, 24 Nov 2023 22:57:18 GMT
Last-Modified: Fri, 17 Nov 2023 22:57:19 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb2
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjnbydvl44:16 (Cdn Cache Server V2.0), 1.1 12124589:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 655ad5e4_12124589_33003-9557
via: n173-159-130.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1700451812e9c572540f0c57b507d903517257f5f7
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=7, edge;dur=0
na.apps.amsoveasea.com/swoole/?actid=2020&r=index/getCountry&_only_service_response_=1
129.226.2.89200 OK 55 B URL GET HTTP/2 na.apps.amsoveasea.com/swoole/?actid=2020&r=index/getCountry&_only_service_response_=1
IP 129.226.2.89:443
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectna.apps.amsoveasea.com
FingerprintA1:C8:27:B5:06:21:F0:D9:56:0E:8A:07:87:B3:F9:02:A2:7A:9A:6C
ValiditySun, 23 Apr 2023 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f805925944ef9fa79bd0a02e00e2e99
ceb834e8fd10d2f4c8f2b1e6d8800b9e845834df
3ef013039e6df373c7ef0730658c403527318c307c67145ac08c728492392800
GET /swoole/?actid=2020&r=index/getCountry&_only_service_response_=1 HTTP/1.1
Host: na.apps.amsoveasea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://grupwateigo.terbaruxx-xyz.my.id
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 20 Nov 2023 03:43:32 GMT
content-type: text/html
content-length: 55
server: nginx
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
grupwateigo.terbaruxx-xyz.my.id/bergabung/
188.114.97.1200 OK 9.9 kB URL User Request GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/bergabung/
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10751), with no line terminators
Hash 96ec734e8118d4107af96cb88ee46733
02b92f6787504b90ab28dcae6b3f3e2c9c72b09a
cb1d150a66a35509ca885abd19c8570c881eb7d02bfbc583674444b689373bf0
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /bergabung/ HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: text/html
last-modified: Sat, 03 Dec 2022 02:33:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jKXtpxUD0M6HGIn5Y44Z0as3tvVMfpXj5UzyOd4lLOx9wyoVu%2FdYum%2BRcyKunI5hs34ezs%2FPt11OQ9W4hru92sh0aNgfGnytE0bgeTsTa7QNXDGo%2BIl2B6K2ATPVd69DN4DgH2RST%2BeYmfmbN5lnT5Gx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 828db0660b53568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
grupwateigo.terbaruxx-xyz.my.id/img/v4/icon-chat.png
188.114.97.1404 Not Found 315 B URL GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/img/v4/icon-chat.png
IP 188.114.97.1:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /img/v4/icon-chat.png HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/bergabung/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 55
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JC4sQ77Ma5qjkcRhHXbXzrPcF35SMosmjT7iSm%2BMr0xyCZCZXusFFb5yxKGbZgfk7%2B5kuSP5Az607XxxhXnbViWp8e6nvwTEQDtAhjw4Dxyq4%2FwymsjRKABl%2BNUdbIzQaMbLuyzRlo9oK3iiGTztR%2BDk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 828db068ac47568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
grupwateigo.terbaruxx-xyz.my.id/bergabung
188.114.97.1301 Moved Permanently 9.9 kB URL User Request GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/bergabung
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /bergabung HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: text/html; charset=iso-8859-1
location: http://grupwateigo.terbaruxx-xyz.my.id/bergabung/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=amzhy3HslendPEnEqvZ2Aysf8ZQgt9kFW65qCyjnjKSdgC5czhigVZ2ybTmxFDuNHa6g9s11%2F4fwkFg7NtBtexs0PeufMX%2BPex1mvRmPI4SMGL8lG1d%2BzI82ojhKFopT6P2uZY2gFJjMy3PpiKyqBkK0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 828db064cae9568b-OSL
alt-svc: h3=":443"; ma=86400
grupwateigo.terbaruxx-xyz.my.id/bergabung/css/style.css
188.114.97.1200 OK 261 kB URL GET HTTP/3 grupwateigo.terbaruxx-xyz.my.id/bergabung/css/style.css
IP 188.114.97.1:443
Requested by https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Certificate IssuerLet's Encrypt
Subjectterbaruxx-xyz.my.id
Fingerprint31:64:19:C7:76:94:92:4F:8E:5E:F2:F8:0F:E6:2E:04:95:B5:7B:DB
ValidityThu, 02 Nov 2023 08:10:23 GMT - Wed, 31 Jan 2024 08:10:22 GMT
Size 261 kB (260643 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing WhatsApp
GET /bergabung/css/style.css HTTP/1.1
Host: grupwateigo.terbaruxx-xyz.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grupwateigo.terbaruxx-xyz.my.id/bergabung/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 03:43:30 GMT
content-type: text/css
last-modified: Mon, 30 May 2022 20:25:52 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 55
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ObwO9mV4Xzz8YFJvhgURUHwU0iQ0KWxotSBu2i9kITtHInsIDSCMgeReMdJHXqdKXtuovtiDiwm%2BvuZ5ARp4ujmGg4fHafyiy2M28rFErBPrprqvUsWSeDG%2FrRuL8gZjkVQ6lZTBcdvZvg1NhdOKRKbA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 828db067bbf5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400