Report - hxhxtycf.fand.my.id/

Report Overview

Submitted URL
hxhxtycf.fand.my.id/
IP
104.21.23.254
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 17:23:45
Access
public
Website Title
Whatsapp
Final URL
hxhxtycf.fand.my.id/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	466 B	5.4 kB	104.17.25.14
bagasarya.xyz	unknown	2022-06-30	2022-07-01	2024-04-13	867 B	42 kB	172.67.189.18
hxhxtycf.fand.my.id	unknown	unknown	No data	No data	2.7 kB	148 kB	104.21.23.254
i.postimg.cc	23840	2016-06-11	2018-04-11	2024-04-19	4.1 kB	903 kB	162.19.88.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp
2024-04-19	medium	hxhxtycf.fand.my.id/	WhatsApp

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	hxhxtycf.fand.my.id/	6.7 kB	2023-07-20	2024-05-01
Pretty URL hxhxtycf.fand.my.id/ IP 104.21.23.254 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-20 17:19:18 Last Seen2024-05-01 08:18:46 Times Seen106 Hash f323bc8efe549dac09d924d081e6733d 57d825a14fb072d060bd2abbb2937f8b4df8bdbc 65f60c40854eed7f0e4787e9744e619e894a1d56a26f1f4a28a8e4e7dae40d18 Loading...

	hxhxtycf.fand.my.id/bagas/js/bagas.js	90 kB	2023-03-07	2024-05-02
Pretty URL hxhxtycf.fand.my.id/bagas/js/bagas.js IP 104.21.23.254 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:20 Last Seen2024-05-02 01:56:34 Times Seen4277 Hash 7c14a783dfeb3d238ccd3edd840d82ee ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b 80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0 Loading...

HTTP Transactions (18)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css

104.17.25.14

200 OK

4.4 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (23577)
Size
4.4 kB (4364 bytes)
Hash
04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd

HTTP Headers

GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/css; charset=utf-8
content-length: 4364
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65993750-110c"
last-modified: Sat, 06 Jan 2024 12:19:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 257743
expires: Wed, 09 Apr 2025 17:23:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w0PM3CjrZp1lYVNI%2Bx6uk8A8Ss1t%2FQiSolymeWSSMU%2FQ4c5ocqGDfajpn6dKYKyYSk%2BevGiSY71wHLJAzV0O72bZVNI6AgcAZfHYG4nxVwOCotvAP9z5Y%2BSqhUS8FUvymXuRyMHo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876e94f35adab517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bagasarya.xyz/img/info/navbar.png

172.67.189.18

200 OK

8.5 kB

URL GET HTTP/2
bagasarya.xyz/img/info/navbar.png
IP
172.67.189.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectbagasarya.xyz
Fingerprint59:49:3D:66:65:A0:62:ED:42:29:ED:97:BC:24:16:4B:A0:51:CE:59
ValidityWed, 27 Mar 2024 05:35:07 GMT - Tue, 25 Jun 2024 05:35:06 GMT

File type
PNG image data, 904 x 339, 8-bit colormap, non-interlaced
Size
8.5 kB (8459 bytes)
Hash
f29c416a7c6f18ba0c0deb4980763c9d
56c7bfbf2c9a7a2be2e2214b0586c11af8e852bf
7f37cb926c06378327ad2a753c7119291b2ead796a6f588a8374de651ec72a8c

HTTP Headers

GET /img/info/navbar.png HTTP/1.1
Host: bagasarya.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/png
content-length: 8459
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 16:12:07 GMT
last-modified: Mon, 06 Mar 2023 02:41:35 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 4273
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WsY3gAxQtnicH6X7mtIhTCaOcHC9SOzezlDUrZrhP1sqRxsteZLORjZIO1iL8HhhXiKSz1QOIoYwsAGL9qX5TRucDUWB%2BT1e6L34mejEZ%2FeoYSB9gzhJ9KPiFnsBD2H6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e94f399687130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

hxhxtycf.fand.my.id/

104.21.23.254

200 OK

36 kB

URL User Request GET HTTP/2
hxhxtycf.fand.my.id/
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (325), with CRLF line terminators
Size
36 kB (35578 bytes)
Hash
f204865c77bcbd7c1ac73dad528e634a
b0d707924a1154f11cf178516db0fa5ab64a6b44
884128cf74f8735a047bf892a25631f85c2674f3d15b031cc2ecb40ea046f065

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET / HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gl81rCp7MoR1MU2Q%2B2o2t%2BI96imrJ%2BXKBT%2FYfTZHn9UVgJXTZotcIEYsaBN%2B214qaYgugHvytHQqlAiv01AcePtpzs0841XLFjTJIDD6nmai3BqKeFv9qWRw2gi%2BWsHSv1nfN5A%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e94f1bb14b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

i.postimg.cc/YCbSGZPN/IMG-20230417-085458.jpgXzAyNDkyMjMuanBn.jpg

162.19.88.68

301 Moved Permanently

162 B

URL GET HTTP/2
i.postimg.cc/YCbSGZPN/IMG-20230417-085458.jpgXzAyNDkyMjMuanBn.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /YCbSGZPN/IMG-20230417-085458.jpgXzAyNDkyMjMuanBn.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/html
content-length: 162
location: https://i.postimg.cc/YCbSGZPN/IMG-20230417-085458.jpg
X-Firefox-Spdy: h2

i.postimg.cc/zGVmm9X3/IMG-20230417-175333.jpg

162.19.88.68

200 OK

101 kB

URL GET HTTP/2
i.postimg.cc/zGVmm9X3/IMG-20230417-175333.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1096, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 788x800, components 3
Size
101 kB (101241 bytes)
Hash
52fd25879a0da90d0f639fbfed88c8ac
cf644a0c5e23d1a058578ac65889b1863aca4d29
0958e4f7cb09689cdff71042d60f84acd1424cf6b869dc1d1fa7bd8c5bc05370

HTTP Headers

GET /zGVmm9X3/IMG-20230417-175333.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 101241
last-modified: Mon, 17 Apr 2023 10:54:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/cJz4TY0r/IMG-20230417-085435.jpgXzA3OTk1MzQuanBn.jpg

162.19.88.68

301 Moved Permanently

162 B

URL GET HTTP/2
i.postimg.cc/cJz4TY0r/IMG-20230417-085435.jpgXzA3OTk1MzQuanBn.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /cJz4TY0r/IMG-20230417-085435.jpgXzA3OTk1MzQuanBn.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/html
content-length: 162
location: https://i.postimg.cc/cJz4TY0r/IMG-20230417-085435.jpg
X-Firefox-Spdy: h2

i.postimg.cc/HnDW1gJm/IMG-20230417-085410.jpg

162.19.88.68

200 OK

100 kB

URL GET HTTP/2
i.postimg.cc/HnDW1gJm/IMG-20230417-085410.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1096, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 788x800, components 3
Size
100 kB (100442 bytes)
Hash
781b604b073447595365663a50872ffe
ce04cb48caac02050a782778b1c661e36292b488
4baaf2946fa6508e234d28450b2256785e612701faf8f5820c4a511201fe310c

HTTP Headers

GET /HnDW1gJm/IMG-20230417-085410.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 100442
last-modified: Mon, 17 Apr 2023 01:55:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/vB68KBZX/IMG-20230417-085337.jpg

162.19.88.68

200 OK

155 kB

URL GET HTTP/2
i.postimg.cc/vB68KBZX/IMG-20230417-085337.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1094, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 790x800, components 3
Size
155 kB (154944 bytes)
Hash
ade12301a1442df0e651ed42fc616a9d
9cd165a7fab9e83de498c71b47df68ed44b91d15
e6bc7e10df7477df7993b5c37253898c6cacd85b5b56923930bdd19f75a116ff

HTTP Headers

GET /vB68KBZX/IMG-20230417-085337.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 154944
last-modified: Mon, 17 Apr 2023 01:55:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/R0hZcGrk/IMG-20230417-085259.jpg

162.19.88.68

200 OK

98 kB

URL GET HTTP/2
i.postimg.cc/R0hZcGrk/IMG-20230417-085259.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1098, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 787x800, components 3
Size
98 kB (98379 bytes)
Hash
7047cfa8b0a9c89cf88eaa2b61495309
f87e9aeb4661525424c514f6ee9cb7bb74e603db
0960d08fe3e7d03eef18f689dcee31b38953946fed2185b2b5b7dd4bcb410730

HTTP Headers

GET /R0hZcGrk/IMG-20230417-085259.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 98379
last-modified: Mon, 17 Apr 2023 01:55:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/bN6XBzPK/IMG-20230417-175404.jpg

162.19.88.68

200 OK

179 kB

URL GET HTTP/2
i.postimg.cc/bN6XBzPK/IMG-20230417-175404.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1094, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 790x800, components 3
Size
179 kB (178704 bytes)
Hash
0cc2a9e384764866ebfcfeb52f3329d9
25f01d5a05fad6ad928f5c9f55659c0cd61e8448
8a79d34770afc452de32807c9ca8f19d214eb185dabad0a8ed55b4f4046b7b9f

HTTP Headers

GET /bN6XBzPK/IMG-20230417-175404.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 178704
last-modified: Mon, 17 Apr 2023 10:54:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/YCbSGZPN/IMG-20230417-085458.jpg

162.19.88.68

200 OK

130 kB

URL GET HTTP/2
i.postimg.cc/YCbSGZPN/IMG-20230417-085458.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1095, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 789x800, components 3
Size
130 kB (129456 bytes)
Hash
98486cb2532edb88a8d2d12d803c6abf
e76304f311d61e44d57ecb62ae82715621274428
5d503f8657894fba5129d2e76ef451f8571d89a367776cbbce5f1edf75f29d3f

HTTP Headers

GET /YCbSGZPN/IMG-20230417-085458.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hxhxtycf.fand.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 129456
last-modified: Mon, 17 Apr 2023 01:55:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/cJz4TY0r/IMG-20230417-085435.jpg

162.19.88.68

200 OK

137 kB

URL GET HTTP/2
i.postimg.cc/cJz4TY0r/IMG-20230417-085435.jpg
IP
162.19.88.68:443
ASN
#16276 OVH SAS

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, height=1092, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, width=1080], progressive, precision 8, 791x800, components 3
Size
137 kB (136816 bytes)
Hash
a4553f16975f9d7b2c8f805cbc7920f9
cda68c13d392ba806fb2c4b3843f8cb024c260a4
29f538253cc26fa822d5a8aa01b1798e9afb2ad6274a357cc1a143c5cc5c5f9a

HTTP Headers

GET /cJz4TY0r/IMG-20230417-085435.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hxhxtycf.fand.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/jpeg
content-length: 136816
last-modified: Mon, 17 Apr 2023 01:55:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

hxhxtycf.fand.my.id/bagas/css/style.css

104.21.23.254

200 OK

1.3 kB

URL GET HTTP/3
hxhxtycf.fand.my.id/bagas/css/style.css
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
ASCII text
Size
1.3 kB (1293 bytes)
Hash
cb0406facabf211736e6c205c2f12016
7f1791f0433c297056a1b5013015d77162a843e8
63522559221cb1217733189ab984dfaa362299c4d4c81eedc494a0306b65f6f0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /bagas/css/style.css HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 17:23:20 GMT
last-modified: Mon, 17 Apr 2023 17:32:27 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zz%2FOvSNUUicoW%2Bu3uw1zamuaAJWCEQB5sBdpsp693IVLHAatfrX8yjRNecWQ6gpxD541905vRwSTnKXLBIKrKgCLQxwKAThHR0kdZ4V5jU9NKpBXwTT0e3T7Hp92XEtgr4MWG4To"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e94f34db3b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

hxhxtycf.fand.my.id/bagas/css/bagas.css

104.21.23.254

200 OK

6.8 kB

URL GET HTTP/3
hxhxtycf.fand.my.id/bagas/css/bagas.css
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
ASCII text, with CRLF line terminators
Size
6.8 kB (6791 bytes)
Hash
ae8f5eac80c514b6ccffce75de1d2d70
eff4b0347b7c8ea58833f35c07e177f80fd28ad2
a9510c5b947eedfa3d84fef078a623ebb72cd26a8acf9855a15521dffc430d62

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /bagas/css/bagas.css HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 17:23:20 GMT
last-modified: Thu, 13 Oct 2022 08:52:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0AuJKFuUr1p683Pjtr3vuBS2LKxu7gLWJLxTfTU8h9YdFxmZf1Nv1QSTJf6PrU2h2krooBhEZYXkt15tUAix5z%2FfXR8HvUE7Ya70P298nEnDsYVVA8htLUiqcAPBaiFy2GMoBBl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e94f34db6b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

hxhxtycf.fand.my.id/bagas/css/asdhwalex.css

104.21.23.254

200 OK

9.6 kB

URL GET HTTP/3
hxhxtycf.fand.my.id/bagas/css/asdhwalex.css
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
ASCII text, with very long lines (10661), with no line terminators
Size
9.6 kB (9605 bytes)
Hash
8d92f229f4e1f722c2318863c636b917
10aa3db63326b9b54b758c9641b26b2a1e6b7023
e88b0cd845f20df78ac3edc24e4b253a80baedd8ee000aa20e58a06c7ca45cbc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /bagas/css/asdhwalex.css HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 17:23:20 GMT
last-modified: Sun, 30 Apr 2023 21:07:22 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uaWyFgRaNfZ5LhACxET73Sv5lAXN818gs8%2FmESivZ74NmV7tf8PSGVW46IUlOAZP%2BprkjVya5%2FlbDoQe3qQ90Ud2gLHVFrl0VdYaME4nP9DmiBn%2BcMza%2FWdakjcO%2Fxn%2FaAjDDDz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e94f34db5b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

hxhxtycf.fand.my.id/favicon.ico

104.21.23.254

404 Not Found

1.3 kB

URL GET HTTP/3
hxhxtycf.fand.my.id/favicon.ico
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
HTML document, ASCII text, with very long lines (1285), with no line terminators
Size
1.3 kB (1251 bytes)
Hash
94f08a3a6562f7f079c4f5a67b7260e2
cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823
44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SuxU39LMPOs%2BlQREHBj1puYfDzIi3DE6iLMhfkWpOfpUUcrcojtXMfd%2F%2F1mRQZCIMdIanClSOy87SVfrYbQnmxphIkG%2FQLTl6AGkNco2X9eju5dU1l2SztTYqyOXulsMN7Jnkoq6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e94f648d0b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

bagasarya.xyz/img/info/modelFb.png

172.67.189.18

200 OK

32 kB

URL GET HTTP/2
bagasarya.xyz/img/info/modelFb.png
IP
172.67.189.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectbagasarya.xyz
Fingerprint59:49:3D:66:65:A0:62:ED:42:29:ED:97:BC:24:16:4B:A0:51:CE:59
ValidityWed, 27 Mar 2024 05:35:07 GMT - Tue, 25 Jun 2024 05:35:06 GMT

File type
PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced
Size
32 kB (31990 bytes)
Hash
571fc0253c6f01c953d4274981fc9d66
5331c3ae96ea4d421f8bde0d3e5565024c8c3abb
d3a1d3bb7a7c79edc9a08de2369f4f7f201a0852bfaf5526716382fc7ad902a1

HTTP Headers

GET /img/info/modelFb.png HTTP/1.1
Host: bagasarya.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: image/png
content-length: 31990
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 12:15:33 GMT
last-modified: Mon, 06 Mar 2023 02:41:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 18467
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wOeYtAekbVyXfubq8gRm8C9xkuFVwwrn07fayacvUSTjWZcsRQN22K3hEUofs3DnshOjLBnqVsokHCwWiCs9%2Fxi8kco6yWX5uHEc2P5BwvKrD%2B0FkDuxOjzxJtinMDDB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e94f3996c7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

hxhxtycf.fand.my.id/bagas/js/bagas.js

104.21.23.254

200 OK

90 kB

URL GET HTTP/3
hxhxtycf.fand.my.id/bagas/js/bagas.js
IP
104.21.23.254:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hxhxtycf.fand.my.id/
Certificate
IssuerLet's Encrypt
Subjectfand.my.id
FingerprintD5:62:3D:D3:A9:49:41:AC:DA:59:86:18:FA:40:8F:83:01:67:94:91
ValidityThu, 18 Apr 2024 12:59:36 GMT - Wed, 17 Jul 2024 12:59:35 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
90 kB (89500 bytes)
Hash
7c14a783dfeb3d238ccd3edd840d82ee
ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b
80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /bagas/js/bagas.js HTTP/1.1
Host: hxhxtycf.fand.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hxhxtycf.fand.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:23:20 GMT
content-type: text/javascript
last-modified: Thu, 20 Apr 2023 09:35:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7gLnaCt3gukSLwpdVwmIZZ8xHVSZxTzJJSff5DsFta2WV1jLa%2BqbfM9ah6tf8HQpOYtkqWBnSfGiUWm32iBgKvHpZ3MWdx%2BAheJFogsmiQs5XoayDj8wcYj65Yu8AvaQexm%2F61j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e94f35dc9b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN