Report - rewards-ff-garena-com.top/freefire/

Report Overview

Submitted URL
rewards-ff-garena-com.top/freefire/
IP
104.21.10.178
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-29 15:59:10
Access
public
Website Title
Free Fire
Final URL
rewards-ff-garena-com.top/freefire/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
68

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rewards-ff-garena-com.top	unknown	2023-12-29	2023-12-30	2024-03-08	8.9 kB	302 kB	104.21.10.178
freefiremobile-a.akamaihd.net	20326	2009-09-14	2017-11-25	2024-03-27	468 B	4.8 kB	23.36.76.115

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-29	medium	rewards-ff-garena-com.top/freefire/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena
2024-03-08	medium	rewards-ff-garena-com.top/	Garena

PhishTank

Scan Date	Severity	Indicator	Alert
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/twitter-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/vk-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/google-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/huawei-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/logo_small_foot.jpg	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/logo.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/js	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/facebook-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/apple-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/bg.jpg	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/ie10-viewport-bug-workaround.css	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/all.css	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/reset.css	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/imgg/top_teeth-l.png	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/analytics.js	Other
2024-01-05	medium	rewards-ff-garena-com.top/freefire/js/responsive.css	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	rewards-ff-garena-com.top/freefire/	0 B	2023-03-07	2024-04-28
Pretty URL rewards-ff-garena-com.top/freefire/ IP 104.21.10.178 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-28 23:37:31 Times Seen37151610 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	rewards-ff-garena-com.top/freefire/js/analytics.js	47 kB	2023-03-07	2024-04-27
Pretty URL rewards-ff-garena-com.top/freefire/js/analytics.js IP 104.21.10.178 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-27 17:49:29 Times Seen579 Hash 53ee95b384d866e8692bb1aef923b763 a82812b87b667d32a8e51514c578a5175edd94b4 e441c3e2771625ba05630ab464275136a82c99650ee2145ca5aa9853bedeb01b Loading...

HTTP Transactions (18)

URL IP Response Size

rewards-ff-garena-com.top/freefire/imgg/twitter-l.png

104.21.10.178

200 OK

9.8 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/twitter-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.8 kB (9812 bytes)
Hash
fac267d563f943d005abd2a01d207764
dbd45b8fae0cf4a32c3a9664443d65b4f8cb2cc3
392c6ef45dc72dc2d72c2a2d16ff5fcd5943766e78e14f1f6bb008c59cf80877

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/twitter-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 9812
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-2654"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xrEeVjk%2FenFWDOpgW5tlXrDAGE92o0hj1G3Ln8C0tGIhbJnU%2FaR8XLLHnyCtY5zaZw7XtmfVvJ5SqN2XrfBTtI3smG%2Bc6lmiV%2Fj1v97GyxYuVehr%2FhLb23OSuL0pLaXqVJB3Y%2ByeXnk%2B5G9F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbdb27128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/vk-l.png

104.21.10.178

200 OK

9.8 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/vk-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.8 kB (9846 bytes)
Hash
a53bf2276aa814a0053de1eb24d48b1b
0f7bb9af7af5e9eb07998969744f9105d833e233
8ffae0974acd7014b8e30ff2510ff2c8809103dca22a9e9d252cfd525cc7eff9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/vk-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 9846
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-2676"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJqXldVegYdzVxUuK0Ibv8GTaJ29BFJwTUQXmTGdLHPHJ2M9Go3aWqNw0nL0hTvDN5hYPSedkD2XXMIOA83nnyJP1y1I3V84LXFtbMdIIAdItztfK78uZLHO95ogB1SR%2FOMoCgp49wpSabJV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbdac7128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/google-l.png

104.21.10.178

200 OK

6.7 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/google-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 81 x 81, 8-bit/color RGBA, non-interlaced
Size
6.7 kB (6656 bytes)
Hash
5f3e71195ba86afaf49859083e74b5ce
7b5ebf2bf6387331cf90442375ff9f4af5c4fd58
5437ffaa3ad1e6a1fd8272511b2cd6c0c301a339a16f2d3e0e0c496b10a3818d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/google-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 6656
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-1a00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0IEptwrhOHXFNRXRP3jJXSSpDaozZbw1scotEY%2Blc6g8IzN8wfTLNUCF%2BJocArAsS86TpaMBzl1Lb%2FCi8CcV%2BmM%2F1ZhSfZPb3TYbt2TlAfz44yc1TIVh7PCkp%2Bq8hjUEDeQAdM3B4HEqJiDq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbdad7128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/huawei-l.png

104.21.10.178

200 OK

5.8 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/huawei-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 81 x 81, 8-bit/color RGBA, non-interlaced
Size
5.8 kB (5811 bytes)
Hash
b71500650d5d3b5fba7b2f8f8012fe13
049dac5b1bb2864de4e64f4dbb3e084efad7a14c
3149e5da337a71edbf1f389081fb4c9010748eebbf9d9a6d8442e74be2f1f261

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/huawei-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 5811
last-modified: Tue, 02 May 2023 14:12:26 GMT
etag: "64511a4a-16b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqd9fYgByufwnffp1OPuVwzX%2F4MTavHp0AASWR0ak5bKjich3kOFPmsCyTnoom1djqUvqJJ9JVItxeqCcNQS0Rg7YoFBzwoSP8D%2FDtvORraRlO2TEvqF0QJBinp1ItGzsUiuox2zpgKpP4TR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbdaf7128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/logo_small_foot.jpg

104.21.10.178

200 OK

3.5 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/logo_small_foot.jpg
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
JPEG image data, baseline, precision 8, 51x51, components 3
Size
3.5 kB (3522 bytes)
Hash
c34038edcf4185b3e75a6b85f1cd3d4f
3aa218daacaef499d9ae080f36993228455dc814
3dec40957ccb5815562b06c0bcb1cb3fc09a5f0738aa0b9ec2d1390e4e30a346

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/logo_small_foot.jpg HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/all.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/jpeg
content-length: 3522
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-dc2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PiPNqM384FOqiEw03e2ACSHh%2Bgo0nnJttppPI7Tm6QNvM3rJ09zxT6qaIrJXBcv8gHJhnK4uLkUFD3tdBwRYs71BxGIGSREIxE9NWCbCp4%2Bdegk%2FMXIoZxEVyJgSGNFeGAlMRcQ4CLg4i%2BEh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bcdc07128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/logo.png

104.21.10.178

200 OK

14 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/logo.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 426 x 104, 8-bit/color RGBA, non-interlaced
Size
14 kB (14297 bytes)
Hash
b3c9dc5b5bba47430a7da8301c09d45b
811aa569261ba03c88fc108d04428264046b66ba
4bb88bccc5bd610423b63fba5ca6f98516d3d8fc631d6b1b977ac669104264be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/logo.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 14297
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-37d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acWPR04LpJ3qmBva%2FpQ3yRoxnaZP7IHDUSKahLOFmar2CBfsAFeIvib3r8KpnbWkkkjYxIK3kRAzRTlj7qQZ4n4KXPz1LiGpvxWtr8Yp5os2txBHuuNp6XVhBa26jj0slXYnAGr6g7E0FBSm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbda47128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/js/js

104.21.10.178

404 Not Found

1.5 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/js
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
HTML document, ASCII text, with very long lines (634)
Size
1.5 kB (1474 bytes)
Hash
16f9becdacae380114a1c99bb4d528e7
d7c4e5b15078c8a9ea1cf452beafba8eb45c4c95
d9cd6dfca94282619431285858508adf7a4552a70c2bb6dc4f30b0c83d9b1615

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/js HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeIJtoHFr5I1%2BbQwCLT92pM6Piysjg6Ey6DWBSMflArD1oc1Toq%2FvH9n5NpT3udSeesaoLEv%2FCZUEGiWKvzwRoDUOgtMZI0GRf77efItNXbQli7B%2F1Zaos%2FFl7WEhHTrJB3BcKSuJMyYWnCn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c1102abcc17128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/facebook-l.png

104.21.10.178

200 OK

9.2 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/facebook-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.2 kB (9175 bytes)
Hash
e328a85faf3ec595e525860c98e34098
e60ea777c0f17e3091eda58a81a9b916fea47f56
94f92c2fa2a770888470701e4e9c0063d11bd846b52739d8b12a06b2dabd3be2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/facebook-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 9175
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-23d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zOcRPyFn1QsmU2aApKwezq1dD4m8ZpFYfx6nmF36%2FooIJ%2BK3SzucPmBXN2xhUpulciuJ98b8vYDnUDmoPyhQx%2F7l%2FxmXqyoMYPCUMhDKEO8HYjCHwdvHxR9QOjEyHflPp%2BURZmEjfzQaI6qn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbda87128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/apple-l.png

104.21.10.178

200 OK

9.1 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/apple-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.1 kB (9069 bytes)
Hash
d72825e76a981573e800cb3983bff287
89d064915f45c31853eaa77a416843cb3d3dcc81
ac768dee11c223ac3fba06a7212fd0163c171e7986735b5cd04f9081504126b3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/apple-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 9069
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-236d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVzmPFdpjrExmW%2BNUPvryBgjULqRjeuMX4OLSIWSWFWMT%2BwkLGAuFcS6GOwVr6OwPnBx91frCAQl5FMXVS2%2BFF%2B4nCseudukpK3xew2HQFfiqMO8WroU7zkI%2BWD3cn7HwZKo0Cou7VJonDhA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbdb17128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/bg.jpg

104.21.10.178

200 OK

137 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/bg.jpg
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3
Size
137 kB (136773 bytes)
Hash
57fd6fc58a09519be8012650efd9881d
bf24f16e0901ebef13336a3b4a6e13263ffb6279
ba96000a92f9d03cce2c34ab48fb9f1e67976be7b4233c1bd607a87e6e9af82d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/bg.jpg HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/jpeg
content-length: 136773
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-21645"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fp9BGHPcV76LoSIA1zhI71nYhbWBFtA0BTGFiwEQqJlGU%2BdpNgiQc7A4s0l3rWarK8USRXTKDWgJkwYz%2FQo8OBsweUo3E0tX1dg%2BiySfY0a7mGb8C31oe2vxbdCr%2F8VvvLW9byiiqNMJoFNY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbda27128-OSL
alt-svc: h3=":443"; ma=86400

freefiremobile-a.akamaihd.net/ffwebsite/images/freefire32-2.ico

23.36.76.115

200 OK

4.3 kB

URL GET HTTP/1.1
freefiremobile-a.akamaihd.net/ffwebsite/images/freefire32-2.ico
IP
23.36.76.115:443
ASN
#20940 Akamai International B.V.

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
0d2f0e9b2281bf40f5964f6f79fba17a
6288c3d63579f1bf3822471f946e4022fb80ce97
ca80122571d6d7aea0a3c96b926fd53e5d53f7526c23b6a1f79396420bb08990

HTTP Headers

GET /ffwebsite/images/freefire32-2.ico HTTP/1.1
Host: freefiremobile-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: OBS
Content-Type: image/x-icon
Content-Length: 4286
x-obs-request-id: 0000018E068173A294107DF8BFE0D5A0
Accept-Ranges: bytes
ETag: "0d2f0e9b2281bf40f5964f6f79fba17a"
Last-Modified: Thu, 04 Aug 2022 12:38:52 GMT
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSkXKNcPrqtXqf/WQKFJq279sMOFSaIO
Date: Fri, 29 Mar 2024 15:58:45 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Cache-Control: public, max-age=3600
Access-Control-Allow-Origin: *

rewards-ff-garena-com.top/freefire/js/ie10-viewport-bug-workaround.css

104.21.10.178

200 OK

7.8 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/ie10-viewport-bug-workaround.css
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
ASCII text
Size
7.8 kB (7765 bytes)
Hash
631c61015480c581479c23afa0ab82da
f260ff7ed7ed317fce3878dbaaf4adf80b255529
17ec74c69eb8c08a5c82d7126fa307525806b2b9f06cda918c5f750428c40d40

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/ie10-viewport-bug-workaround.css HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
etag: W/"64511a3c-1b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hofHMagSAKpZRiXSrwy8drQ%2BWlB%2F9oYfQDK2L1qyEtEth8o%2FjqAZesgU8CHPjn%2Bzu9qmm%2FgH8V3EYRAgbAxguXwFP7XRCcuvlDDXEseldS7wfrRYodFRZibuvS2%2B36nYmvVjsFOB%2B8LJl95d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102abcb97128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/

104.21.10.178

200 OK

7.2 kB

URL User Request GET HTTP/2
rewards-ff-garena-com.top/freefire/
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7249), with no line terminators
Size
7.2 kB (7207 bytes)
Hash
de2167876b3daa8204bca2636cc19067
fd6306fd89f72b9af55f960f9a2af890a5b2a8fe
42ac19d4b86ee32bde41e66f2b6f78e6306b47b823cd72de6ba1f925c94e2712

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/ HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:58:44 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NCx7YR2RmotRpdrQf67YK7keW38WhFucuUkRoHnncdE68ZtMSUxRHtTs3up%2FPEgKylxoCNwG3h6KGR8pnnYWNUT2lGnomXxUlfb0oBjoshxQCOYWijVaWAh4hbRy4HsraKai6Ze3C5F813wz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c11029282956a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rewards-ff-garena-com.top/freefire/js/all.css

104.21.10.178

200 OK

9.9 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/all.css
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
ASCII text, with very long lines (10522), with no line terminators
Size
9.9 kB (9911 bytes)
Hash
240b2e90f3e582aa04f7850a9c5e7744
466a9edc65d4694babe2701731b7f23edc0f0ff5
356c7c03455bde2b38d92e80d862268b5802727efe258568ff9e612c59084cd5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/all.css HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:44 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-26b7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsZ0scF6MT%2Fs1gI53J0OloGP5Pe45hSmEAHKmm9k%2Fa7JqnUwUSRi1wzy3v45Hx0byAFExkbtezUTT3HHiKT4TSU9Hzqd2TFxTNU2V6ZuWXGi5UhUdS7EJFpGRym%2FFe1duRZsNOOvIFLUuj3A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c1102abcbc7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/js/reset.css

104.21.10.178

200 OK

1.1 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/reset.css
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
ASCII text, with very long lines (1153), with no line terminators
Size
1.1 kB (1092 bytes)
Hash
2fe980b8e50df6964d3d4928ef3db3cb
b85c393a01fff025a96b549bc76049f3b582e558
b91a3f3561417b40957b009fd79addc5893a633a714a06e4aa57a2311d81fe04

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/reset.css HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-444"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gZwqQ%2Fr72%2BXCyqOnFmS7pf7etYWnUDWFrdsvil33pGFXFEV3a3OF%2BYW4Ket%2FmpR4XzC0SWSiKxVewPJR8IhGFa1Q99omnDxMkfRNbHX7KQDBSGxcmvcIilD%2BZyDFF2FD776go%2FspjCUG%2BsZy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c1102abcb87128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/imgg/top_teeth-l.png

104.21.10.178

200 OK

144 B

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/imgg/top_teeth-l.png
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
PNG image data, 350 x 9, 8-bit/color RGBA, non-interlaced
Size
144 B (144 bytes)
Hash
fe98481dd3ffad514594309ceb2ef4ba
0fcc8e2afec22a1abcbf7de83624504919da9a13
42fcead125ad8660c031f3b763fd048fd06b4a70a7a48cf17bc03073fb255fae

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/imgg/top_teeth-l.png HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/js/responsive.css
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: image/png
content-length: 144
last-modified: Tue, 02 May 2023 14:12:30 GMT
etag: "64511a4e-90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JpgbTAVK0XpRbvEk1aNo6w2IG9J%2FdyT4YYNEeu%2FLY5i5jBfZfL58uz1%2FXGldoGXSNjHZ42QVaEoneiKdYBjZW0bTqQSyU5XSHViiD0IHQm2yY9gdaOaR3SUK6SIJmORXanNC9TJkHWwd83DC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c1102bbda07128-OSL
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/js/analytics.js

104.21.10.178

200 OK

47 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/analytics.js
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
JavaScript source, ASCII text, with very long lines (1325)
Size
47 kB (47051 bytes)
Hash
53ee95b384d866e8692bb1aef923b763
a82812b87b667d32a8e51514c578a5175edd94b4
e441c3e2771625ba05630ab464275136a82c99650ee2145ca5aa9853bedeb01b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/analytics.js HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:45 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-b7cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RZcaac4bCITIEriZB2TN67lY%2BgAJrZLV3r6Rx1BvlyrfWHsERDNyzipCA3u9assLjiy0OrRYLGAMJJOCxNkFDdWGcoiSRoXLbwQ8A6GOmMJNqnSiepEodbEK8gB8WniqZXlwm1jbLd5Tp1Ci"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c1102abcc07128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rewards-ff-garena-com.top/freefire/js/responsive.css

104.21.10.178

200 OK

9.9 kB

URL GET HTTP/3
rewards-ff-garena-com.top/freefire/js/responsive.css
IP
104.21.10.178:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rewards-ff-garena-com.top/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectrewards-ff-garena-com.top
FingerprintFA:05:55:9B:F1:EB:74:17:2D:03:0A:F0:E7:1F:1E:41:3F:D3:2E:63
ValidityMon, 26 Feb 2024 16:18:33 GMT - Sun, 26 May 2024 16:18:32 GMT

File type
ASCII text, with very long lines (10499), with no line terminators
Size
9.9 kB (9915 bytes)
Hash
00d40197e115e98835de706d339d199a
531cff5b4986481c73c1046aae89d0b18363e32f
2f107bb9ac72401454ebc899a1aba799a8b434e1ef9f7632faf75948dcd250fa

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena
PhishTank	phishing	Other

HTTP Headers

GET /freefire/js/responsive.css HTTP/1.1
Host: rewards-ff-garena-com.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewards-ff-garena-com.top/freefire/
Cookie: PHPSESSID=ns3j3a69k5f54h7sjefrn9mr1d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:58:44 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:14 GMT
vary: Accept-Encoding
etag: W/"64511a3e-26bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SrFYi5btQNOpSWieIn1SOX0VndmilTKTj4%2FohhN%2Bh0mkcr1cP%2FHYxFq17zkDW%2F62YSIkceHvz5Qz4uEDmwzBaLOAOLGcfw4fYItE2pyyQkyZRGJsgnMxNBUKMjCwQDPNYoFakTKxpk%2BNAU4C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c1102abcbd7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections