| new.infocodashop.my.id/img/medi.png | 172.67.211.5 | 200 OK | 59 kB |
URL GET HTTP/2new.infocodashop.my.id/img/medi.png IP172.67.211.5:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectinfocodashop.my.id FingerprintCA:79:22:8C:58:AE:05:AB:B6:F7:5F:96:B6:3C:05:51:F2:2F:F4:31 ValiditySun, 14 Apr 2024 20:19:58 GMT - Sat, 13 Jul 2024 20:19:57 GMT
File typePNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced Hash7cc76703da0c40d173a70ef5ea4c3d79 4f2f8d71c60f8e8affe1353f106cda1e1f99c077 0448c55bf8dca8847e9de8847328fe19af50eec96c5fc2a40d9f5e7d09bc7357
GET /img/medi.png HTTP/1.1
Host: new.infocodashop.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:51 GMT
content-type: image/png
content-length: 59448
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 17:21:09 GMT
last-modified: Tue, 19 Mar 2024 04:37:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 62802
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ppj%2FnTa4K3DIaAZxRSnBNO1WvuMDM4mdMYK%2FzgT861iRT%2FUxHoChuCnAvPICjIn76zz6CSh9YVESDj%2Fp%2B61qv7gn7VxdmLrDQGiWj5ATo8%2F%2BB6gm2YFp6SDIY7qqH17CcNESyuVGUvvk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c51a35dc6b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css | 151.101.193.229 | 200 OK | 35 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css IP151.101.193.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hash896192cc65e20f1fcc6d792b5b9a4626 b13ef70543d70c1ec7fdd56a5ebc9d7d64023851 d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6
GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE"
content-encoding: br
accept-ranges: bytes
date: Fri, 19 Apr 2024 10:47:51 GMT
age: 6183162
x-served-by: cache-fra-eddf8230044-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34728
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/verify.php | 104.21.86.120 | 200 OK | 26 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/verify.php IP104.21.86.120:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text Hash8d89066e2c2e98004a804738da152e22 7c9d1725a7e12a1a246a567903138cf6728ab6f0 beb41e0c1108f5859a9b9124049472014644d016bb05e531b68f9a3d0699559a
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /verify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:51 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=136141e1361194079e5ea66143cb7333; path=/; secure
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ftl9tcxYGl%2BidG%2FAoCdht5o1gnhH7Gj3NxyoM3XEcRMssx0Yd9ZreBC7LfCjS34tZmnKl50ieceTzwgFDeeu5lf5EzUzg4BfLXC0kRqoQzMJN80o%2FPqjXFdkCYhTniXoZUNO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a1fe331bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 | 172.67.139.119 | 200 OK | 1.7 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 IP172.67.139.119:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (1574) Hash369cbeaee8e26da69cc5b0a0700cd62c 6410e6e42ef9c1964e102d34f9284bee7f055151 85b4b6b94b60580f6b44fd4f8152947eefdaf52fd5866219d86d5cfea0ee010d
GET /releases/v6.0.0/css/free-v4-font-face.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"369cbeaee8e26da69cc5b0a0700cd62c"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dMv_EAfUb4isAqxNH_1_iLrcCAD5HsuPWogV-9Qt9eXmdlA-Kx4Bcg==
age: 56415
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F85If1dS6kpEJBeX%2BT8DZN2V0dlZiApwPdA8kQs0jaZLVvr6uMtf39w7FpzMwfGRa6sd1INGZK3OWJw45EZq%2FQzw9RKxi1sSrivV740I2Ylxbj%2FnYrPcxUBGsTBqWC9r%2Be8253L6zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a61fbe569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js | 151.101.193.229 | 200 OK | 81 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP151.101.193.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hashe2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5
GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g"
content-encoding: br
accept-ranges: bytes
date: Fri, 19 Apr 2024 10:47:51 GMT
age: 9202637
x-served-by: cache-fra-etou8220068-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25082
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803 | 172.67.139.119 | 200 OK | 90 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free.min.css?token=869e25b803 IP172.67.139.119:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (65321) Hash345f5ecc270c94968998574a2d37e31a 4b1937ca073a8376a07161bc40549585493ffa3d efad9b46d0c00f2562eb53236717ff21ebd474f8d68f69b45f92c424bfd87e9c
GET /releases/v6.0.0/css/free.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"345f5ecc270c94968998574a2d37e31a"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ElNftZHO7Mn2JCItwtd183IIG5wUFmnhPrfppvRFCxnt5tQiToOUyw==
age: 56415
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2F%2Boi7iUaLUIB7oqc1%2FCo4n9hoJLMbWH3mBI6zGj11KYuiG0R5wXmi%2FZKb1iddesR99ApBQKtNDsCGFa3thThFbADwSKhDzd3dX90H0JSMjGRrZ5e5UtbYdzfssLa3dC2T6EnMIaFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a60fb8569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 | 172.67.139.119 | 200 OK | 26 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 IP172.67.139.119:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (26019) Hashc32e971c7d11c2407f847b61c515f1e2 85ac47a05e49f01cd62301ee121a2ca0dfdc0f83 a7fb3a26d569bec0139baaae950e43c1e10b0afbcf6e9d7654aa1181a8319759
GET /releases/v6.0.0/css/free-v4-shims.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"c32e971c7d11c2407f847b61c515f1e2"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RquWDnKVMC7-MFrmH9-CeRi_sQusU4NaQD-1hzkl9HrlNnyRvuQaEg==
age: 56415
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIf%2FHEbGep5u7VsBi5XIcs6N9Hoir%2FGUJC9RZPnZSkmy9jWeMowFWa7YcyvPdRuOnfamAbjje20OZ2CyshVtVq1bR2ZU6G6agSYmzH6%2BCL0NvjWg0yApprHxfQEmSqravk0VFLrlSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a60fb9569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php | 104.21.86.120 | 302 Found | 2.1 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php IP104.21.86.120:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.phpverify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 19 Apr 2024 10:47:51 GMT
content-type: text/html; charset=UTF-8
location: verify.php
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zr8m%2F0BHBu8LmupgTidwBvhf7gLk5WNmv8Rc%2BVJOOtrKbu39ndFgn%2FwyWTnltH%2FFsC57nCqA5kxMhah73aOx4T77DvZg4RN5LPLvoNU1L1wC7Qx%2BMBcK923xAzroQBlmv7SC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a14dc71bfe-OSL
X-Firefox-Spdy: h2
|
|
| file.gifan.id/fontawesome.js | 104.21.234.34 | 200 OK | 11 kB |
URL GET HTTP/2file.gifan.id/fontawesome.js IP104.21.234.34:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectgifan.id Fingerprint65:21:CF:78:C6:F3:9C:82:42:72:2D:29:CC:E1:28:F9:68:C7:DA:50 ValidityTue, 26 Mar 2024 02:33:24 GMT - Mon, 24 Jun 2024 02:33:23 GMT
File typeJavaScript source, ASCII text, with very long lines (10594), with CRLF line terminators Hash7653d4719abf98a98d6e9412e33976e6 0b4414adc9da488b97830ce789a79994ba55aa23 051afcaea280590a5c6a5c472ad0852783d794a8923c4d26e388656fc9dcd791
GET /fontawesome.js HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:51 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 17:44:10 GMT
last-modified: Tue, 03 Jan 2023 12:39:32 GMT
vary: Accept-Encoding,User-Agent
x-powered-by: Niagahoster
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 61421
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yiV%2F8Fmr7ynhfpLcDCiH9d6TUUsl5rhPhRRnQRvTnjkGjHfGkTAwqkxJ3unZIdamQkwv5UmWGuodJYXt2AiOSuTVNUXWuYc84ajDesLbxqf0W%2B%2BGUN2vUGaOwP1qomfd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c51a4ee7c70f9-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 | 172.67.139.119 | 200 OK | 823 B |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 IP172.67.139.119:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (845), with no line terminators Hash1af9af6e84d6fcbedffbf79321ca46b2 0f8c679ef763d2ecdc4d775dbe9af668b2284644 ebb1355be44fef0caf09c3740d278ab9461238e988fd43375d389a16e39bed8a
GET /releases/v6.0.0/css/free-v5-font-face.min.css?token=869e25b803 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:47:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 07 Feb 2022 20:11:39 GMT
etag: W/"e8ee688b3310772b65f39c69b76f4720"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WDu93bbiVm-Ry2qwvrp56EiFU1NkshMQlBqNA3PFXMRfegoDiJ5fCA==
age: 56415
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZoNdBU5HppZxsWLyWLabAFbdDPpw9txcZqOpXzjx9X%2F%2BZPr%2BI1eGC7IE6IYGQloKUBByTU5NlqZCApLf%2FO1tKXVqYMTZS3nNBlxloOhiGJZ05uoyz3fonww8Vxatlh7KVio6%2FPAq%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c51a60fbc569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/favicon.ico | 104.21.86.120 | 404 Not Found | 1.2 kB |
URL GET HTTP/3mjagk.mags.my.id/favicon.ico IP104.21.86.120:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text, with very long lines (1276), with no line terminators Hash24b426fea67958554911ff4c943fdfe4 b92889146d4c1bbddccabe58ca15c814ea066f72 335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/verify.php
Cookie: PHPSESSID=136141e1361194079e5ea66143cb7333
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:47:52 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEP6DXUQ%2B8oQsEqP0O%2BDMWrb2CrzU%2Bcgz6F4hngaDzsEGugTOz39Bf3u72u13Xz2pKUZ491ngPJzJoEmNn1wdAcyZn0OahTy%2BXmnaGv1AHvErl89Bb%2F9yX6y088TKH7pLBSm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c51a6ae420afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|