| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css |  104.17.24.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.24.14:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1328211
expires: Wed, 16 Apr 2025 15:57:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7QwSkbfVIIZbguuRsBVj4umhRyBVdTPtqcsP%2Fry5tlSh3gw52CPUHGxlxHYnD83IXUSCS22WWmz1lngVVoOGngoyO9l4Gh4wisgBW9VQkdJjS%2FyKY2Al1zjr%2Ft%2F6ySMcy6aKZ94m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a7c508ea0e56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css | 104.17.24.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css IP104.17.24.14:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 48353
expires: Wed, 16 Apr 2025 15:57:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=73Xsj9JysdtL3CJD0NMLzM79CG0wr37PY5LJW2RUMm86kKVfHD4Lz0CfLQmFWaPnS1F3Gh%2F7n7qYxiucyrG0bV%2FiFiJM18QYm49iEmt3YCz49Fmomw01JuDbyHb8wTiNPgueJdgB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a7c508ea0c56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/img/tokens.png |  188.114.96.1 | 200 OK | 5.5 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/tokens.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 135 x 130, 8-bit colormap, non-interlaced Hashc17d58c98659f3829c4a29a44b737861 53fd8ba7e57e6dcfcbc40b469320b21bf777cbea a20b9d4d4ba5d014e36e326e4f04f5a4a8c1d37803858ba4388b10b12e9177ac
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/tokens.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 5474
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:14:14 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mkL31suQXF5tcMtDKT5iWyLP%2BKmhtxHBYFRolbhjHtPBc7E5oic8LfHvPOWFQ8HV7Zm3%2BZXqGIPzk%2Be4qZMfBHUYkLna%2FCheHnU9ijwMlrsNspYwWyl%2Fq%2F%2FHSnNDtY5KWkfKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb525684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/facebook-text.png | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/facebook-text.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 604 x 158, 8-bit colormap, non-interlaced Hashc8469979cfb24192fc638efb7784a921 ff2f9c8fdb233dc3bfabd2ecaf11cbb70791dfa3 0cb512d932e3ad625dfb6c1ae0d47e1dfafecdf31c9c7fd9c9677c95bf31efb5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/facebook-text.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 12239
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=giw%2FAtCZoxMLQcwMKoWtkqWGfhxovgKb69A5JjiZU4a8sDhhFLqvwAMVYVTuEpKw77GPtGAGhvRMzYFdXiSCxtcwMUxHheDcPD5WPoRNyL8Tz4BTM%2F6Wmfk8Em7fhgex67MZFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db6a5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/x.png | 188.114.96.1 | 200 OK | 314 B |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/x.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 30 x 50, 4-bit colormap, non-interlaced Hash4a232d94132bec4192c6e8f901d70fb7 5ed9ce877cb7b5e128c58d56ce4a061f11a80e7c 3b1a632eabe95d3474706d762dd8bbb9e04f6ddab303a6ba3f1c0cbe9751003e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/x.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 314
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Thu, 12 Oct 2023 17:13:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iLrGZP1j%2FonyMYtZy0e3Vly87CnE7PQujXKkjwZWOyhiMzCJ3F76QadkIc%2FmzDE4RK%2F2EQFCMMCSQDfpPGzySolAHwWvwM86Pv3iwpl7fOj3SNhZZiWN0gyekY%2FOTFwZrpI6lA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508eb865684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/logo.png | 188.114.96.1 | 200 OK | 8.3 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/logo.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 616 x 90, 8-bit/color RGBA, non-interlaced Hashc632e6bfd0076695e56477bdb3f7232c 5b4212f029814b5dfda946ac5e5a6ba97857feb9 86ccbc1dbeb58af3e6bce5ee52f86a47399da998ad34a0fd2ce9b0b539d92f6c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/logo.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 8314
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:42 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2BAl10Lo2bSnO0ABWsDPnl06sNhG2gp%2B7AmLcFvxie2iysUZYIHPqLIk%2F0eBqPvhj0DOnavBs1eqwl3ywjhPhuoNishQocjndoNwMHzvcerHsPcC8HZhrM1UEdNxqMjTQ1pVHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb465684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/7.png | 188.114.96.1 | 200 OK | 29 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/7.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash3c8185e0bf8dae95bb466d08a6e3fef7 33b7322b64a4706203aca6e76388e43f0c339633 0e935acaa77b1029af26f03b1f07a0801ad12c5a199f7eea70742734f86944ca
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/7.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 29087
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7CAVn%2FcPTnHBUcQRj2X69OsK6h8iCsTCH6rO0Hrc88EWXAWl6ufNMcB1kkjd%2BQ99Vs8yIQV1NO7jubq10ETvZTA0yEPpqCSf4kQg1O0f3rlAO%2BEY6DZNlb2E9MJgtTNCJ56qeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb535684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/8.png | 188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/8.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashb1c27165cb7e5759e4aaec691a201fe2 9c9ca79f23a92d149ce2eda361757660ac5fc3e6 5dad5d4de54205ac90ed8344999b76c6dc5e0abe8d6fbc832d427e5a07016b0d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/8.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 27424
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6f3ibjDE59GFVL36kr2KgNQsXq7U%2FfbrWOllHjsrLf1y6GFs4oRkcLW2lSwQyDCHvFQfwk5EF0lHauS0%2BPJOnqVbYJz0SZoR3KB5XyVSYrhpcVuW2pjDcvY4odPylxCnU9QecQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb515684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/icon_fb.png | 188.114.96.1 | 200 OK | 4.5 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/icon_fb.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash8552ac3c41b10ae9e7f13d95e845a35d 86715d70cf7fada24e9d5e6647135f8678e923cf 3963edc509012e07abe8e5e3955a1793a21cadbc706859f1a299779b4289115a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/icon_fb.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 4538
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMNF1zT%2FF1KkjxTMR7I%2FLct%2B%2BSMi4aSBEdNDNlBbexu%2FolCegSHl0PzSF5hd819I6jh355fCNQdAD8owK28cYryhQiwZ7fqez%2Fp69HMt9eq9iImTx3iBUV9tpOW%2FmlKWFsWeag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508eb8a5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/icon_2.jpg | 188.114.96.1 | 200 OK | 9.6 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/icon_2.jpg IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeRIFF (little-endian) data, Web/P image Hashe595d05f92349dc2b5aa37164ae376e7 f4ed874d1fceb5eafb7bd5c213715e683fff690f 50cb8b539efb773ccb042e5f18ed308f2d99418e6974603bfe6d39b48659970f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/icon_2.jpg HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/jpeg
content-length: 9604
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V0Yav55ftyg6xoWr2LUvVynx5A86qeP7Jw88CKE5LdDaGKuHFj6LC3QDwjdWwNnQJfuVo9TIhFqem70HslJ%2Br%2BBJxkSU7%2FiEiEFCwpm7UZUIB%2FLnGmyzFyIB287tV719PXQRng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db6e5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/logo.png | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/logo.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 459 x 138, 8-bit/color RGBA, non-interlaced Hashf77fe97fc8f4d06fd93eaf7552c4a3e9 c73f03f3e5a9f460eb83e10ae7312738a36ce720 b695d33c5ece1af9739e89855c4cc718fd6e9550528009ee5ff644cac193cb41
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/logo.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 11185
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:51:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9c8KJzYsRpULeIq9xsxeMIBccllLiVc5SpK47xxW1wapx9jaVfhMHqlrZy1Hju3u6MUJ7nXeYl6DT6q7zPpDcF5YWlmFG2EEVo%2FvmvCZe%2FIBKiY1XxdavTbSf1jDHNTp3ulsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db675684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/popup-close2.png | 188.114.96.1 | 200 OK | 358 B |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/popup-close2.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 30 x 31, 8-bit colormap, non-interlaced Hash14f983708ddeb2052c1756e3d79f7031 56d439d66495faa3a784b161d044f6edb853f8ac 47b6e3288d9def65b44f0ac0ea8a5e45cc77aa1b934b85aab003cd9076e1ab1c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/popup-close2.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 358
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 21:30:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ylPUIOPeah2nXPY7MoO0yHmSxoDiA5SM322jPlea9npzxd9VD3s1WY%2FkhBVjt03Z%2B%2FDWYhYISWfjpN1dvclswF%2BXyZ5aCLpEuxUBucV08ZzZRXLSspwvW%2Fb6Zahzlc6CxmgqnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508eb8d5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/9.png | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/9.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashb410ef15f7ea730dece54bb388b87b5d f787794f2d6888b49598e5c083465efa056e9d9f 9838a3cc3165a18e05de09e15c4b24c7ecbc71ccb1639bf40aa7977de41a2677
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/9.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 20314
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:26 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3DVhAoh2TUnDitszgbrDekGCputtR%2Fg%2B0LT4z9YA0cOXXs%2F48FgXsgR9Im%2BOCJeC%2FW3IvJKdU%2FatvRtk2w4DHDl1%2FJX7%2BvXB9vOJGNTGkC6j4O2pihpYuRePPdEEpGq5xsQyCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb545684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/style-img/vk.png | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/style-img/vk.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced Hashb5d167a369eb512b48d4d691773f2b30 bd96ea7b9b615595d23bc27a136bb12111280521 7182e0d7f8547b1cd3a4c88e053fd9fc1f54198c9a778a8eeaf49f82a5964ccd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/style-img/vk.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 30889
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 21:09:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U5vKu4l5eFSrRP%2BVKHb27ifCWSrWAwTHV4c%2FCxtVCI6fdxuqkdjeveNmyCvYoFMFRnXuNKJf%2FSagkI03s3f3s4GSbW6CcNKYXKUOJbwbIlzSCrssjdapr9x5COjdgo%2F24zp69w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508eb895684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/2.png | 188.114.96.1 | 200 OK | 39 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/2.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash423823958a4edbfa60934173462bfa9a 15a2ff7301156ec0fd660cb358208e5aeff4bfb8 a33f4104ba666f0c0c7a87bc1c193c5695fc59d4cf03635ebebe011f0c529615
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/2.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 39163
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4jM1USKsC%2FxBBv33mH6l0GrB6iDdzFROV8buR2DkBYtOBxUBEaHKHN1l5jXBVNA34gaizY1gYSQE6tZHVM2%2ByxFLMBHI2ltI2V8oNnrWUnLpqW6Mb6M4LNt9iBV7q9nHrF3Bgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db615684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/4.png | 188.114.96.1 | 200 OK | 48 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/4.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash67ccf3ec8df38ab63a0bb81b021457d8 d7020c150b2d48aa000bdb0e7cdcedf00a8a1f9f 70112e24957d4f6ed29be6e863c9af129fac70971157c18b355d36753903c2a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/4.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 48040
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:50:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yb4pBt5ddOdbI4d7LC1iYnOFRuWsnFJs2xSMO040TfUSymik2aUfW%2Fg5EsJfHjPfFKCNvnMiCJu7efZ0vth8GX%2BhEChyZUYc4tYZ3YQ0GGV9kE7xf%2F5dclJFuFysJfNtA7iY%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db635684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/12.png | 188.114.96.1 | 200 OK | 42 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/12.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash01173abc84a50d5d89e74560cb3d1ea7 d5a45df53d51b8d36eb78d180a037d24e6634f7d b6f93a49e7f8b5ab56fda7fc22acaae71db1d73fae2ab8e04f5e85c0e155fe0c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/12.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 42000
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HZJWEVaenza7jbKop2uyVPb9oxm9dxYAHjMa3txuRslQkPFN%2FZsmFO%2BXFZjIaAmuPK1sRbux6EbSuX29i6AuVtk15OhfeT4pUmHdmgOBNL%2FEHr6ScCbeqgby358EhK%2BZjp%2FV%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db5e5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/6.png | 188.114.96.1 | 200 OK | 26 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/6.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashc23c6a39b3b2936cc8ad04a6dfc5077c f3f6d96235efeb75d17b8be20f67c59183e781b9 d3a188e5280ae801dcd1a6d0b93b9428f5f37ccfa105292878dcb413920e9bbb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/6.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 26069
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:50:42 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DNLSjpMrp%2FxrKHm6EWRb%2BpWvzNZgdX32lHeozh412Cgi%2Fkzufo6vF%2Fbl%2F1Bn39RBOhoFepJtl9GbA6PGa5U8vFZGxtqjTi%2B9hBfkkQURmUCPpGvN3rf26QwgmyzpfKuVz5CcSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db655684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/loadlogin.png | 188.114.96.1 | 200 OK | 66 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/loadlogin.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=761, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1501], progressive, precision 8, 1501x761, components 3 Hash421bf7fc26bc832d2e7299bc0d0b7e71 78a347370d34e5748d29066e649721ffd099c627 61e4301996bf745767be4b899737afa23955f825870184df2a111b3921448d29
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/loadlogin.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 65943
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:14:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3R7xaw%2F%2FjOkBu9Duvf2y35HhKJQdmg4RNXttdfOIZCfOWJTMASsg2nZVZTrSLwQD5DrKMHkjy8z%2BRTrumvz92EYJGl34OVt8d9iin3ZHp3nhtiIT%2F6l9%2Fz4Bx3Fbh8eye5yIHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db685684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js |  142.250.74.106 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js IP142.250.74.106:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:38:24 GMT
expires: Fri, 25 Apr 2025 17:38:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 80354
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/img/reward/11.png | 188.114.96.1 | 200 OK | 30 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/11.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash0de33516662d5aeceaf915c41d77299c a69c2e046be20762c21ba36b6df9297631398ddf 12c0f85b8b970c40d9b64eb3c3a93f1e27ad74d61ef02d16a9d8e43a7edf3aa4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/11.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 30228
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kneP3PgyLSXXq2FHyCVRx5yArNly9zb4XhtH1DVM8os0FAp3mUF%2Fg%2Bcm77NhZFMburNN95BTtgEaCV9zo6%2F9ByUkyrCaICOlyQB8ALkmS5w0XbDhOHBLcyEEPXOLquio1b9DrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb575684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/10.png | 188.114.96.1 | 200 OK | 50 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/10.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash56a9f4ba3999c21028cbf67822c50d49 909b90b76ad223051df1ccf1e347d443e9a6d76d 81a925407e72cedc5ca601b18b9ddb580add8f34e82911fe9c129924414703d9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/10.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 50507
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=buZGWcZKcI2x5ugkiuUc0KJVEW1Z7l%2FKFa6Ny84dg6205%2FcaSSiaP6UraMkSHDgigm%2B6%2FHGVXjqWTDS6HPW2NBL6P3hUUw4ixgJRUjfx1vU80JSGYp8o457XA4R%2F6psUQ8uHqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb555684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/reward/1.png | 188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/reward/1.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hash8eccb06acd079ed87a81e1ba4c5fb51b bdf771d7c1955435ae169452edac3a06595d6e52 3d1af8c094a018432c4795352e04b080c6be43e11a1a3e140464d38270869aee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/reward/1.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 40320
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:14 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCSHE9yaM2jJsttc9JgGbvEmdith2o8Kp9ARwCEKVFvtWFSOATHQWcUrbjgcWnhfhThtNOuvV%2BQwQChoCdRoHyiDX5JBQ5ZiPm2ycXcNgxPf7hWKRnEy9t%2FF9uoyumhH7iYs6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db5f5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js IP142.250.74.106:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32180) Hash32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:21:57 GMT
expires: Fri, 25 Apr 2025 17:21:57 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 81341
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/img/lazaheader/1.jpg | 188.114.96.1 | 200 OK | 123 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/lazaheader/1.jpg IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=843, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1230], progressive, precision 8, 1230x813, components 3 Size123 kB (123423 bytes) Hash44d4d1e78b00a842b8584124755b86b0 2a50b92fd3923057cbba068f8941afe77d210a2d 7609382cfd4b7c6c2c3c150b239960ef3e0eb9a434d405d51aba7fdb6a8b55f5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/lazaheader/1.jpg HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/jpeg
content-length: 123423
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AOXy9pu7w5mxma31deEsYPp6WDU%2BgczrT1XUwzE5Z2UR%2FdMUEH3QQvdkQsa32smYvKOGO6ic8Vb%2FvMcNuNamehVFaRjnnvGe2z2R6XDl2HbMtwvcFoopTQhRUJbE4R4o3YG%2BAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508cb4d5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js | 142.250.74.106 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js IP142.250.74.106:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32089) Hash397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:56:53 GMT
expires: Sat, 26 Apr 2025 05:56:53 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 36045
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ibb.co/PYpHF6b/Twitter-Show-Password.png |  162.19.58.156 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/PYpHF6b/Twitter-Show-Password.png IP162.19.58.156:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash2fd203703821d5ce5d18bee2a51b779a a78d7b1369ce8bc34de57909af142043cae446f0 6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.ibb.co/pZDr8sd/Twitter-Hide-Password.png | 162.19.58.156 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/pZDr8sd/Twitter-Hide-Password.png IP162.19.58.156:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash8d1f08b46884df302bf7300fc234832c 5735d57b6fa211c400d439095d5ff2f5bb57e691 e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.10.2.min.js | 151.101.130.137 | 200 OK | 93 kB |
URL GET HTTP/2code.jquery.com/jquery-1.10.2.min.js IP151.101.130.137:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32072) Hash628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: "28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 26 Apr 2024 15:57:38 GMT
age: 794864
x-served-by: cache-lga13622-LGA, cache-hel1410023-HEL
x-cache: HIT, HIT
x-cache-hits: 1606, 9700
x-timer: S1714147058.286763,VS0,VE0
vary: Accept-Encoding
content-length: 93107
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/js-zone/lazcode.js | 188.114.96.1 | 200 OK | 38 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/lazcode.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeJavaScript source, ASCII text, with very long lines (57392), with CRLF line terminators Hash129581ba849547d06baca983e3b2f4ad cd9f950d81b9242e712258006b86f8e785f5b7cd f8230512b9047294aba22ef69114b19b4fee73f585b508c8b689c9e22bcd5256
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/lazcode.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/javascript
last-modified: Mon, 22 Apr 2024 15:14:16 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKa3YcnGzUw%2FHMl9lqu8MV7t5KtUwD5UjMj1rbX%2BQPi3zXy4kFhPVKvTcjlRyaEIpPi6uhlHLLWhFiKMIBXh9fK1Tk7woOYH58OWlxeTc3PMgncE%2B3Nkf7G0Ohb%2FVjUk86iIzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508fb955684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 150 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 IP104.17.24.14:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150020, version 772.1280 Size150 kB (150020 bytes) Hashd5e647388e2415268b700d3df2e30a0d 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rjoybxoj.aqpj.xyz
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 150020
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "64cac444-24a04"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 855713
expires: Wed, 16 Apr 2025 15:57:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aoK%2BIpmCX1DN9G9Uccz4ovTGg%2BpglApG%2BogX8iIb3xUEIXTyJDfUe8IJqucS70CyzLPtgQioa3MJhYEKO7viNLxTqs81PWwF2fnvQqOXqY%2BSUGOpyGV%2FoY3DlU4Uqv7gVVD5C5de"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a7c50c3eebb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/bg_tip2.png | 188.114.96.1 | 200 OK | 4.7 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/bg_tip2.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 294 x 60, 8-bit/color RGBA, non-interlaced Hashe6e384113f6408d2149e208cdc36e440 49dfcfe8573b081462b91f35595857729ac49b94 5196f4e5036989b49701a500568571f70d0796002b585ba8fbe50939762ec258
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/bg_tip2.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 4693
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:48 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtfnmacXo5ycvV52UNnFEleB7ZSjBB1lCfSc7bywWxdpUbC3gzkbE0ZHmfHsjAWoYSXwPAHiZ05gK3fgMfuRx0JQwJv6tMdy95fnHEUShTPWro814pCYYQacJMWipqp%2FNsaVug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2fad5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/point-card-bg.png | 188.114.96.1 | 200 OK | 148 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/point-card-bg.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 408 x 480, 8-bit/color RGBA, non-interlaced Size148 kB (148048 bytes) Hash00745bb0871790016d921aa3eb334e35 09cfd9b8b7e1cec1755fff6699d6d0ba3fc4fa96 5e9008541404e8d0872528159d06fa56bda7e8372ec9c24880cfe75672d93690
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/point-card-bg.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 148048
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:14:04 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aFJQOfRYGVjn0FnVnTnr58O8Ih1KgKFsthwjmc3V3MWjSXcZEnx5jyNNsHkNx3NcDvE2%2Fkz7X3qewmldJeX6YwMGeTtSqV061vMjg5uoX8jfifFxtCCihFLEo%2FpoQhcF5FX0gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2faf5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/lazback.jpg | 188.114.96.1 | 200 OK | 88 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/lazback.jpg IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1720, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 1000x1241, components 3 Hash9500a186ce44ac0bd56bd9a278654e77 847f615d9a04a3f901a346b145a41fb14f8b73aa f6a200f621ec5d3bf99256e879ef1c38e1a1dceeb755d1eeae403de3b1add79c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/lazback.jpg HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/jpeg
content-length: 87888
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHNTWitM7njAX5gyEdW4ThmRBB%2FLJ5IHPijwzi4tNd60Q5vjUEEiNPAtbzvYi3EZYU%2BJXK5KWe4c6pXx%2FMoGqHBxQPa9RnFiF20OPUyhH8LT47xKtMB%2FP%2B4Q3wcmJI%2BbCorlZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c1fa65684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 188.114.96.1 | 200 OK | 23 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typegzip compressed data, from Unix Hash11dc454173b270b82093827635a53b7f bfb658a1bc79f5cdd2b74deb9c557ce4fe275fa4 87b85732a2ba4d3ae9eb821a6cab92faad64f560d0c680882545cb18ab3eddd0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 20:54:07 GMT
etag: W/"6622d9ef-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ad%2BlrshYwVkqnTLklMENVowHudaXbeDir6fd0uyD7O%2BnZf2yeIGaQmHu%2FvJve8tFyyL%2BL0cXlQLKWVZ8gx3g%2FoIu5nUWCkjQ4T95%2FY%2BiWxVOtIt16no4UvuDmcLobmiUMePMxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c5093c175684-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 28 Apr 2024 15:57:38 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| rjoybxoj.aqpj.xyz/media/close.mp3 | 188.114.96.1 | 206 Partial Content | 10 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/media/close.mp3 IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hash9348d3f465b74d585b2a1e9de00ae05a 51bd0fc14cfc6985bf66f0ba86c068014b391961 06a13cad73913af634994d110b013db9e7f6f5ad149e921cba4ef27ec4a2a17d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /media/close.mp3 HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: audio/mpeg
content-length: 10202
last-modified: Fri, 19 Apr 2024 12:51:56 GMT
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-range: bytes 0-10201/10202
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n0JgN971rFUtQATG6r5sUBPoo8KiuQPxW4XcRIQ1aCy6TkIhSHpJppeKAFKrV5woYVlJGFZAJgrlSt65i%2BikA%2BLqghRi9q4NiBtKoIlmj1%2Bg6iGY2n3c8YhLK%2B%2FrbWWQewS1xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50d396b5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/media/open.mp3 | 188.114.96.1 | 206 Partial Content | 15 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/media/open.mp3 IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hashb90e4ca13b142bc492624400e02e7446 e10f67a71cf795942811084a15e87e1d934dee32 8536412de64d64d8249a29092508577290e7663066b81a008ce68fa0435e24c7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /media/open.mp3 HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: audio/mpeg
content-length: 14799
last-modified: Fri, 19 Apr 2024 12:51:52 GMT
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-range: bytes 0-14798/14799
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CS2Rw5Fw9iPNErKGwIJ76RTmTREwdQAMaS%2BT%2Fe2nWfFJ8W9C4masELchczx9CT4oq9WO64BRvoNvUSmJFbLKR8UTD49SMzJ6FQ5lyzmToyJNkA8s23lLRgM%2BEETgQbhkxJjS7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50d396a5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/full_logo.969f536.png | 104.16.157.36 | 200 OK | 8.3 kB |
URL GET HTTP/1.1dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/full_logo.969f536.png IP104.16.157.36:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerTrustAsia Technologies, Inc. Subjectdl.dir.freefiremobile.com Fingerprint98:6C:52:83:2D:43:AE:BF:56:35:62:21:67:C0:64:1C:06:AB:10:36 ValidityThu, 18 Apr 2024 00:00:00 GMT - Fri, 18 Apr 2025 23:59:59 GMT
File typePNG image data, 616 x 90, 8-bit/color RGBA, non-interlaced Hashc632e6bfd0076695e56477bdb3f7232c 5b4212f029814b5dfda946ac5e5a6ba97857feb9 86ccbc1dbeb58af3e6bce5ee52f86a47399da998ad34a0fd2ce9b0b539d92f6c
GET /common/web_event/official2/dist/client/img/full_logo.969f536.png HTTP/1.1
Host: dl.dir.freefiremobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 15:57:38 GMT
Content-Type: image/png
Content-Length: 8314
Connection: keep-alive
x-obs-request-id: 0000018EF0C84E84941CD169E3F393ED
Content-MD5: xjLmv9AHZpXlZHe9s/cjLA==
x-obs-replication-status: REPLICA
ETag: "c632e6bfd0076695e56477bdb3f7232c"
Last-Modified: Wed, 10 Apr 2024 03:54:58 GMT
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSWVQDaQXvzJjcpftemybSShaG5ASS7x
CF-Cache-Status: HIT
Age: 2851
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 87a7c50dfaf5b50c-OSL
|
|
| www.pubgmobile.com/en/images/nav_menu.svg |  23.36.76.227 | 200 OK | 426 B |
URL GET HTTP/2www.pubgmobile.com/en/images/nav_menu.svg IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha1f09c4f5c87271dbccf8cb05885ad42 18bbacc9c372dcb6bc77c2475595e058c1ad1594 b0d849e0e910d13bcdab1e94f5c799dda1a9429c908e18069f9dc7f7d551d58a
GET /en/images/nav_menu.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-374"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 426
date: Fri, 26 Apr 2024 15:57:38 GMT
akamai-grn: 0.df4c2417.1714147058.1094f144
X-Firefox-Spdy: h2
|
|
| www.pubgmobile.com/en/images/nav_language.svg | 23.36.76.227 | 200 OK | 675 B |
URL GET HTTP/2www.pubgmobile.com/en/images/nav_language.svg IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd8ba211bb1be1a15bf5b0143ca1b009a 215203609a551dcaccf6e434508623f302635f86 a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6
GET /en/images/nav_language.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
content-length: 675
date: Fri, 26 Apr 2024 15:57:38 GMT
akamai-grn: 0.df4c2417.1714147058.1094f14a
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/js-zone/sender.js | 188.114.96.1 | 404 Not Found | 10 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/sender.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash279ec9507ec57b9396016a872cb7d9da f1cfa5e770443af61ea8487f51125e0bc6d86bf6 7becc0246aa4fcb8127b3459b2b8c6c04879c6855b0fcf370f8c83d2de88d319
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/sender.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wHuuZknK%2Fyms6l5%2FjzNy9HEGXmihpr5gytii2udxsd%2BBm0sjQn13IW5uVy3dparTMrJxdrVXfldYXYv6xK6QuqRZd1eZDcWDb4VoWZJrFP5HXsL3x9UTDYwje39rWNGARURpjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50e3b0c5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/js-zone/gift-zone.js | 188.114.96.1 | 404 Not Found | 10 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/gift-zone.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash279ec9507ec57b9396016a872cb7d9da f1cfa5e770443af61ea8487f51125e0bc6d86bf6 7becc0246aa4fcb8127b3459b2b8c6c04879c6855b0fcf370f8c83d2de88d319
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/gift-zone.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XxqYinV8dugKto2D07syItst6NXQb2oqvUDartxChjqBSoI2KLw0Umc3EYH04wPZbnSf2FA3Lzz9Ke33JcVNMW4ICYNcG5jWEoCIjT5KfySF8zkoknu%2FItAW5ziRxFBzQg0Skw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c3fcc5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/js-zone/debug.js | 188.114.96.1 | 404 Not Found | 2.0 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/debug.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash279ec9507ec57b9396016a872cb7d9da f1cfa5e770443af61ea8487f51125e0bc6d86bf6 7becc0246aa4fcb8127b3459b2b8c6c04879c6855b0fcf370f8c83d2de88d319
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/debug.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:39 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wVFj9lorPB9xOvO%2BCtMiB50QbPMqvGyuTyI9d5QTY%2BJ6a%2FPUH9h1MHQjkVfu2c%2FfV1q%2FiioVgIerBcunLTfup845OnALF%2FK9OwU%2BIx4%2FK66KV%2FNRbJICZtUyFwsPuAbWKc1Vag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50f5ca35684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/js-zone/slide-zone.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/slide-zone.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
Hash706c457543fa47b40ed5623367cb9581 e11777e00b3beec115d23ed65cf0d8113f352515 10959c41bff07139b2cde4bc0c532ac81f29b437a2b1fe1da803f0c45efd5a2b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/slide-zone.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/javascript
last-modified: Fri, 19 Apr 2024 12:29:30 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7GGxPJBZS%2B2r20gmlFsOT%2FHDvDU3RSjd6tQNsGiO3nUKzulfy5UFlNXtGiwJ7kj%2BorhJEaezcZYB946TLsiNS98YP2BKSppEc2JDBttiPqZQxL862tGj8zAtHaDAGZ8LyqMBQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508fb9f5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.11.207 | 200 OK | 31 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.11.207:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rjoybxoj.aqpj.xyz
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: b1d9ef0830f316f8aa00125c14ce8dbb
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a7c508e8ff5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/media/spin.mp3 | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/media/spin.mp3 IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /media/spin.mp3 HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7pUl0Kv4WkldbOSkDUbFyW%2BkKJo7neC9W5iJ8JL%2FX9HeeqzA%2F6H5IEdS1XP%2Fis06Uj8VWY5EFqAV8VKWPDD02tQQiwq47qABbDbc%2BdqWKsGIMPeBZ3usQwhLTneZy5UN6W1Oiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50d39695684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/facebook.css | 188.114.96.1 | 200 OK | 3.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/facebook.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (3205), with no line terminators Hashbd2e033285abffc9db8950315eadef3e 7eea1a14befeebda28451b3c95ef411bc86eb683 ca0d15c923835ca2ef8820dbe94473b66b4390c6f1fc1b9b45572bb0a66635d8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/facebook.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:12:48 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPrmyF775AohI30opvr1YJg9S%2BiF1uzP1SeWcE3pZF%2BF6IOOL5O4GpbJ97h19hL12BasaBVFQArZw%2FwU9QrF%2BGiDlGWy3PzJ9r%2Bn7hCPRSRrjBzTtBHJrW8tkgRFlAciCw8wow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab115684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/animate.css | 188.114.96.1 | 200 OK | 61 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/animate.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (60556) Hash8bfdc6598d9f23430a03610d84192b1b c133fdd70fc7f7251c1f7d73a4d111418bd34abc eda901ae59aa8595e3beb351c85b95e308b04c24426e485697495d8622ccfceb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/animate.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:12:46 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wUeheDNJ%2BsbKDg3YEr%2F6y5a7IJu1mmJkDLzeqftJDY%2BvaWdfPw991bBmSaltonEfWYrgxJTxIu4qAAAcVp8zRHeOMm8STMi3jX3w1ku%2FjgHgghuvg6hOhufe%2B7pdF5CD4DYqUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab255684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/style-zone.css | 188.114.96.1 | 200 OK | 45 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/style-zone.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (44697), with no line terminators Hash56b2d0e9c1943a843e99281fd74c3a7b 6ed535b72d9ac23522d1f404e912a59454efe0c7 fe3be324522dd74ec304a834c579e82f21af823617a5e6c9d0396c36ff0589c2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/style-zone.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:12:56 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GzOy5%2BuIcu799pUPZA0PMwbW8q69xffn8mdKE0uIaa6m2%2Fmbr%2B65Ky%2BJdkEj98JAFjSyLiQ5NBdMwwUg5ftFVbCP%2BbMNh6lWs2qEe9RVrDzhHeGRx39q6Nwz4xz11AuEw9EDQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508bb325684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/google.css | 188.114.96.1 | 200 OK | 4.7 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/google.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (5116), with no line terminators Hashcb0cc8c265fce7d158c2cac001d09fdb 4a7541c3c7a4e02da42ba4fb568863ce800a2b39 641f0f57c4a876ce6d05f9c068514b7b8b0d6f7e1f59399edc3efb492b9a6cf8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/google.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 21:37:48 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RZEUIxCpYx8prO4oNEJfLqTUlG0z88H1TNXuQ98br3C84QWArh46yjXQo8SdwnvVBBYVyZBUD0rX8%2BHZgaBD2Og88%2BhPdus6F5a3%2FhNZ476CXtcuOrwgTKfAqLkKxGuGIp5iMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab1e5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/priv_laz.png | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/priv_laz.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/priv_laz.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iNFTw9quTs1fyasODQktg82IuDN8jV0lL9Vrn4e0I8qM3tEeNuWa%2BT%2Bry%2BS5q7eKtd1Vox%2BBTyH02vLWnqhD6UhW3ebFTRdA22NiQFcAzWmJidDA3OtsBzuTOzC3dbKSqLxtKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2fc15684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/cdn-cgi/rum? | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/3rjoybxoj.aqpj.xyz/cdn-cgi/rum? IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1034
Origin: https://rjoybxoj.aqpj.xyz
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:39 GMT
server: cloudflare
cf-ray: 87a7c50fddbb5684-OSL
x-frame-options: DENY
x-content-type-options: nosniff
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 | 142.250.74.106 | 200 OK | 12 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 IP142.250.74.106:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
Hash807349734f3707b50b73c3fd626526e8 2f3ab67f0ffa01bc1f0c180cae9085ecc8d96d63 ce7d7e11e41b1b3619cbdf436bbf2557fda2d97d434e65fab281207ffae5c0d0
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 15:57:38 GMT
date: Fri, 26 Apr 2024 15:57:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/js-zone/slidernotif.js | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/slidernotif.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/slidernotif.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fRivQmWtBzuapKQSU8RcXs%2BV5eqQbbwD%2FW6y2gceQd%2FFdNHsz0JTZ1ADSKztU1hgvUGvjSRUYxy2rWy3TMQEmXYq6dz24bccHYoXMr1%2BkMQkVlW4ayc%2BaHej7h%2Fa0YVoTRhcDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508fb995684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/twitter.css | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/twitter.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (2637), with no line terminators Hashf253cca80f83ed1ab9cd8f1e7cbc588b 97b3a8687a253de0a25266bc8d81fad4299e4766 308349aaae56c9bc95eeff07c7fb68485855049d188ac0480185dae8a51e94ea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/twitter.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 21:05:48 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=utYsnFWnxA%2BU1z%2FZMdYmbVeTSEl2Fzaw9qF8bNLrJHbRDSd9Wjr79p8tKMmGuOheGIQe1wrFyx%2B3kwrc3ZwLDiwghfjU76Fv5nJeQnLqcpZ3CdHm2KQHTRLnexzu%2BRZQ0GT%2BYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab155684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/zero-zone.css | 188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/zero-zone.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (6762), with no line terminators Hashc38f39bf71040a41c16130ef68cf04a9 6f7757d370b47ca26d891db6ecf5336cf77c7132 be2e200c3d2fdc3451e6e03af68cf49a9f270774bbcc6d0cfd24b876ed54b788
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/zero-zone.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:00 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hk0pfViySkqFexnFQOn9nvd5oFGHJIfVbI%2FtPymMNxCpnLj%2BjeT4IceKM0BwPIbmLtVSDezBv6osEPVEghc4BfQ2S6g1eb%2BsVkaFv6zbxvj%2F3dXjb%2F74dodovGjjQoqB1Zj7XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508bb345684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.cloudflareinsights.com/beacon.min.js/v2cb3a2ab87c5498db5ce7e6608cf55231689030342039 | 104.16.80.73 | 200 OK | 20 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v2cb3a2ab87c5498db5ce7e6608cf55231689030342039 IP104.16.80.73:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectcloudflareinsights.com Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00 ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (19978), with no line terminators Hash09c0cae9d18b9ef8e6a132e71c3c245d e2237916aea3bba321d0662fc1bc188f0cd3e167 af780e357234ceb6feec085a9a31f46834c88c4d3852d79050ad9dc3658a3a67
GET /beacon.min.js/v2cb3a2ab87c5498db5ce7e6608cf55231689030342039 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rjoybxoj.aqpj.xyz
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.7.0"
last-modified: Tue, 23 Apr 2024 12:12:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50a28a056c0-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/css-zone/flaglink.css | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/flaglink.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (14689), with no line terminators Hash5511be1346ed056cd57ea1cf5395de8e d9a879029640d489328eb44be44d7d6d5f7b2165 4db26c42ba0c0c7619b8478a3cba1b46f151cbc0bb4c2ca641ede414e2d5f6a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/flaglink.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:12:50 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gWhaj7q2tXvkdfUhLx6ZiHSrwyB8X0xi1u3fvoMoMmWfgZv49UdnLo4KoLUrKlkfTxVbmY5DKQ2iPHdbLB6N8bEp0guLgqRiGtEGdVbATckoNwmmC0pxXh7JZaINh1I7X7C9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab215684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/button.png | 188.114.96.1 | 200 OK | 9.0 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/button.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typePNG image data, 476 x 161, 8-bit/color RGBA, non-interlaced Hasha7eb0c1992e3420e384e75f5210b539b ac09e4a719bfff2a3d3a788268bd9beb1ba01f36 d15d3cc3c054fcc60c0a69b7d507fea6e26f7ad6b42ee5845ee240f172601e3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/button.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: image/png
content-length: 8951
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2eQt%2BwN0PeT%2FDlxIUnQ6u4Hzv%2BUSh%2FnoMcdZjiwYkL8PIdZdvttkhGcHPlb3ylKZv0uq5wKngPkMf2VX9QVFoI7a%2FkuWLxf75IrBNS8ddnx6kbFeeuSc9SqG7t4krz%2BRxXbocA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2fb25684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/fonts/laza.woff2 | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/fonts/laza.woff2 IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22220, version 1.0 Hash345579e8566a3dd6dc9feb5362fbe7e1 df075dd0c26e72fd7df19948f07904c1eaa72ded 1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /fonts/laza.woff2 HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: font/woff2
content-length: 22220
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:13:04 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ljtm8KJDoK8zUfznurtOc4MnCIpVoglmr%2BbqKgtqsBCDGNRbc6R9yIgq1rllxwzXY4yPiPMWnFiY19f0rIf%2FugZNG3Zw7x7iOxjef0xCUBjTyzOucVeTszSCarbO8M21tmWh4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2fb75684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png | 23.36.76.90 | 200 OK | 1.4 kB |
URL GET HTTP/1.1freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png IP23.36.76.90:443 ASN#20940 Akamai International B.V.
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 71 x 61, 8-bit/color RGBA, non-interlaced Hash7829ec7999775865a662468dd7e96117 d2dda88c46098945bfc1282724aa86478acddc10 049490ddf516d0c066e4245937065d8ff549ecddfd0f6ebe55891960627c86e8
GET /common/web_event/common/images/ff-logo-icon.png HTTP/1.1
Host: freefiremobile-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: OBS
x-obs-request-id: 00000185EE9543439542F10037BFF7CD
Accept-Ranges: bytes
ETag: "7829ec7999775865a662468dd7e96117"
Last-Modified: Thu, 04 Aug 2022 12:29:56 GMT
Content-Type: image/png
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSZdaWuzpmM2O+ItUV06oDUJbNs22WV8
Content-Length: 1414
Date: Fri, 26 Apr 2024 15:57:39 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Cache-Control: public, max-age=3600
Access-Control-Allow-Origin: *
|
|
| rjoybxoj.aqpj.xyz/css-zone/vkontakte.css | 188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/vkontakte.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (2125), with no line terminators Hash6f823e453cf0a956ac21cee4cf9210f9 ed9b237a2990063984d1c77ff3f8c5e08b05e890 491d0480c79023797ac47976436fe6fcfbe709c3ed5246b5a2798a0d76bb8453
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/vkontakte.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 21:21:36 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KzG4MQtoOBqKLM9iR2mbADplxP10d5Xk8za4qe9vVf33ghIGAFPubAU6uDXCAphQmEgcE3BoaUG2mN65iu3IYLDg4ziDQMuHyXZ4UCQkOmONPTDF%2BmIVO8s0JCc3dcXnzXTB%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab1a5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/slogan2.png | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/slogan2.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/slogan2.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J1Se48R%2BVDzPCvxOnwLAFemk%2Fi5aRAK2prBl6d5P4ASbKojPk9wdIjQu8O7gIoHbh0QqZk1h%2F2CuGwJSiDOr92M2GVS3DfKE0bLJ6oMJx33iE9H71saGHXZGBmCTJ2BkYYbyFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c2fac5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/index_files/css | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/index_files/css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /index_files/css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0lBd0AdjGR7So4IWtV4zLha4U55FS8f87PSeqyqhYEsrVb247OMyvdcgPTTwxmFg1wG5lNqLcFlruq3srS4OIk%2FZcw78Ealf9SPiTnI1%2BH7wJa8xscH25aW8X7Z89bA3rZDwcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c5089b0f5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/dragon.png | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/dragon.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/dragon.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9mPcMyxG81SH6shVvIy1jtl23mCarEIMxLHrrVsmZq9KkcnC%2BkIc2GzTUFzgdqq0Cyo047Qf4gK2x3XawWiAc7BpU2ZwnV6I%2BlW3eI4ILfoytw3YmTOJLebLVFTutMFzf%2FIdfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50c1fa95684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/css-zone/link.css | 188.114.96.1 | 200 OK | 4.9 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/css-zone/link.css IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeASCII text, with very long lines (4908), with no line terminators Hash075857b24d3b34d8a8dfc84df5f27e49 bbaf1f5bead9b7f4f55d629ed9482745e6a450aa 8eeef1c64d3e88bea44976570b86418f8f4e3b4752b24bc8cd9f6965a5f0b0b2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /css-zone/link.css HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:57:38 GMT
last-modified: Fri, 19 Apr 2024 12:12:54 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EDHq2J%2BXvCWiNJFICgLWTPWFLxYKI6Fry%2BAnd3qjiGN7gQpJlCZ%2FIVSCzjLrxNJCt%2FaBWwd3Ap%2F2oO54e7OBgkUWEzEdbMIOUk2Skq7ydFTXXWcgLt1ahCkvuo3Diwp1Rpwn3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c508ab205684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/img/priv_laz.png | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/img/priv_laz.png IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /img/priv_laz.png HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FXQEfue%2FoesmTwYOBeYw9foyT8UrYcvYhk%2BkJmdtOqcYjXyhC3jXL6iT3mUr9iHfCjCpoePg3g7aRyy4Y6iem3Bpembm3SCE72E9JVnYzpiuXOSg2LWei3TQrfssrOfjyqnZ%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508db695684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/js-zone/flaglink.js | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/flaglink.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/flaglink.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4iEjIIt9GIZd21bjE1OM1liPL%2F%2B1Y%2FozpEAy1ZFKeh5Ex5qPAg3%2FFubBsXIQaSul5aMI2eakQpupPGGr6M4j2xzmDPNd45IAmOl8OnUK9NQT%2FWiwqqlYBIZzLaDNxYahBx7Riw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c508fb965684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rjoybxoj.aqpj.xyz/js-zone/slidernotif.js | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/slidernotif.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/slidernotif.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4d8CsLxe%2FvCwcWrSqestBAHW%2Fm3JS5m1OCroH%2FvXoI4tbGCcmfaxn5lYDxhmPcUIi5gilCvDa4gemxh1i3OnzwYYmkc894UVqO4RrDYNLQLzQ7jEnKfVmB1yHHAHSyXMKHorQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50daa365684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.96.1 | 200 OK | 83 kB |
URL User Request GET HTTP/2IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET / HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:57:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsMXCjCerDNBtN%2BpW4Iqjm3sup5ZytYdqoLMUgr1JepJbJfv03abcRiI%2FBYiTbyjUWkpv2mxU4yB4tnmm5%2BRnNKQEoXxPB2QdIJu1W8P93b6kdNNZbhgXMNv1oR8z%2FUo9%2BXviQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7c5072c7856ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rjoybxoj.aqpj.xyz/js-zone/flaglink.js | 188.114.96.1 | 404 Not Found | 1.2 kB |
URL GET HTTP/3rjoybxoj.aqpj.xyz/js-zone/flaglink.js IP188.114.96.1:443
Requested byhttps://rjoybxoj.aqpj.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectaqpj.xyz Fingerprint8B:1B:15:AD:7C:99:A2:13:4A:AA:C7:4F:18:1A:02:46:48:E3:ED:BB ValidityWed, 13 Mar 2024 07:15:37 GMT - Tue, 11 Jun 2024 07:15:36 GMT
File typeHTML document, ASCII text, with very long lines (1197), with no line terminators Hashb4c0e8141ce519c7550545a327f32e5a 1882e285d00ca27f13b971e3b19bfa37927061bf 73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Garena |
GET /js-zone/flaglink.js HTTP/1.1
Host: rjoybxoj.aqpj.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rjoybxoj.aqpj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:57:38 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWhic6bJmJSVbw0AAcQKJXFsVlTkn9AxsmrgX4jHXD9K7ldsQ9kIOt3JRvhzGHDKqi7wtaNcQ3G0rCeGPIFuabhtL1C5LHWSTHLouHWHklQEdc5DBMYI33aUXw6q4YkYcqC0WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7c50d39685684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|