Report - garena-rewords-ff.ru/freefire/

Report Overview

Submitted URL
garena-rewords-ff.ru/freefire/
IP
172.67.177.220
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 16:36:31
Access
public
Website Title
Free Fire
Final URL
garena-rewords-ff.ru/freefire/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
garena-rewords-ff.ru	unknown	unknown	No data	No data	8.8 kB	298 kB	104.21.83.154
freefiremobile-a.akamaihd.net	20326	2009-09-14	2017-11-25	2024-04-09	465 B	4.8 kB	95.101.10.81

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/freefire/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena
2024-04-16	medium	garena-rewords-ff.ru/	Garena

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	garena-rewords-ff.ru/freefire/js/analytics.js	47 kB	2023-03-07	2024-04-29
Pretty URL garena-rewords-ff.ru/freefire/js/analytics.js IP 104.21.83.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-29 19:51:00 Times Seen581 Hash 53ee95b384d866e8692bb1aef923b763 a82812b87b667d32a8e51514c578a5175edd94b4 e441c3e2771625ba05630ab464275136a82c99650ee2145ca5aa9853bedeb01b Loading...

	garena-rewords-ff.ru/freefire/	0 B	2023-03-07	2024-04-29
Pretty URL garena-rewords-ff.ru/freefire/ IP 104.21.83.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-29 21:26:29 Times Seen37190076 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (18)

URL IP Response Size

garena-rewords-ff.ru/freefire/js/reset.css

104.21.83.154

200 OK

746 B

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/reset.css
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
ASCII text
Size
746 B (746 bytes)
Hash
ba1d59b0e53d380b12b3e97a428b3314
5fa4f471bf16e9cdf78c7446b59cce638093772c
ed555a279183c054222c873e78d92c40b512498e49359b6abfda36048f141988

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/reset.css HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-444"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZD%2F%2FOZWCbcoHMqgQwpmHM8jQPNYZmciRAsdlELiHIUQVbEJWJ3tpd%2Ba%2BMV%2FwmIobLwJkAIjMCCOpMotrptNAEAZ2ZQyHpC82KcNnHHgA0vqie%2FIsUuAPE5cZmrvD2TZT7tytJJo8Uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979fa8aa7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/facebook-l.png

104.21.83.154

200 OK

9.2 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/facebook-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.2 kB (9175 bytes)
Hash
e328a85faf3ec595e525860c98e34098
e60ea777c0f17e3091eda58a81a9b916fea47f56
94f92c2fa2a770888470701e4e9c0063d11bd846b52739d8b12a06b2dabd3be2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/facebook-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 9175
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-23d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJzyiwWZr3%2Bl%2BY%2Fa1q7jXTQr0HH2aWP%2BkOhCaFuBkwnoDeErA6eIWI%2F%2Bucik1jGd8%2Fp%2BgH61GHVOOBl%2Bt2SiOrYsSuYo%2FfDr%2FD9bxS24hOgW8JkU3F1xN831vDQ8MYS27ydPKMeFpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a029e47127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/bg.jpg

104.21.83.154

200 OK

137 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/bg.jpg
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3
Size
137 kB (136773 bytes)
Hash
57fd6fc58a09519be8012650efd9881d
bf24f16e0901ebef13336a3b4a6e13263ffb6279
ba96000a92f9d03cce2c34ab48fb9f1e67976be7b4233c1bd607a87e6e9af82d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/bg.jpg HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/jpeg
content-length: 136773
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-21645"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQALm%2Fc3U%2BG34vfKZoe2VJSIJkR1uvfSRQdhW5oZP0Jy2CGvzCV5vXe6J3VFtyUbO0zakTpHSwNX1zAqNjnnr4Ai4VAzx6jr2Lso%2FY6LEnv360KyrsBB6DNLR0DVA5027uIAuLFPTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a029e07127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/vk-l.png

104.21.83.154

200 OK

9.8 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/vk-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.8 kB (9846 bytes)
Hash
a53bf2276aa814a0053de1eb24d48b1b
0f7bb9af7af5e9eb07998969744f9105d833e233
8ffae0974acd7014b8e30ff2510ff2c8809103dca22a9e9d252cfd525cc7eff9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/vk-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 9846
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-2676"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JivRJMVp3n9NLNGOkPaUDd6cjzlLOqony9Bfti1LI9%2FBMHKW3%2FmNhrVayTDU0HZd%2FE%2BqYaL7oLtFJ2Zey19I9iSZwhHCdNkABSAwkw3d5VO%2FrvLN3H%2BMyeDTGGDLieXFHbRhzO447w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a039ec7127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/google-l.png

104.21.83.154

200 OK

6.7 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/google-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 81 x 81, 8-bit/color RGBA, non-interlaced
Size
6.7 kB (6656 bytes)
Hash
5f3e71195ba86afaf49859083e74b5ce
7b5ebf2bf6387331cf90442375ff9f4af5c4fd58
5437ffaa3ad1e6a1fd8272511b2cd6c0c301a339a16f2d3e0e0c496b10a3818d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/google-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 6656
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-1a00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJMesJhOmqXgw5Q1PWqS4ttPIG0ucYNnayNfr0nMBcKAu3kVyaMDHTLLQhUuxZvrKZjFLmyscraYybnlld5WrLWgyDDIpnnss33KQu%2FQbkULvRp7BqjkXSMbsfcaGs2koTxbJhV%2Fqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a039ed7127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/

104.21.83.154

200 OK

12 kB

URL User Request GET HTTP/2
garena-rewords-ff.ru/freefire/
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (564)
Size
12 kB (12458 bytes)
Hash
ae86ca9dacc50c11e862e369893e6563
a98db6adb929a351b3b00160b19d194aefd2a5b5
42f8b4f1821f418875d9a327b42f3df1b0b2cf3cd2b2e958bfa2041c69629304

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/ HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XVwl9jHQMSIik0X%2BHVkUdbdp1O3DapVZRf0505W9bSASq0yaqta2Hr4f0AGtwvizGQdU1eQqGGql0fkNEx4bO0ZgPct50iTyk1hXzMdMzloVcOKvodzcgITPCBTpza5oScircXfFXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979dfa96712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

garena-rewords-ff.ru/freefire/imgg/huawei-l.png

104.21.83.154

200 OK

5.8 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/huawei-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 81 x 81, 8-bit/color RGBA, non-interlaced
Size
5.8 kB (5811 bytes)
Hash
b71500650d5d3b5fba7b2f8f8012fe13
049dac5b1bb2864de4e64f4dbb3e084efad7a14c
3149e5da337a71edbf1f389081fb4c9010748eebbf9d9a6d8442e74be2f1f261

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/huawei-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 5811
last-modified: Tue, 02 May 2023 14:12:26 GMT
etag: "64511a4a-16b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QCkVckn6owJx9wBcOIs%2BDkkVVnIvpQKI7zZtS%2BOi31cxa72lNPv7dwIBemsJwa%2Bhf9SB1PqbWDe0QmNo%2FlAmU4Jss%2BCfgUsoKfonv1BbYMJODvbBpfIUej31LhFvWx8fu7sUfiB3RQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a039f87127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/apple-l.png

104.21.83.154

200 OK

9.1 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/apple-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.1 kB (9069 bytes)
Hash
d72825e76a981573e800cb3983bff287
89d064915f45c31853eaa77a416843cb3d3dcc81
ac768dee11c223ac3fba06a7212fd0163c171e7986735b5cd04f9081504126b3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/apple-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 9069
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-236d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zeIt6fmRethDWaxaWN85YCPkRnkr4lorMEAPsarYZHwa4Jz0TxddEDsc%2FcGpA7aJT32PyCeIjrsy0WgD0LYIdU2XsLu7G9QCJ8BQLD%2FPN4BDBxlsYzHsFWY33E8%2BgJFm2FUmv%2BgPhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a039fd7127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/logo_small_foot.jpg

104.21.83.154

200 OK

3.5 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/logo_small_foot.jpg
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
JPEG image data, baseline, precision 8, 51x51, components 3
Size
3.5 kB (3522 bytes)
Hash
c34038edcf4185b3e75a6b85f1cd3d4f
3aa218daacaef499d9ae080f36993228455dc814
3dec40957ccb5815562b06c0bcb1cb3fc09a5f0738aa0b9ec2d1390e4e30a346

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/logo_small_foot.jpg HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/all.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/jpeg
content-length: 3522
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-dc2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxoqHNwCCrvOtQpDwlPrcj6KtwiHT6g8gBudgCathpW4FWHzKTBt2FZzkCBHqYlNzDlROeg35CFaE%2BagxwKPtvGDhyRn7icS5sogvbpKqe83qLAaDy2oWg7OBkzOTiFQ7jlVbmNczQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a03a027127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/logo.png

104.21.83.154

200 OK

14 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/logo.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 426 x 104, 8-bit/color RGBA, non-interlaced
Size
14 kB (14297 bytes)
Hash
b3c9dc5b5bba47430a7da8301c09d45b
811aa569261ba03c88fc108d04428264046b66ba
4bb88bccc5bd610423b63fba5ca6f98516d3d8fc631d6b1b977ac669104264be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/logo.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 14297
last-modified: Tue, 02 May 2023 14:12:24 GMT
etag: "64511a48-37d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nwYX0PyOyqHAwXC3aXKDN0Hhf8CUdM%2BPfGAExcTENbuz%2BZCydoZ%2FEfE%2FciTPNQSh%2F3PQhcw1ywQ4wTt4Rc%2BESipMY%2Fk%2B7M21o5kqNzW3j9ABM%2FFRlXrJgkLzYbJQ%2BRjs7Y%2FzIndh5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a029e17127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/js/all.css

104.21.83.154

200 OK

6.7 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/all.css
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
ASCII text
Size
6.7 kB (6742 bytes)
Hash
53a28e4214c4687dd52b638e275903dd
3b3eed54bd5ec449b19ef3f50ac8479b8744a677
240dd78da8182c3452c33ce404fe0f8f00d377f74ffe301a8c5c3c9846bbdada

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/all.css HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-26b7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qsUayi8ivFXcA51uVwAiLdudm9%2BTf5p6mtOfByJNMfoosHKP%2F%2BtOmb5sUXhKCCxerO%2BvXO5XRM8d8VH51SJyzlxox0GDyozKOajQpiAGSGb80nje30Yh5H1oAuWEeJDro4OhV7TcPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979fa8af7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/js/ie10-viewport-bug-workaround.css

104.21.83.154

200 OK

433 B

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/ie10-viewport-bug-workaround.css
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
ASCII text, with very long lines (446), with no line terminators
Size
433 B (433 bytes)
Hash
70633038c1b05c2fe4facd577f7b664b
b6f59e727d97bd1539eaf6d8cd826885e6cda628
95fb496fb65840b7aa68256aeb4af19747ec9b9831a6e6eede37bacfdbd64c1e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/ie10-viewport-bug-workaround.css HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:12 GMT
etag: W/"64511a3c-1b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3xlUaf94vvNr%2FOSJA%2FXTuNsOtqtcoYFDGDIItdOM%2Fx9Q7RIrZS9fcCW4UzIlJKpslHPxd0LnBVweFfyhOgTdrudPMKRgaGf9Hw424HCqJMrFJZu0A0z%2FCjLA7TwpGgopD%2BDnOMe81w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755979fa8ad7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/imgg/twitter-l.png

104.21.83.154

200 OK

9.8 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/twitter-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
9.8 kB (9812 bytes)
Hash
fac267d563f943d005abd2a01d207764
dbd45b8fae0cf4a32c3a9664443d65b4f8cb2cc3
392c6ef45dc72dc2d72c2a2d16ff5fcd5943766e78e14f1f6bb008c59cf80877

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/twitter-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 9812
last-modified: Tue, 02 May 2023 14:12:28 GMT
etag: "64511a4c-2654"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CxBgDw2cISQQSe%2B4Xdl%2B%2B63j3KI4OfDTocp9rzOEDddBCkRYuNNrW2ZzBpF2NDvCyr3iKMw3xgMrRo%2FKMakQ4L5VaDkJdZJGYy2OmgFyKfGzMo3npxXZT5%2BpejTnHu%2BrWCzsa30h5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a03a007127-OSL
alt-svc: h3=":443"; ma=86400

freefiremobile-a.akamaihd.net/ffwebsite/images/freefire32-2.ico

95.101.10.81

200 OK

4.3 kB

URL GET HTTP/1.1
freefiremobile-a.akamaihd.net/ffwebsite/images/freefire32-2.ico
IP
95.101.10.81:443
ASN
#20940 Akamai International B.V.

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
0d2f0e9b2281bf40f5964f6f79fba17a
6288c3d63579f1bf3822471f946e4022fb80ce97
ca80122571d6d7aea0a3c96b926fd53e5d53f7526c23b6a1f79396420bb08990

HTTP Headers

GET /ffwebsite/images/freefire32-2.ico HTTP/1.1
Host: freefiremobile-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: OBS
x-obs-request-id: 00000185DD258143941EE7E99841EC23
Accept-Ranges: bytes
ETag: "0d2f0e9b2281bf40f5964f6f79fba17a"
Last-Modified: Thu, 04 Aug 2022 12:38:52 GMT
Content-Type: image/x-icon
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSXJe+PxOX8N1Tq92ZC5KhhCeVz9jTx2
Content-Length: 4286
Date: Tue, 16 Apr 2024 16:36:05 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Cache-Control: public, max-age=3600
Access-Control-Allow-Origin: *

garena-rewords-ff.ru/freefire/imgg/top_teeth-l.png

104.21.83.154

200 OK

144 B

URL GET HTTP/3
garena-rewords-ff.ru/freefire/imgg/top_teeth-l.png
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
PNG image data, 350 x 9, 8-bit/color RGBA, non-interlaced
Size
144 B (144 bytes)
Hash
fe98481dd3ffad514594309ceb2ef4ba
0fcc8e2afec22a1abcbf7de83624504919da9a13
42fcead125ad8660c031f3b763fd048fd06b4a70a7a48cf17bc03073fb255fae

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/imgg/top_teeth-l.png HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/js/responsive.css
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: image/png
content-length: 144
last-modified: Tue, 02 May 2023 14:12:30 GMT
etag: "64511a4e-90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NA5YTxdXY5fz4p2rLqRbrduEkH3%2BT5BfDisgDpy3ZMR2zhaGgVXNmp1Ai4WLtDC61PbWJxvKocsEmZTw3BHq066uoT10xxm61CAJr%2F1P%2Fnt35%2FGvSYRYiWLRhVm72l18EbkVtKWTfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875597a029d87127-OSL
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/js/responsive.css

104.21.83.154

200 OK

9.9 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/responsive.css
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
ASCII text, with very long lines (10499), with no line terminators
Size
9.9 kB (9915 bytes)
Hash
00d40197e115e98835de706d339d199a
531cff5b4986481c73c1046aae89d0b18363e32f
2f107bb9ac72401454ebc899a1aba799a8b434e1ef9f7632faf75948dcd250fa

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/responsive.css HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/css
last-modified: Tue, 02 May 2023 14:12:14 GMT
vary: Accept-Encoding
etag: W/"64511a3e-26bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRCj6fIiswJIuHIiL1kLLmMkGV%2BkqYKzfolxFJN68tLs4QaQ0IAkucOtfSNnDaedksvyixx64JxQvww%2FPTOBIiVsfoAZeG9iI6anolXfC32WQ%2BabW4PDGHZolZXhxxixsFLqg0F2Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979fa8b37127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/js/analytics.js

104.21.83.154

200 OK

47 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/analytics.js
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
JavaScript source, ASCII text, with very long lines (1325)
Size
47 kB (47051 bytes)
Hash
53ee95b384d866e8692bb1aef923b763
a82812b87b667d32a8e51514c578a5175edd94b4
e441c3e2771625ba05630ab464275136a82c99650ee2145ca5aa9853bedeb01b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/analytics.js HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 May 2023 14:12:12 GMT
vary: Accept-Encoding
etag: W/"64511a3c-b7cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 16153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5f%2BDDNoKUY%2BrNaW9pQANBtIg4HA%2BgzWq1eFL2LN5XsE%2BRSjo0H%2Bw5KUjk5vrk4NXb%2Firtm9n1LcIzsJpQKMs03XE7uZ0JWcipHtJ6F0HnLKHNa%2Bl9ZTng%2BquQjqg6SR2UdtQ2e%2FGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979fa8b57127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

garena-rewords-ff.ru/freefire/js/js

104.21.83.154

404 Not Found

3.0 kB

URL GET HTTP/3
garena-rewords-ff.ru/freefire/js/js
IP
104.21.83.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://garena-rewords-ff.ru/freefire/
Certificate
IssuerGoogle Trust Services LLC
Subjectgarena-rewords-ff.ru
FingerprintB1:9C:51:43:6E:F4:F8:9D:07:3E:FE:85:9B:EB:AE:1A:06:38:C3:46
ValiditySun, 07 Apr 2024 16:27:42 GMT - Sat, 06 Jul 2024 16:27:41 GMT

File type
HTML document, ASCII text, with very long lines (3525), with no line terminators
Size
3.0 kB (2966 bytes)
Hash
616160ab316ba6235fe9c0f4c9af9db4
918351f89b0f390a1182968bb019268ce12d523b
dc2211c829a20fe3500fca173ea01dfb1eff65f1d0f0835e79a11695571a0500

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /freefire/js/js HTTP/1.1
Host: garena-rewords-ff.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://garena-rewords-ff.ru/freefire/
Cookie: PHPSESSID=vtodmf4i5neb0vripl6b48c63g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 16:36:05 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5%2FZtcZXL43fn2eVrS5RdwFpSjintoUSzoh8JliAAN3c5Q9Au6tJWnxv%2BluqaXf9l44zvOgJCrSjpvNME0xKhML%2BqatTjQth%2FbhH1i0kfzcU3pe%2B7Ik%2BLvI7jMq7bwP7QnFlHNG2wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755979fa8b97127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections