| new.infocodashop.my.id/img/medi.png | 104.21.69.181 | 200 OK | 59 kB |
URL GET HTTP/2new.infocodashop.my.id/img/medi.png IP104.21.69.181:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectinfocodashop.my.id FingerprintCA:79:22:8C:58:AE:05:AB:B6:F7:5F:96:B6:3C:05:51:F2:2F:F4:31 ValiditySun, 14 Apr 2024 20:19:58 GMT - Sat, 13 Jul 2024 20:19:57 GMT
File typePNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced Hash7cc76703da0c40d173a70ef5ea4c3d79 4f2f8d71c60f8e8affe1353f106cda1e1f99c077 0448c55bf8dca8847e9de8847328fe19af50eec96c5fc2a40d9f5e7d09bc7357
GET /img/medi.png HTTP/1.1
Host: new.infocodashop.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 17:21:57 GMT
content-type: image/png
content-length: 59448
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 17:21:09 GMT
last-modified: Tue, 19 Mar 2024 04:37:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 48
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hEbp9IArQombGdwLo%2BXmcybxk6rsIcGDoYJB%2Frvk6yfpOdGEvL5gE5JAVDqtHOGYZMStjFYnJVyNRT0SKgdGk2QH3TFsbKlz3JGXXyeBuxXJVt%2Bfdlz5sIVIGjNfikAT%2BmDfPmd%2BECNC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8766558e5e9f56cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js | 151.101.1.229 | 200 OK | 25 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP151.101.1.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hashe2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5
GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 17:21:57 GMT
age: 9139884
x-served-by: cache-fra-etou8220068-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25082
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/verify.php | 172.67.219.11 | 200 OK | 36 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/verify.php IP172.67.219.11:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text Hashf0b15f233ce5606402211eea7c109a93 c80d3a9ae42605f93002b3c0e773f80c3e3ddc47 0608cc3d2db3ee57f3b8973818a3b2fcfa7d41b901e9c177a6e3df134ec45c07
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /verify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 17:21:57 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=64a3402a10e7ddef73cee9755ae3ce52; path=/; secure
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2FQKv5%2BCtjX%2BsmXEQpvx99AI7wma1AJzXH%2B0Jh%2FwszAC0lRHsvFdcgA4M4cs0T5RTpKTJFdAA70nn2AWHlBIkZETbcCRCGUhiyKZ2PznZjDFJt%2FiXg6HCRklsM7ejW840gVK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8766558c3a5fb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google.com/ | 216.58.211.4 | | 72 kB |
IP216.58.211.4:0
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (14512) Hash16c4f8d28463a542476f4be19d2621b7 4bd2a57dcf29a8e88860e570fe886f80da2a5f68 fa45bca034f7d6cab888f506615ae2e12579e4e85774b5ab176e46a585f6b4aa
GET / HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mjagk.mags.my.id/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 17:21:57 GMT
expires: -1
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-Tjzu-WL5zMAo9NGL3CfPqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 72129
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: AEC=AQTF6Hy6A80BlhRac26pmRtJIERDwEeIqPz_2hs52t9MqlWCHk-hNOExXG0; expires=Tue, 15-Oct-2024 17:21:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
__Secure-ENID=19.SE=F4H4ZdGqDDM-xj3do6IjxqEtKJnTYtnV32U_zzHdK526Kf33mXaiHHiEUjxRWKdSJzp2PXVLirApEHsdkCIGQBUVLcjL3DUpo3RnYEF0f1ixuh6Ghzjh9dOyl1XgWPl46zBp3sRXMOjwCScvTMzpq-y50GyAkx439_UKBqXFmwcgYAoh6A; expires=Mon, 19-May-2025 09:40:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/favicon.ico | 172.67.219.11 | 404 Not Found | 10 kB |
URL GET HTTP/3mjagk.mags.my.id/favicon.ico IP172.67.219.11:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer | Verdict | Alert | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/verify.php
Cookie: PHPSESSID=64a3402a10e7ddef73cee9755ae3ce52
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 17:21:58 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o0rm89DH9%2BvNqdYX8ifOFajN%2BG0QSK%2Bl%2FOTkabzBL8P9XvEevTJjL5Fhz8QjkHwTtLZZPagMuKWUP5HvKygEfcXqxib3qQawPqEimvgZdb8TfO%2FZKPhvrpLJSYo7AhrVH75o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876655924f0d7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| file.gifan.id/fontawesome.js | 104.21.234.34 | | 9.2 kB |
URL GET file.gifan.id/fontawesome.js IP104.21.234.34:0
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGoogle Trust Services LLC Subjectgifan.id Fingerprint65:21:CF:78:C6:F3:9C:82:42:72:2D:29:CC:E1:28:F9:68:C7:DA:50 ValidityTue, 26 Mar 2024 02:33:24 GMT - Mon, 24 Jun 2024 02:33:23 GMT
Hashdac29b5808aa0527a7180ab8095ee652 e0494046816376e104a9a82f32415258e1991e4a 79438bbf0eb53fb49c94efcfbeb77d8592422c7a1e9bad91d05c720d82a208c3
GET /fontawesome.js HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 18 Apr 2024 17:21:57 GMT
content-type: text/html
location: https://www.google.com/
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVaVid1nhDQs6oidxJuA7beiNopz5vZjJncWCWgDhZUkl%2FJiWB138%2FTPRsznLU9redClSbAZNwP7sTdtJWY9yfY8wKG4Rg3aMvpKRHD3RZlHHLNv7FzejAF558id4fXn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8766558e986bd91a-HEL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.php | 172.67.219.11 | 302 Found | 2.1 kB |
URL User Request GET HTTP/2mjagk.mags.my.id/index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.php IP172.67.219.11:443
CertificateIssuerGoogle Trust Services LLC Subjectmags.my.id Fingerprint1D:EC:AE:D4:A4:66:EE:8C:D7:EC:0A:02:BD:B1:26:96:D9:CC:F2:26 ValiditySat, 23 Mar 2024 05:23:04 GMT - Fri, 21 Jun 2024 05:23:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?gToken=verifiedverify.phpverify.phpverify.phpverify.phpverify.php HTTP/1.1
Host: mjagk.mags.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 18 Apr 2024 17:21:57 GMT
content-type: text/html; charset=UTF-8
location: verify.php
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oVWVH%2FpyC7uenYkzyg9DELxiQa2nypvn4Ydj8p0iFb6Bw8VZDG18Uw8L02w%2BbfUohjvem9by6ijLKslVPjjZmLDiI%2FpzjaYWmsBFNCX9cb0FQ4LgNkwFAy7xVzV6dt3VCflA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8766558b89ceb50b-OSL
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css | 151.101.1.229 | 200 OK | 233 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css IP151.101.1.229:443
Requested byhttps://mjagk.mags.my.id/verify.php CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Size233 kB (232855 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mjagk.mags.my.id
DNT: 1
Connection: keep-alive
Referer: https://mjagk.mags.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 17:21:57 GMT
age: 6120408
x-served-by: cache-fra-eddf8230044-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34728
X-Firefox-Spdy: h2
|
|