| verifikasi.tctx.my.id/index.php/ |  104.21.89.101 | 200 OK | 1.9 kB |
URL User Request GET HTTP/2verifikasi.tctx.my.id/index.php/ IP104.21.89.101:443
CertificateIssuerLet's Encrypt Subjecttctx.my.id Fingerprint35:01:8B:98:41:E4:53:5C:CC:E5:69:BD:57:48:E9:72:4A:8A:3D:9A ValidityThu, 28 Mar 2024 16:26:10 GMT - Wed, 26 Jun 2024 16:26:09 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2118), with no line terminators Hash37122c3f3a181384e1b25b2fa964c29a 01f2e49b90e13aeb37866d6d82d18f91cb925151 f51b89f0522e2f53763efb5bdc2a4a0ff253258d2b388d2dba07a343b6c58ff9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook | | OpenPhish | phishing | Facebook, Inc. |
GET /index.php/ HTTP/1.1
Host: verifikasi.tctx.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 15:39:04 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fk6tvASQEUZutHBxmBAvfOio5aRlTQksN0oaGwWXyuTQE1A6kcY3vjl%2FKJU1ZvzIhQqZ9AoEP647iR5Ez8P7eRpWnGm6vWKRTQbt18msAyJZ0BxW2ouyLSHECnugHoFg1WSOyOqHGEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86c0f3543f07568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| verifikasi.tctx.my.id/index.php/css/fb_style.css | 104.21.89.101 | 200 OK | 1.9 kB |
URL GET HTTP/3verifikasi.tctx.my.id/index.php/css/fb_style.css IP104.21.89.101:443
Requested byhttps://verifikasi.tctx.my.id/index.php/ CertificateIssuerLet's Encrypt Subjecttctx.my.id Fingerprint35:01:8B:98:41:E4:53:5C:CC:E5:69:BD:57:48:E9:72:4A:8A:3D:9A ValidityThu, 28 Mar 2024 16:26:10 GMT - Wed, 26 Jun 2024 16:26:09 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2118), with no line terminators Hash37122c3f3a181384e1b25b2fa964c29a 01f2e49b90e13aeb37866d6d82d18f91cb925151 f51b89f0522e2f53763efb5bdc2a4a0ff253258d2b388d2dba07a343b6c58ff9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /index.php/css/fb_style.css HTTP/1.1
Host: verifikasi.tctx.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verifikasi.tctx.my.id/index.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:39:04 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 29 Mar 2024 15:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T7W%2FF6tC0OEAAWNjuoekLYWuZprg6SgzPfw3QyjhSIDU1spx8vF2kFX7a9QmFnEuD8ZR3y16F0y4laVmfuG19zGlpnvX6lDaCkWBd94kP1axmuOaYgxLQWghf3Bk1vh0xG2x4CZ8Yxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c0f357dcef5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
| verifikasi.tctx.my.id/index.php/img/icon-fb.png | 104.21.89.101 | 200 OK | 1.9 kB |
URL GET HTTP/3verifikasi.tctx.my.id/index.php/img/icon-fb.png IP104.21.89.101:443
Requested byhttps://verifikasi.tctx.my.id/index.php/ CertificateIssuerLet's Encrypt Subjecttctx.my.id Fingerprint35:01:8B:98:41:E4:53:5C:CC:E5:69:BD:57:48:E9:72:4A:8A:3D:9A ValidityThu, 28 Mar 2024 16:26:10 GMT - Wed, 26 Jun 2024 16:26:09 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2118), with no line terminators Hash37122c3f3a181384e1b25b2fa964c29a 01f2e49b90e13aeb37866d6d82d18f91cb925151 f51b89f0522e2f53763efb5bdc2a4a0ff253258d2b388d2dba07a343b6c58ff9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /index.php/img/icon-fb.png HTTP/1.1
Host: verifikasi.tctx.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://verifikasi.tctx.my.id/index.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 15:39:04 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 29 Mar 2024 15:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHMplpAKwalKdU6YaeeRokKaqpLR%2BVpQv5eenFwpk7kTAu%2B6OVrdu%2BwvCK7F3dU%2BpUAaiG0wL9g%2FDNzP45yAGQJ396qZYBjDbQgvZP8WjmHhE6gMTUwt%2BOxswnSrX%2FLZ3fLeptoo%2BOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86c0f3587d665688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
172.67.140.18