Report - mlbb-exchange.event-redeem.com/verify.php

Report Overview

Visited public
2025-01-26 12:38:56
Tags
URL
mlbb-exchange.event-redeem.com/verify.php
Finishing URL
mlbb-exchange.event-redeem.com/verify.php
IP / ASN
104.21.48.1
#13335 CLOUDFLARENET
Title
Confirmation: Mobile Legends Bang Bang

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2025-01-22	1.0 kB	61 kB	151.101.65.229
akmweb.youngjoygame.com	283991	2016-02-25	2021-06-16	2025-01-19	484 B	2.3 kB	184.51.252.179
mlbb-exchange.event-redeem.com	unknown	2025-01-01	2025-01-17	2025-01-17	1.0 kB	35 kB	104.21.32.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-01-25	medium	mlbb-exchange.event-redeem.com/	Mobile Legends
2025-01-26	medium	mlbb-exchange.event-redeem.com/verify.php	Mobile Legends

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js	ScriptElement	81 kB	2023-08-05	2025-06-11
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js IP 151.101.65.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-05 00:21 Last Seen2025-06-11 08:56 Times Seen2099 Hash e2b09c06f0e714b6144a6788a28e3950 ce54f85f278fbcd5cb2292f9c186eedf63cdcf88 d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5 Loading...

HTTP Transactions (5)

URL IP Response Size

cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css

151.101.65.229

200 OK

35 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://mlbb-exchange.event-redeem.com/verify.php
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
Unicode text, UTF-8 text, with very long lines (65342)
Size
35 kB (34728 bytes)
Hash
896192cc65e20f1fcc6d792b5b9a4626
b13ef70543d70c1ec7fdd56a5ebc9d7d64023851
d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6

HTTP Headers

GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mlbb-exchange.event-redeem.com
DNT: 1
Connection: keep-alive
Referer: https://mlbb-exchange.event-redeem.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE"
content-encoding: br
accept-ranges: bytes
date: Sun, 26 Jan 2025 12:38:32 GMT
age: 4008051
x-served-by: cache-fra-eddf8230044-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34728
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js

151.101.65.229

200 OK

25 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://mlbb-exchange.event-redeem.com/verify.php
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
25 kB (25082 bytes)
Hash
e2b09c06f0e714b6144a6788a28e3950
ce54f85f278fbcd5cb2292f9c186eedf63cdcf88
d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5

HTTP Headers

GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mlbb-exchange.event-redeem.com
DNT: 1
Connection: keep-alive
Referer: https://mlbb-exchange.event-redeem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.1
x-jsd-version-type: version
etag: W/"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g"
content-encoding: br
accept-ranges: bytes
date: Sun, 26 Jan 2025 12:38:32 GMT
age: 1544156
x-served-by: cache-fra-etou8220068-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25082
X-Firefox-Spdy: h2

akmweb.youngjoygame.com/web/gms/image/1d4439a2ab14e995b99fd8934adb34ee.svg

184.51.252.179

200 OK

1.2 kB

URL GET HTTP/2
akmweb.youngjoygame.com/web/gms/image/1d4439a2ab14e995b99fd8934adb34ee.svg
IP
184.51.252.179:443
ASN
#20940 Akamai International B.V.

Requested by
https://mlbb-exchange.event-redeem.com/verify.php
Certificate
IssuerLet's Encrypt
Subjectact.gms.moontontech.com
FingerprintEF:C4:08:B5:A3:17:A0:47:5A:E3:EF:C1:42:7A:55:59:30:91:81:6B
ValiditySun, 26 Jan 2025 01:10:54 GMT - Sat, 26 Apr 2025 01:10:53 GMT

File type
SVG Scalable Vector Graphics image
Size
1.2 kB (1240 bytes)
Hash
dbb6f5cabfb92b02ed3a7f55491b2acc
687ca97efc14adc00f1aa4ce8a1d4bc65edc678d
8da14fad7313ab0a024414c81cedb1c1686fb4541ac5fc5ed959e106fd9c7644

HTTP Headers

GET /web/gms/image/1d4439a2ab14e995b99fd8934adb34ee.svg HTTP/1.1
Host: akmweb.youngjoygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mlbb-exchange.event-redeem.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: k4tJJzskE3wAmaWD3/t8qDi6L/eUJCrHfjw8S3SzdAk38Njbmb9fOGvAdhjPBg8F1ftHTLaROD4al3XRfmJQPg==
x-amz-request-id: 50KNT7RE8JBS0Q0N
last-modified: Tue, 10 Dec 2024 07:23:35 GMT
etag: "dbb6f5cabfb92b02ed3a7f55491b2acc"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
x-parent-response-time: 27,184.51.89.188
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2262093
expires: Fri, 21 Feb 2025 17:00:05 GMT
date: Sun, 26 Jan 2025 12:38:32 GMT
content-length: 1240
akamai-mon-iucid-del: 1172575
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
access-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2

mlbb-exchange.event-redeem.com/img/assets/app_icon.png

104.21.32.1

200 OK

31 kB

URL GET HTTP/2
mlbb-exchange.event-redeem.com/img/assets/app_icon.png
IP
104.21.32.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mlbb-exchange.event-redeem.com/verify.php
Certificate
IssuerGoogle Trust Services
Subjectevent-redeem.com
Fingerprint88:D2:F3:B0:56:AA:6F:5B:A8:05:61:DF:6D:2B:BB:85:44:B6:06:EB
ValidityWed, 01 Jan 2025 16:11:48 GMT - Tue, 01 Apr 2025 17:08:10 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Size
31 kB (31082 bytes)
Hash
fb854bfa717133d49abc60ecefa5cab1
0aa4a0ef72e42aa83fe20bff9fcd57a7437c9c4a
b2132b26950dd2bc1c04eea3f271230ce1ce2b97a6bcb1a9812b0c05d8552b8e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mobile Legends

HTTP Headers

GET /img/assets/app_icon.png HTTP/1.1
Host: mlbb-exchange.event-redeem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mlbb-exchange.event-redeem.com/verify.php
Cookie: PHPSESSID=4d4517f64fd9816f9f66a0c5bd83d466
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 26 Jan 2025 12:38:32 GMT
content-type: image/png
content-length: 31082
last-modified: Sat, 21 Dec 2024 04:12:02 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MoP0TSGObcAvK9M9%2FP2BmTE4mo0tF5yo7XXOIXstQtzymzZxKtFR8i%2Fbms3VMzAaN0sxerSl58JU7hrun%2BS2t84MqrqhpZdxEu7Qff91ahmnIAJUHB4jpnWUYjYXExpD8A8SIRliSJiPMVzNeXTyIN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 90808f837f04b523-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4174&min_rtt=543&rtt_var=7229&sent=12&recv=15&lost=0&retrans=0&sent_bytes=4957&recv_bytes=1334&delivery_rate=6972712&cwnd=257&unsent_bytes=0&cid=bdaa13f64db45e0b&ts=1493&x=0"
X-Firefox-Spdy: h2

mlbb-exchange.event-redeem.com/verify.php

104.21.32.1

200 OK

2.2 kB

URL User Request GET HTTP/2
mlbb-exchange.event-redeem.com/verify.php
IP
104.21.32.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectevent-redeem.com
Fingerprint88:D2:F3:B0:56:AA:6F:5B:A8:05:61:DF:6D:2B:BB:85:44:B6:06:EB
ValidityWed, 01 Jan 2025 16:11:48 GMT - Tue, 01 Apr 2025 17:08:10 GMT

File type
HTML document, ASCII text, with very long lines (2321), with no line terminators
Size
2.2 kB (2184 bytes)
Hash
4ea92efee04e407dbf962ae82c4ba89d
0a5279b39ff13fdf21920c4111744b815c306ecd
6eb8d64984e607a2ccc82af0f5efc599a459b44a328a8c966ff8cff811f5cc65

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Mobile Legends

HTTP Headers

GET /verify.php HTTP/1.1
Host: mlbb-exchange.event-redeem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 26 Jan 2025 12:38:31 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=4d4517f64fd9816f9f66a0c5bd83d466; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UJ7Kyt5vd4L1igEN83athoIbHl9b7s%2B5tJh0AGkgREpUCf%2BVGuRYLLdkVrwLl%2Blu3LT4mAkUbmtIi4GdmhluqSmUYa0QrUDL0%2BpCsTEAyEMobMZ8CP2%2Bg6Sd3Zv%2F%2F8sHBkxVXu0m08Xqzfb%2FsfONocw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 90808f7e0d37b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5948&min_rtt=543&rtt_var=10812&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3212&recv_bytes=1136&delivery_rate=6734883&cwnd=254&unsent_bytes=0&cid=bdaa13f64db45e0b&ts=592&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers