Report - bantuan-dana-id.layananofficial.biz.id/

Report Overview

Visited public
2024-04-27 17:23:01
Tags
Submit Tags
URL
bantuan-dana-id.layananofficial.biz.id/
Finishing URL
bantuan-dana-id.layananofficial.biz.id/
IP / ASN
172.67.129.93
#13335 CLOUDFLARENET
Title
DANA - Apa pun transaksinya selalu ada DANA

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
normandy.cdn.mozilla.net	3562	1998-01-31	2017-01-30 06:02:05	2024-04-26 18:17:10	329 B	1.2 kB	35.201.103.21
classify-client.services.mozilla.com	3824	1994-10-18	2019-01-09 19:41:01	2024-04-26 18:17:10	357 B	344 B	34.98.75.36
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-04-27 02:38:36	485 B	18 kB	142.250.74.74
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2024-04-27 08:31:50	432 B	32 kB	151.101.66.137
bantuan-dana-id.layananofficial.biz.id	unknown	unknown	No data	No data	7.8 kB	168 kB	172.67.129.93
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-04-27 02:35:04	1.7 kB	147 kB	216.58.207.227
aus5.mozilla.org	2548	1998-01-24	2015-10-27 08:06:24	2024-04-26 18:14:06	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA
2024-04-25	medium	bantuan-dana-id.layananofficial.biz.id/	DANA

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	From	Size	First Seen	Last Seen
	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	135 B	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 17:24 Times Seen1371 Hash 8135d55bdb3fdd9003e5226986c539f4 17796aff7fea44999042478f0340bdc87776acab 0c472d92c58eac469153a6fa27f2fb758ae436804afed1b0689bd9e33c15a0eb Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	66 B	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 17:24 Times Seen1354 Hash b7ec93a09110dfd8bb76196fe658a2ca fa0e9eecd598aa16a419e4e799c4694469ecf9f3 5ef8108dc8ed8de6d3ce2b0a190bcde518ac3f55143f767074e421359a2ee58a Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	214 B	2023-06-29	2025-02-26
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-02-26 08:59 Times Seen967 Hash d5d8d7e5364c28cf2a6bdb2d1b533425 38c68da0d60983a3f9fa085872d27ad97f5707d0 73e91b6f1b1b5cf60d3701b6e287a052b09787492ee66fd00288d6d29c5b1f75 Loading...

	code.jquery.com/jquery-3.5.1.min.js	ScriptElement	90 kB	2023-03-07	2025-07-02
Pretty URL code.jquery.com/jquery-3.5.1.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-02 23:27 Times Seen120001 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	690 B	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 14:11 Times Seen1204 Hash 37b6cc906dee95ba31d6dc3561093274 cf09a304a41aafdb080861bc47d37f346def78d4 f2e9070c480bcec6af473420c44054580f46caddad6daed002db97fe1790daac Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	689 B	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 17:24 Times Seen1370 Hash b05c8bd1528cb5466392fb8d88178905 84590a391d262608fef98d82cc37bc399c656c6a c5ed1f676d19f816f1f227611469605003b0e57edc27aaf55f51a654aa6134e2 Loading...

	bantuan-dana-id.layananofficial.biz.id/ast/jquery.mask.min.js	ScriptElement	7.9 kB	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ast/jquery.mask.min.js IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 17:24 Times Seen1436 Hash 2e961f240d376e0a83c885a07f00762e e9f1d4a792dc3fb06f8d65d68a607738f3b4070c 470a65fdd4c44fa96ef232acb2a308ca73a3f17d6accc399d0c7a28a21d532d9 Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	429 B	2023-06-29	2025-02-26
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-02-26 08:59 Times Seen968 Hash 4d1528243a309f4162fe80c2cde9ae93 8f3ed458f48f58e15538686dc001fd0ae8fe2079 917bd4fc4ff0da5f10b0e353b4dc49b8cf8962d64e04c7f8095fa046360a2d40 Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	357 B	2023-06-29	2025-01-28
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-01-28 21:55 Times Seen317 Hash ae670af07ba3f41b83efee1f7aaec49b 6449c1b351f3ae8ad60dd920f6015f366a232e65 3b412056538c9ca5fbea8ce1fce2d3268214bf0c93af968bcc17b87d6eb4ba00 Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	278 B	2023-06-29	2025-01-28
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-01-28 21:55 Times Seen317 Hash 98d47023d77791c3fcb4d2d917ceab48 0db967e209ff2a11f3861e8e092548e2dd2bd81e 46ffe8601ef68e12c5909802c82967e3bbea08fc0fb5df8f1885625ead2736a8 Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	372 B	2023-06-29	2025-01-28
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-01-28 21:55 Times Seen317 Hash b2becc9784c38e2886fbc8c9d838eb76 f829beaac152b27a8f2d1c1d46495a289bc9846f e93ef7b036b54308f1c535df2f7b5d7750ebb892407a4b4aad9540dff35b454f Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	156 B	2023-06-29	2025-07-02
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-07-02 14:11 Times Seen1198 Hash 00c3ff7222ce30d0151b609ce9b1dd00 28fbd8656f7edc3e6f92e420aa6c8bba22be6049 aaaee6f16237a69ade0d0a8e1246b230292a6eead0155f688c49e8de8b5a35c2 Loading...

	bantuan-dana-id.layananofficial.biz.id/	ScriptElement	382 B	2023-06-29	2025-02-26
Pretty URL bantuan-dana-id.layananofficial.biz.id/ IP 172.67.129.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-29 14:59 Last Seen2025-02-26 08:59 Times Seen988 Hash 7544c9acf4737e54470eb118ba8361a5 6a4d26abaec547bb911dcd1d131505512c3d5dfc 15d88dfd919c1a4ae658e43cfb9c9bc3dc298440028e47b065e43b2218c52f21 Loading...

HTTP Transactions (24)

URL IP Response Size

GET code.jquery.com/jquery-3.5.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.5.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30879 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 27 Apr 2024 17:22:36 GMT
age: 94729
x-served-by: cache-lga21981-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 64, 31939
x-timer: S1714238557.912775,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/ast/img/dana_logo.png

172.67.129.93

200 OK

13 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/dana_logo.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
Size
13 kB (12786 bytes)
Hash
6fd5a7d18a8f7c04bc5effcdc5235987
c4852c577f44fcdf78fb439a30ea2c6c6983b140
c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/dana_logo.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 12786
last-modified: Mon, 12 Jun 2023 16:22:12 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQFP4NIVumtS810%2FEm6rO95p7%2F6%2BMm4oBAKkFWCsK%2BjGwjXqVEWBJjbh3VjJRqCrJchwiKkbg8jH%2FBpnl5yxU2fdWsKOOrYGPs71eKlqKwgIJPth36lt3JZGXRzG%2BJmHF7c2PT1mYc%2FnXGySGBExOZvqrDeAoDajzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee42971b523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/

172.67.129.93

200 OK

13 kB

URL User Request GET HTTP/2
bantuan-dana-id.layananofficial.biz.id/
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
HTML document, ASCII text, with very long lines (9313)
Size
13 kB (13203 bytes)
Hash
216fc470f7033c16cf3a8031b060b928
1099202db279aa9e9fe532570514a688640b44ad
07028ee0d19df0d4c4205b54dd7141b1e73f3af351658a4c20cf921dd3b547b4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET / HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 17:22:36 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2B57ov9TXNjDVhWrIyEggo2Mr1ftaUNPol0aGjkFZeZxoO48vQObVC%2BvxNjBTjZEQ7frX2pGYzvqiC%2FYRDs1L3zrBEGj2KZnhlwy1pBY0KkhMkNqKcpJUcT0L4MA8mQFqvUQUYID3o37fNYYMQJbHn8sCmtQT4Otag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87b07edf3f89b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/ast/img/load_bg.png

172.67.129.93

200 OK

7.9 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/load_bg.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
Size
7.9 kB (7863 bytes)
Hash
bf1d4a90de7e29b2be55237982cb30b4
ef942049631b598767fda52d54458b9f9680ee87
46518758f002d85cff9220609163f23b7e9f8f2721561d1e0ba79c4f17425c58

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/load_bg.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 7863
last-modified: Mon, 12 Jun 2023 16:23:04 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UOE%2FKqBiEWHFFFc9a0NMVQTJe%2FAwlw%2F6bK4I3I%2BIrnU9bl5DmZJl8JpCuIwnXYYXl3q49Tl9ZSTMH8SEojZMyJeiT2zWbuEPDT91XZKWDGOgly1RFfY9mHnDl%2Fu8NmgHv7RqTVisNtpDGMImvYONtQSO62sqbst28Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4297db523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/img/load_spin.png

172.67.129.93

200 OK

5.1 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/load_spin.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
Size
5.1 kB (5078 bytes)
Hash
e8e4e4432355a07040a7327673850223
b07f6cfaacb6a2093778b08dd8d9b8f7d718c119
50b4bad00572d07c6158459a5cb93b1b3f9bdea95d393aa56970afded2f58913

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/load_spin.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 5078
last-modified: Mon, 12 Jun 2023 16:22:56 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DlkpThX2I%2Fkqzw078OfhEu78D9qzeSkmrG6IEvQENYRAVROBuUOMFoboj%2BbPyng7QLQESq3fn%2FjrRNlMLklGdBOsgYvN3PGKLXov9zbVZIBOL7Cc6%2F6VAbspOr%2FITyBZqhgEvwQf9L4aYfinLu0QA3%2FdPLH2ovEP7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4297fb523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/img/indo.png

172.67.129.93

200 OK

741 B

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/indo.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 80 x 45, 8-bit colormap, non-interlaced
Size
741 B (741 bytes)
Hash
c15c95b8db17f44e5826bb7839278578
5be0ab5aba6201a0a3a3423f9db8008ed2385430
af52bfb0ab7606d185db1457ddc3edceb61c7fe9675e099cae3e3be1eccf152c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/indo.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 741
last-modified: Mon, 12 Jun 2023 16:23:12 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGxbySETbwbZ0pYfPugUEb8cOEhO95yMQ%2FExWQy3%2BVnRSNnUPSZOX5dFov62f6vIn4P3ra0C42ZPBnghJHzbbm1cvZqXAFljIdadtjYeeb84EvLX1Ikjm0V3asDU%2FDozsV2SC%2BfMXA5NRxYmsY05MYWHKrFYGEYEzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee42981b523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/img/kom.png

172.67.129.93

200 OK

8.5 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/kom.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
8.5 kB (8484 bytes)
Hash
74adb66e545a68df7e5a0442a02fa8e7
a1692d3bfbde3c0cb3a8bc9b9b1fb2de4d570e85
4285db40c51cc53230cab0490df40566e285b48fb2b2e4729b42ff2a26c74480

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/kom.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 8484
last-modified: Mon, 12 Jun 2023 16:23:08 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GCBCAYf2xe2UYi%2Brm9uVGmoIEtupaFwfv4aGxEEUhu79yr%2FQ6zh2x89n1kICV0OUHQNZzS4rEZloeXyqco%2B62AIhRd7rFxLCl5LOwmo5bHdGsQF0HNZAvqiNEkwulorv49Sc0WQ8R9poIcW5Wls%2BLAMcBu2LcSjTuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4297bb523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/img/hero.png

172.67.129.93

200 OK

43 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/hero.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
43 kB (43109 bytes)
Hash
4126c0393b3b7dfa2800095ce6ecf338
811d0a98523b12c1fa6255aa87b4d2101dab1020
f7d0665dea209eb1d41d46f66b7c2106f9e2f129178e530dfe258965c6d885d1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/hero.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 43109
last-modified: Mon, 12 Jun 2023 16:29:58 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAUK2PCPr%2Fj7KTS%2Fo%2FYMOcZE%2FgxUPgjB9Z%2Bf5kJ9tJxkVG46pG3ibaoCSk%2B9imW3SOoMAU1NL8jz%2Bd0wgyA9dRAZg6V390O9UUWkxUuG61%2F7Rxr7%2BBcUhAaQwAgejwkRTEY9DpcJqbpzp2rxFYO4eb00hz25ByoFMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee42975b523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/img/bi.png

172.67.129.93

200 OK

16 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/bi.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced
Size
16 kB (16542 bytes)
Hash
6e77df79b301b9fb95fdf50d66e3ceb7
1c93476fccf582d5ea0fa88ec8b1becc00d9edb5
4262dc8d42209d7e2a597f7f1098880e75ad0f6a53a66da1a7bd094a5f778199

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/bi.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 16542
last-modified: Mon, 12 Jun 2023 16:22:08 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A79XEWhWLXco%2BFOiC3V6qJ3dN%2FxYeF5PL%2FNeHKgVas84%2FlSS4dFgEYxgTNZTn%2FZGkz4Ot6kzJ0X5EFDir6dE7AE8eBDpeMl9TG6WMDgSGNezZxLjN%2FnOMIaQ5%2F%2BEcX3NXAb9i9OP69WuyZoT2Op%2Fa7Pdz%2Bi2vDiPGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4297ab523-OSL
alt-svc: h3=":443"; ma=86400

GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bantuan-dana-id.layananofficial.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 226057
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/ast/00b9d2e9f52e505c013c16bb638a42a4.css

172.67.129.93

200 OK

7.9 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/00b9d2e9f52e505c013c16bb638a42a4.css
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
ASCII text, with very long lines (666), with no line terminators
Size
7.9 kB (7935 bytes)
Hash
f04c34e455649c317cbfe449a7c5b10e
07c192cd6c0d6b6a96ddd3fe56ffc5762c2f6eb7
963ee000ea25a124a63e7dd4ded8a9adc4d3501de7d0bf47f78f6fa4bc4ee472

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/00b9d2e9f52e505c013c16bb638a42a4.css HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: text/css
last-modified: Mon, 12 Jun 2023 16:18:20 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ajOQ28EMNrlakeLjOlmAX7qr2Sq1EwgogmyL32hy4wLWMHwsQese6E1Hn3EY7ERAoYtISmfSy1hGRXK6TI86DFHHxckDHXQpf%2BKo41Fxdplm0AVQxR3xiCHXwjSBm7D1tSY4NqVrC2feBoX2wvVDxVbe8%2FE%2BH%2BbcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4296ab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/8d62ea654fcf0e4cae001e344ee2592c.css

172.67.129.93

200 OK

9.4 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/8d62ea654fcf0e4cae001e344ee2592c.css
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
ASCII text, with very long lines (3850), with no line terminators
Size
9.4 kB (9407 bytes)
Hash
6a47026eae042cc9152e2ba28cae1688
11f91794ddadcd088a8e78720abd5cce59700198
a2a6e6317012a338c0dc67124f68f969166edc9f7c3f75d54ff48942d785e709

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/8d62ea654fcf0e4cae001e344ee2592c.css HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: text/css
last-modified: Mon, 12 Jun 2023 16:19:40 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lirs4JBskMXt33XcgHzTN5bt6hIHU6GUk3S%2Beh5F4NYUhC6EZhjG31JeA9Xy10yNuCKOcC6dPWzVqa4NDHYD6Gx7pWKhh0qBLpkAmRJIquu%2FwWOsle58vdSjWxz2uuPFMucf9hkZk5zyDjPzQiJOphoz%2FBN8xPFhmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4195db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/6990a7033bbaeadc2040ac863ff124fd.css

172.67.129.93

200 OK

3.8 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/6990a7033bbaeadc2040ac863ff124fd.css
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
ASCII text, with very long lines (1255), with no line terminators
Size
3.8 kB (3829 bytes)
Hash
7420333c4f6ef8b075a0f757b2af4f20
0e6836ef790baabf62aa0df5f33c8b3e8450295a
55c79193a97d40e41d31c65be9722e008c40ee3b3404d7c59dd75114b5986202

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/6990a7033bbaeadc2040ac863ff124fd.css HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: text/css
last-modified: Mon, 12 Jun 2023 16:21:02 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gx0IcKnKOMFnrdzmXwYofdYQWgj4AkS8uLY4kynYPXoyEqeh5Q6kRiHjr8GIzuaw7tugEkxtlEGIsoUMiXeI%2BJX46SgyMwMZH1HdVhysyzzHtxZojYb2BTy406IM8kGk%2BYI7HWADJG%2BB6CaejOAQQL%2Bhp7yz8%2FVzMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4296bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bantuan-dana-id.layananofficial.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 226061
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bantuan-dana-id.layananofficial.biz.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 226061
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/ast/3fadc676582b9542004b502ee03df3a3.css

172.67.129.93

200 OK

8.6 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/3fadc676582b9542004b502ee03df3a3.css
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
ASCII text, with very long lines (1561), with no line terminators
Size
8.6 kB (8649 bytes)
Hash
553a4feacebe4a339e3f83b082684ff8
7334803536f6429c43ad344da92e22414e5882c2
94e570a73c7171a271962b2c59739196b2101bba6ce3257e1e60743013cdaf32

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/3fadc676582b9542004b502ee03df3a3.css HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: text/css
last-modified: Mon, 12 Jun 2023 16:18:54 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QV2faAOHlcdjPq4VmwerDEJgbc7N4LBThYDFMTgcW5O7s718Qzdc%2FePHrz8hzxnvxKrFedBlNKb8JEwkOvssFHxjalCAY8jLXN5X2fAAz3Wcaj25n4gsbqd5Kh6zKGLn%2BTI%2BZryfgsSA6%2FG1oDSjmziGXEWQV6D%2BkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4296db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=xwxT0va5eeNaYb8qjVWHfazjf6VcBM_xkqIbBFSQ42m1iNeKoPuGzAG8dYYjcVbTZmXocRBczk7bY7y4Ca0QZUunmRE7wSICVCQk2z026VrXiIUSUjVr7guQRFJeEMhj
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
content-length: 444
date: Sat, 27 Apr 2024 17:21:31 GMT
age: 84
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

normandy.cdn.mozilla.net/api/v1/

35.201.103.21

598 B

URL
normandy.cdn.mozilla.net/api/v1/
IP
35.201.103.21:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
JSON text data
Size
598 B (598 bytes)
Hash
3076f9a5cb273105528b893ff7111e41
b8990c145fe71b9a2410eea41a60a712b43b82bf
69c578fb0c03a28141a975833f660f4571e7991dc28ae7f9cead37672ee2c9b3

HTTP Headers

GET /api/v1/ HTTP/1.1
Host: normandy.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 598
allow: GET, HEAD, OPTIONS
content-security-policy: object-src 'none'; form-action 'self'; frame-src 'none'; block-all-mixed-content; base-uri 'none'; worker-src 'none'; default-src 'self' https://normandy.cdn.mozilla.net/; report-uri /__cspreport__
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
via: 1.1 google
date: Fri, 26 Apr 2024 23:22:35 GMT
cache-control: public, max-age=86400
content-type: application/json
vary: Accept, Origin
age: 64822
alt-svc: clear
X-Firefox-Spdy: h2

classify-client.services.mozilla.com/api/v1/classify_client/

34.98.75.36

64 B

URL
classify-client.services.mozilla.com/api/v1/classify_client/
IP
34.98.75.36:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
JSON text data
Size
64 B (64 bytes)
Hash
1c8032193937b982609e97509dfa6b50
aa1f4946748fef7a48f59d29e18068a7285b7a22
d97abe0ac4e6b8871754bf6571f552444f5849ceabefcbe4fa2f658836138f97

HTTP Headers

GET /api/v1/classify_client/ HTTP/1.1
Host: classify-client.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 27 Apr 2024 17:22:58 GMT
content-type: application/json
content-length: 64
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/ast/img/dana_text.png

172.67.129.93

200 OK

11 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/img/dana_text.png
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
PNG image data, 480 x 118, 8-bit/color RGBA, non-interlaced
Size
11 kB (10588 bytes)
Hash
3dc459976e4f7086419105435a80fc25
4a79a70ae98be7b6386ddde8609d83eee4777373
8af7f1691e018bfc400432dfc61455f26f63226ab369e675c80cef5a93334e87

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/img/dana_text.png HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: image/png
content-length: 10588
last-modified: Mon, 12 Jun 2023 16:22:16 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJU2t4qz1uRO4RqavlbeqovE%2FygKLTvDXG6PsYpqxAdPHrQZrgQLeyM%2FEQ0QBs9RgVOJQ9KrCrnvMjAXzurD3%2FUXMBmuq98wvBdyMf6n8loU73VM%2B%2BMd5T7Uv8M2MbdnhayKC3n7JVD0Ic5GnCkhkaSkjLOtdV5w%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee42977b523-OSL
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/47e4c58f6b9789b8a33f2525cf084599.css

172.67.129.93

200 OK

790 B

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/47e4c58f6b9789b8a33f2525cf084599.css
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
ASCII text, with very long lines (790), with no line terminators
Size
790 B (790 bytes)
Hash
8308d2ea1d6ea02c0cb00f298799633e
6deedbf3eea7d45bd140179d681c8f78613073d6
fe9df1a47b206f90c0f6a9bd88239d8eb22313978376f04d9e3fab4a35317380

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/47e4c58f6b9789b8a33f2525cf084599.css HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:37 GMT
content-type: text/css
last-modified: Mon, 12 Jun 2023 16:20:22 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fD1m6TPZvAL2huH8oesjsy3tAQRQQcFLA9iqDHuDbz4c%2FQvUjzd0%2FSjZtmqNHHRnqIcO%2FPWQ7nkeh40JZiy0%2Byuj4n0PxAaH5yCOXO4p6LqnR0CGaXUAx080XWh4c%2Fll3uchqWdPueUM5qi90i%2BCCvdERD7iZD%2FnpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee4296fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET bantuan-dana-id.layananofficial.biz.id/ast/jquery.mask.min.js

172.67.129.93

200 OK

7.9 kB

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/ast/jquery.mask.min.js
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
JavaScript source, ASCII text, with very long lines (8132), with no line terminators
Size
7.9 kB (7920 bytes)
Hash
c71ebcdd10a5dd93f081dc61e87d6b63
88623481cb90c64c31185ae9325d420aeffdd1e6
d07deaceaefefc6bab3b5d703b361beac52560eb3418a71ae7312e2d873094ba

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /ast/jquery.mask.min.js HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 27 Apr 2024 17:22:38 GMT
content-type: text/javascript
last-modified: Mon, 12 Jun 2023 16:21:48 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TouNVehY62QddLrcV1rnFqzeTCQVAxNg2npRmXW22iJeiMletEwJswXlB5pKi51%2BG31YhTrI75JZ0HA2%2FZCgICE%2F5yEKi4x7fHe%2FcFq9rmvO%2FUi1q72L3ksZzEjmsHEo%2FT9QvPa%2FaRDoyGSc2mOVIfZ8l97jUVDfcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07ee42984b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap

142.250.74.74

200 OK

18 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1572)
Size
18 kB (17451 bytes)
Hash
71b2730c1cecf7a0768725bd944422c5
8dfa323cb988538bce8556a99bb5bd556e3593d1
851699a18b631a7bd68efc99598701293a6065b463fced7b68d8d6d9227bd8e7

HTTP Headers

GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Apr 2024 17:22:37 GMT
date: Sat, 27 Apr 2024 17:22:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET bantuan-dana-id.layananofficial.biz.id/favicon.ico

172.67.129.93

404 Not Found

315 B

URL GET HTTP/3
bantuan-dana-id.layananofficial.biz.id/favicon.ico
IP
172.67.129.93:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bantuan-dana-id.layananofficial.biz.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectlayananofficial.biz.id
FingerprintD6:72:AB:53:42:51:65:8C:B3:38:CA:10:C1:8B:88:66:DB:39:7C:01
ValiditySat, 20 Apr 2024 03:18:06 GMT - Fri, 19 Jul 2024 03:18:05 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DANA

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bantuan-dana-id.layananofficial.biz.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bantuan-dana-id.layananofficial.biz.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 27 Apr 2024 17:22:40 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xjntpA7Dd3qgrgNhCS%2BH8x3gDvK3xTmnNQtC4It2K2bleriAxG%2Bz32EUNFusd5GqN2xbZvAkUTw1PRkbn%2BY3d3SlqoOHl9wEdE7f3DdgJHbyL%2F0M49pFu9rzJ1oGdKhwkXFvkyo5OzQPhF1kG4RCsAD9KmOv%2Bi%2FoZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87b07eebe945b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by