{"report_id":"26b59521-692a-40ef-a843-cefbc5a1e1ec","version":6,"status":"done","tags":[],"date":"2026-05-27T00:30:00Z","url":{"schema":"https","addr":"invikita.id/","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":0,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"final":{"url":{"schema":"https","addr":"invikita.id/Home","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"title":"Invikita - Wedding Invitation","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"invikita.id/","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":0,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:30:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"invikita.id","ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"domain_registered":"2024-11-12","domain_rank":0,"first_seen":"2025-10-05T21:57:38.206548Z","last_seen":"2026-05-26T17:33:37.979752Z","alert_count":114,"request_count":57,"received_data":8070090,"sent_data":30501,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"64.233.161.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":476385,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":4,"received_data":112280,"sent_data":2240,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.image2url.com","ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-09","domain_rank":0,"first_seen":"2026-04-15T16:22:18.772413Z","last_seen":"2026-05-20T04:27:32.889458Z","alert_count":18,"request_count":9,"received_data":2309000,"sent_data":4457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":15842,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-05-20T15:51:07.174984Z","alert_count":0,"request_count":2,"received_data":119265,"sent_data":956,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EKVEVE02JL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"64.233.161.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc1a8665f5cca1fed9607db3d391c8b","sha1":"c58accdedd5cd65d27661337fee9ef46aecb14d6","sha256":"ccec63dac6cd5ca062636ce4560f470b73fa9ae3cb108d9a156faba5f4bd23f6","sha512":"db044c04312b5372b9bcc3a49c9b8a1f9288243890402264122777dccd7f2b95003de310110c7bb707abace5cd0962fc3b50b78fa46f13e0e6e0870405db0f0a","ssdeep":"6144:vbzj0QznVfYByH+tTCPHP0QcXFHd2BpJLeCqz7Jxpp:jdnVfYBvCP/IJHp","tlshash":"eba4e9cdb3d674625396f478903f018ba57b28e2b44cc89ab189cce42e7465a4277f7c","size":475781,"data":"","first_seen":"2026-05-27T00:30:14.548393Z","last_seen":"2026-05-27T00:30:14.548393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-react-5y6YZCrg.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"importedModule","is_inline":false,"md5":"56160fd7461d2862767d69b5d017c06a","sha1":"9a701e56f212056a40b13d989fa0059d0dd3a873","sha256":"5d5e0b5e9eaaf089da7857d96feb394fc87a1b9f21cf9256ec34d888faa0da6d","sha512":"a2b3dac8b922c1e73973b03053d446feb6c159130919f9379d025be195139f363534038c596bbb47def2251b2d772bd6db12a23c0a025f120a74fd26e8bdf6c1","ssdeep":"3072:jAHEaQ3ZfEomQ0JcQ8JAdf9OoFjqw/14o91vV:UHizmQ0JcQ8JAdFe01b9dV","tlshash":"93f31ae831aeb6626ba316b600af1507733829172c0d8861b111fd9e77f540991bbffd","size":162966,"data":"","first_seen":"2026-05-26T17:33:48.231682Z","last_seen":"2026-05-27T00:30:14.554853Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-query-DTAS3CGy.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"importedModule","is_inline":false,"md5":"54882181bead47903b305dbdf86196ce","sha1":"6e7349085333e8a0dfb5b2aaa93d5f6c570b73e9","sha256":"51310a1143f110bb153fb49017fd92c6cc4582a5b4ffd4160157c88b8838c750","sha512":"2b28192463ae0ad47c897eff62bb4dbdb14529431604edaee9ee7763d179451f7e719fb8de130a4cdf813a05e02e9daaf5936aac3d2685b49b4df9ec48fe900f","ssdeep":"768:cT/iCQmgG85YacPB2SNRIvsm9GiuKuHhRsy3GK6zfoTr+9DX5cF32pp+XTjnnYtO:0ye2mv7wsKl5TkFzVcW8y","tlshash":"1c13d9d97267f1276af28991c03e4116b1246f1a340ec028b47cafe676b164bf57af34","size":45412,"data":"","first_seen":"2026-05-26T17:33:48.211761Z","last_seen":"2026-05-27T00:30:14.561277Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-icons-BJ_Ut609.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"importedModule","is_inline":false,"md5":"28903b196796be65536a24c0f8a86af3","sha1":"4b4af124938b96fd7c86d7503e301fc3d3ed8aff","sha256":"c5b02dc8c8f969d3ce3f062d92acf898844a10cf6a41990f067116c6128625db","sha512":"4879756b1c9bfdc9b4a6d537ff58ec896ffe57ea735d8862aaf3318a3c81dfa31346b10d1cf1ac7a2ead6d600b41657e8111a3f0b746ca4999a32caebb0261df","ssdeep":"384:M+kNXIhNnrS5yXW2IiiEvsa4vI7mJc0dWMGKu4Q8rj7w3T0b3U+i8:MpNWNmAXW2Ii3SvIiy2dcAw3T0bE+7","tlshash":"cf339c7e5b8812774061c96c2f0fe5ce5b8c12bdb65e7060b41b83789a3156fcadaed0","size":53501,"data":"","first_seen":"2026-05-27T00:30:14.555569Z","last_seen":"2026-05-27T00:30:14.555569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-toast-B2Adpom0.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"importedModule","is_inline":false,"md5":"3ce86e6243e5d8aa7e08112f8ae45477","sha1":"75bf8977bb5c6b0f85823c1a8f95162f674d671c","sha256":"c5c44340ab392a9d3e6651a47c8092a295e02710b72c00d24dd94ce147066be5","sha512":"e48a47fcc85c07ab17b2ee08984fd8f911c5cc101d661a4671b61ba516a39db31d65af2ae236e33e22852a3c4652c9a748a7c08555f9cb654b4ec8b08beb3caf","ssdeep":"768:B7jw/CYToTxxMsnB7cxksc64Jysq7vHFhvkXksv4z:BjuZTkxxMXx/c64Jysq7vlZkXkQ6","tlshash":"5de20884f02c1138b92fa214e9dd532db1393602bde64426b11e1c5de2d3be53afaf65","size":32884,"data":"","first_seen":"2026-05-26T17:33:48.240897Z","last_seen":"2026-05-27T00:30:14.549892Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/index-DwyFUGGS.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f4c3a2f1aadc67d49f4b6a777b56241","sha1":"c74973823d5d1b1ddd7e1ccba3127b79cd9e5303","sha256":"fce01c63777fc42f8405a962a978c8001cadc4ad732c69f52d121079382444a0","sha512":"705e26c9a35095bff68bfcfdb07a4fcc39d16f7142ec2d63240f8b203db0e4be3fdf7fbc62900792a1199f7ed9f487386cc721a8cf664eb38e6f588fb3ec6d28","ssdeep":"6144:2nmMs0oj/TVhRCgtcxAvgUY5RnCVYhFpfPiYOLVY4rsgtCpjv4NKvTdknmWR0MFJ:4gkAvgUY59aYhFpiYSYg04NKvOnmW2Mb","tlshash":"c9841b44b051bfbdad7b09d1e87e901cb01f0f98ea2f8ce0f07e68241a54956b65b7d8","size":387247,"data":"","first_seen":"2026-05-27T00:30:14.558246Z","last_seen":"2026-05-27T00:30:14.558246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-motion-BDZr22gz.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"importedModule","is_inline":false,"md5":"8f18d8bca7867cab4f16425993abfb69","sha1":"888b0d665d78befe368ab24dd158e5ed6fbf06fc","sha256":"abf3ed52ea35007590031bf68e1b1a53f51a1cf399d8a4444a8db717000b0891","sha512":"f26bffc0b9b0c11f8cf816bead1b75378cb0c60c0fad69df086ec88479c7c8cdb1969a65cff39a94b12c949e65e93d70c9286f3e402272ffc9f91e1425e98efa","ssdeep":"1536:cKb5yM0doNeLAH+5ee4gaUCHIejqlpIdcVM9bDIVpt9PtXXBlux0z+IYbVjpQXv:cKb5yVdMUAH+5KIzCcyC7RK0zqVjiXv","tlshash":"bbb308c5b2917161d3d688e5c07f0741b73b29983409c0acb63dadcb3d2154aa6bbb7e","size":115148,"data":"","first_seen":"2026-05-26T17:33:48.21852Z","last_seen":"2026-05-27T00:30:14.551559Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ef89c715bf6903cdd0f0d6445fab30c","sha1":"f2f9f12f893a01252974d62da15ea1e6dc826712","sha256":"5f3c775c23c82ccab1aa3302de7724a30f57cf2a939cda6f60f344a7819a4c08","sha512":"bdf08f6d4bb2ff5501ad5e38e347bea1a9f7b0b7fec735f7ea8e12f612cfd20d533e79be10b5faeeafd76a9a6ffe4f0a9b2074799b7268803364ce6a86685377","ssdeep":"","tlshash":"2ac08c88220b0cb056e72a024f6fa208b0463312a4a099303d1ea3048f30e03d754814","size":172,"data":"","first_seen":"2026-04-13T14:21:41.620674Z","last_seen":"2026-05-27T00:30:14.577198Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"images.unsplash.com/photo-1522673607200-164d1b6ce486?w=600\u0026h=600\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.291Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photo-1522673607200-164d1b6ce486?w=600\u0026h=600\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/promo_popups?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=1","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/promo_popups?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=1 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 6\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-14T08:53:42.955902Z","times_seen":316866,"resource_available":true,"data":null}},"time_used":1251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/orders?orderBy=updated_at\u0026orderDir=desc\u0026limit=20","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/orders?orderBy=updated_at\u0026orderDir=desc\u0026limit=20 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:40 GMT\r\ncontent-length: 89\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:40 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7f489f912eef20b0f2704fb6bbdb56e7","sha1":"a02f45b7f03254ca0b83e8be11860210fe03175b","sha256":"3e246cba6f7df194c8012a258024ea521156ac63a2d7c35b5899fa7f4a460133","sha512":"338b97fe96d5c1a0b73b0cd396f99ad7b5274c607d86165e466a97ff3413fc09d39a8866a04ddb22fa67fbf90ece071ac6068f40de84b58714aadbff6f082f8c","ssdeep":"","tlshash":"1ab012290cc3620d057303a418f3df8e8088d30c3d215cf039218904003002bbcb2a95","first_seen":"2026-03-06T15:52:42.100113Z","last_seen":"2026-05-27T00:30:14.545768Z","times_seen":8,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/uploads/profiles/c62f5f74b28a1611_1779834385.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /uploads/profiles/c62f5f74b28a1611_1779834385.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 27 May 2027 00:29:40 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 22:26:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66658\r\ndate: Wed, 27 May 2026 00:29:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1365, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b37d02c64cc24c437ef53488263ad07","sha1":"c4d7fa211f751697751fdabff8a2af5a2ddeaa6d","sha256":"21f481042fcd06219c7dc5bebcc2d8ce4ec13d4a0327706b0b4c8f7a57137e74","sha512":"2c1a75c78cf566f78c7a82bfe7f2bfa6991ccf89950db413adb4740141988605dce23a08e0778b4df02e57a44a9c82ac0690a2414c5e40c76d9425d0a475cd5b","ssdeep":"1536:DsnblvPvuOBL00EA1Pls3O3ADypBVdgu1HSrzgx8GZbVh:DsnFvuO9pl9moBVdgu9rZ7","tlshash":"be53025a01eb0efad92a2a3e35d85cebda2df6fc4d4d09c7784d2a86d4d024408f512b","first_seen":"2026-05-26T17:33:48.240113Z","last_seen":"2026-05-27T00:30:14.546849Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:29:37.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nexpires: Wed, 27 May 2026 00:29:36 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 26 May 2026 23:30:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 794\r\ndate: Wed, 27 May 2026 00:29:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":2294,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, CR, LF line terminators","md5":"295184d9135615716d0c34ae13ceed96","sha1":"2fa23b7f1fd50b792e770df7ec520cfe53933dbd","sha256":"d8227b25fb54df73affb9a63e29b39c56e01d1f2428ed899875a26e9472c5c4d","sha512":"84d976afed5fa3582b69039a2a35047a9a679b381a342bfead1bb3197a0e92619679f55337d9813886a4a87fabe2beb44ab57bb46e82339a1fb31318239dd0d0","ssdeep":"","tlshash":"1541d0563190480607305712bee3f11ced937307454eada4b4aa61bbdfb1ed28e67876","first_seen":"2026-05-27T00:30:14.547424Z","last_seen":"2026-05-27T00:30:14.547424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":455,"dns":1,"connect":225,"send":0,"wait":225,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EKVEVE02JL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"64.233.161.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:37.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=G-EKVEVE02JL HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nexpires: Wed, 27 May 2026 00:29:38 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157518\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475781,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"6dc1a8665f5cca1fed9607db3d391c8b","sha1":"c58accdedd5cd65d27661337fee9ef46aecb14d6","sha256":"ccec63dac6cd5ca062636ce4560f470b73fa9ae3cb108d9a156faba5f4bd23f6","sha512":"db044c04312b5372b9bcc3a49c9b8a1f9288243890402264122777dccd7f2b95003de310110c7bb707abace5cd0962fc3b50b78fa46f13e0e6e0870405db0f0a","ssdeep":"6144:vbzj0QznVfYByH+tTCPHP0QcXFHd2BpJLeCqz7Jxpp:jdnVfYBvCP/IJHp","tlshash":"eba4e9cdb3d674625396f478903f018ba57b28e2b44cc89ab189cce42e7465a4277f7c","first_seen":"2026-05-27T00:30:14.548393Z","last_seen":"2026-05-27T00:30:14.548393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":72,"dns":0,"connect":15,"send":0,"wait":36,"receive":46,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 19:12:21 GMT\r\nexpires: Wed, 26 May 2027 19:12:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 19037\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T08:29:31.201535Z","times_seen":20308,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":106,"dns":0,"connect":28,"send":0,"wait":30,"receive":29,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-toast-B2Adpom0.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-toast-B2Adpom0.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/assets/index-DwyFUGGS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:38 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8950\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32884,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20809)","md5":"3ce86e6243e5d8aa7e08112f8ae45477","sha1":"75bf8977bb5c6b0f85823c1a8f95162f674d671c","sha256":"c5c44340ab392a9d3e6651a47c8092a295e02710b72c00d24dd94ce147066be5","sha512":"e48a47fcc85c07ab17b2ee08984fd8f911c5cc101d661a4671b61ba516a39db31d65af2ae236e33e22852a3c4652c9a748a7c08555f9cb654b4ec8b08beb3caf","ssdeep":"768:B7jw/CYToTxxMsnB7cxksc64Jysq7vHFhvkXksv4z:BjuZTkxxMXx/c64Jysq7vlZkXkQ6","tlshash":"5de20884f02c1138b92fa214e9dd532db1393602bde64426b11e1c5de2d3be53afaf65","first_seen":"2026-05-26T17:33:48.240897Z","last_seen":"2026-05-27T00:30:14.549892Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_03.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_03.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 101482\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e4d7b11127d41191397f0a88ad980e7","sha1":"7302db89e36bc4011c4f3b944176922f946bb4c2","sha256":"58455c5662e28081c907a91a03e997edffc0e070745d1d078c835296884770ff","sha512":"de0d18cab67f24729a66b31729de66498b28da040a73465750240217d41bc4c18c5f8d6ee25de11e7ebdf217b90da568bea0dfa6ad6863a753e65317a720b3ff","ssdeep":"3072:gkJzkaJFB2rMuRGBh/MAAUnRd6fj8r6JXMO7+dIG:gyBEMuRGonUnRd6fy6Jyx","tlshash":"1da3128554b111dad3d7d7f2bd1a6313f93d2838cd2c4a4baa16b80375d0e25304afa7","first_seen":"2026-05-26T17:33:48.234386Z","last_seen":"2026-05-27T00:30:14.550937Z","times_seen":4,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-motion-BDZr22gz.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-motion-BDZr22gz.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/assets/index-DwyFUGGS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:38 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37088\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115148,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64229)","md5":"8f18d8bca7867cab4f16425993abfb69","sha1":"888b0d665d78befe368ab24dd158e5ed6fbf06fc","sha256":"abf3ed52ea35007590031bf68e1b1a53f51a1cf399d8a4444a8db717000b0891","sha512":"f26bffc0b9b0c11f8cf816bead1b75378cb0c60c0fad69df086ec88479c7c8cdb1969a65cff39a94b12c949e65e93d70c9286f3e402272ffc9f91e1425e98efa","ssdeep":"1536:cKb5yM0doNeLAH+5ee4gaUCHIejqlpIdcVM9bDIVpt9PtXXBlux0z+IYbVjpQXv:cKb5yVdMUAH+5KIzCcyC7RK0zqVjiXv","tlshash":"bbb308c5b2917161d3d688e5c07f0741b73b29983409c0acb63dadcb3d2154aa6bbb7e","first_seen":"2026-05-26T17:33:48.21852Z","last_seen":"2026-05-27T00:30:14.551559Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1522673607200-164d1b6ce486?w=600\u0026h=600\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1522673607200-164d1b6ce486?w=600\u0026h=600\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: cc63ab8043a8450ebf017317dec15335784b438c\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 16:39:37 GMT\r\nserver: imgix\r\ndate: Wed, 27 May 2026 00:29:40 GMT\r\nage: 287403\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220096-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 118663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118663,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x600, components 3","md5":"5aab70a1851a8ece525421bf7d429236","sha1":"03ce1e48a010576491c438db0bf7f7ef6d0be2e4","sha256":"88e263094802f27d6371fef33fc5f8185989ed789001cc771bf1d6331baae1f6","sha512":"be6a2897d0b16db1b8de27e81fd5f76d1e67db8fd1af4cc1aac1caaa73a9170ec27ad2921577fb7af6383bd63233069af1684d61213c2abe15a832ceef316257","ssdeep":"3072:hYw3a6u779fCgvDlT5K1vMyhWSRNU8GUdYAmUe:+V60VdLldLh8GUvLe","tlshash":"1fc313e078a28d80fe3337f3203766f9bd825b192e061d9629255367c87c5881f9d5c6","first_seen":"2026-03-06T15:52:42.102713Z","last_seen":"2026-05-27T00:30:14.552151Z","times_seen":7,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":77,"dns":41,"connect":16,"send":0,"wait":15,"receive":29,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/themes?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/themes?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"79c9706d28d9a4947b77232b5bdf8932","sha1":"8babd310db69d261c9d9cf666621ca061088ee6b","sha256":"ad3c821e3d721874c90f1ca2def1b9407e641f8f87d5ace56f0019de89e6a65d","sha512":"7788333ee9acea5eb3bfd53c77e65c40007dfd8d9436f67e1d8de127b4bf37e0ff36cc30815d9b1fa8612260eaa40b980c2629384ecf19ff198774f902c46256","ssdeep":"384:CiGdMVd2o4yhfsGEwS/+vkanCqdTpOY8lwWcGBltBWBD7kq6zQ75wM102nEMTlzZ:P54ysSNGCzR","tlshash":"f8d20ead569dc621df2f8d9757bf0f84bbdc35b5a6c28ed4b14ae40c82e81708b0815b","first_seen":"2026-05-27T00:30:14.552846Z","last_seen":"2026-05-27T00:30:14.552846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":957,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_09.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_09.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_01.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_01.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69212\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"139c23db7d5697844de449504cfa4796","sha1":"c9edf101155e610c6ecb9258c2cc6601cc03676b","sha256":"3a67b60748dd31167ef0b5930b09a8af45fb6412d908ea532d10d4bcd2e685c2","sha512":"8b2c361fe842ba1e30666564c24e23a17f01c53f930ea2785e5e5a06a413b651a7788d3b0d15841f8e3697631eae093d30f4a13d2eb5b9b0fbfc404ec3aa022c","ssdeep":"1536:Xeao2wlj3MOpTpolvij2wypwkq4mgVUzSWI4pQjj+O7ybUFXE:uak3IlyyVvVGSRj+O7LXE","tlshash":"e563028b94bdcb80fb46d93f059dcb46e522f9473fc5bc922223fc585680d69150a8af","first_seen":"2026-05-27T00:30:14.553776Z","last_seen":"2026-05-27T00:30:14.553776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/orders?orderBy=updated_at\u0026orderDir=desc\u0026limit=20","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/orders?orderBy=updated_at\u0026orderDir=desc\u0026limit=20 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 89\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7f489f912eef20b0f2704fb6bbdb56e7","sha1":"a02f45b7f03254ca0b83e8be11860210fe03175b","sha256":"3e246cba6f7df194c8012a258024ea521156ac63a2d7c35b5899fa7f4a460133","sha512":"338b97fe96d5c1a0b73b0cd396f99ad7b5274c607d86165e466a97ff3413fc09d39a8866a04ddb22fa67fbf90ece071ac6068f40de84b58714aadbff6f082f8c","ssdeep":"","tlshash":"1ab012290cc3620d057303a418f3df8e8088d30c3d215cf039218904003002bbcb2a95","first_seen":"2026-03-06T15:52:42.100113Z","last_seen":"2026-05-27T00:30:14.545768Z","times_seen":8,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-react-5y6YZCrg.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-react-5y6YZCrg.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/assets/index-DwyFUGGS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:38 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 51435\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"56160fd7461d2862767d69b5d017c06a","sha1":"9a701e56f212056a40b13d989fa0059d0dd3a873","sha256":"5d5e0b5e9eaaf089da7857d96feb394fc87a1b9f21cf9256ec34d888faa0da6d","sha512":"a2b3dac8b922c1e73973b03053d446feb6c159130919f9379d025be195139f363534038c596bbb47def2251b2d772bd6db12a23c0a025f120a74fd26e8bdf6c1","ssdeep":"3072:jAHEaQ3ZfEomQ0JcQ8JAdf9OoFjqw/14o91vV:UHizmQ0JcQ8JAdFe01b9dV","tlshash":"93f31ae831aeb6626ba316b600af1507733829172c0d8861b111fd9e77f540991bbffd","first_seen":"2026-05-26T17:33:48.231682Z","last_seen":"2026-05-27T00:30:14.554853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":772,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-icons-BJ_Ut609.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-icons-BJ_Ut609.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/assets/index-DwyFUGGS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:38 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9092\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53501,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1249)","md5":"28903b196796be65536a24c0f8a86af3","sha1":"4b4af124938b96fd7c86d7503e301fc3d3ed8aff","sha256":"c5b02dc8c8f969d3ce3f062d92acf898844a10cf6a41990f067116c6128625db","sha512":"4879756b1c9bfdc9b4a6d537ff58ec896ffe57ea735d8862aaf3318a3c81dfa31346b10d1cf1ac7a2ead6d600b41657e8111a3f0b746ca4999a32caebb0261df","ssdeep":"384:M+kNXIhNnrS5yXW2IiiEvsa4vI7mJc0dWMGKu4Q8rj7w3T0b3U+i8:MpNWNmAXW2Ii3SvIiy2dcAw3T0bE+7","tlshash":"cf339c7e5b8812774061c96c2f0fe5ce5b8c12bdb65e7060b41b83789a3156fcadaed0","first_seen":"2026-05-27T00:30:14.555569Z","last_seen":"2026-05-27T00:30:14.555569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/payment.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /payment.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 21 May 2026 16:42:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 414360\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":414360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e752044a417e5b739bd7ace8a4b2fd25","sha1":"76b8419380d998688640c22e71c842ae3c3c380a","sha256":"2e549171d300f3449dd9c9a896d3b0a91829730c3b683839d66a35001d92a654","sha512":"cdc965e9a330c153a9beb6545d02f2e31f150e5e182a58357212a869e621364dd53bc1935d13dac56012699b54a76e93bce2b77e046610fee81d298831438598","ssdeep":"12288:0jMLK1ynAFcLxO2KcMHi0RCWt820jIDT9IBYB:uM+wnGeMHFRxCnjIFgm","tlshash":"fb942367742d6ec55f98bc8cc4ea6d24113cb9888c660fc85f4b1e72566122f83e37b9","first_seen":"2026-05-26T17:33:48.232662Z","last_seen":"2026-05-27T00:30:14.556599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1054,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/page_views","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"POST /api/page_views HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nContent-Type: application/json\r\nContent-Length: 119\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":119,"data":"{\"visitor_id\":\"2f28fa81-5cfd-4c54-9e1a-7bcdffd5312e\",\"path\":\"/Home\",\"referrer\":\"\",\"source\":\"direct\",\"device\":\"desktop\"}"}},"response":{"raw":"HTTP/3 201 Created\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 126\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":164,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0901539cd8d9396b03bc38b75fb09a8d","sha1":"b3252fbad0f5811f63f3d72208eaa6b04a94964b","sha256":"9dab18363c563f84c243422f9cb39b6f4c38cc6e9bc1f48714f50025b05eca36","sha512":"44d721a63af1c7ac675fe380d1963b6961504fc5d53b849301d0c408964a8cb4b0dc7ff6146cea69bb62b70df05650b05b850aadbac2b18a2da1b4d5fb93dcf8","ssdeep":"","tlshash":"f6c080ff9c241c1a87c1555174356d4e5555555180d5098cd1d485504599911c308974","first_seen":"2026-05-27T00:30:14.55747Z","last_seen":"2026-05-27T00:30:14.55747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/index-DwyFUGGS.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:37.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/index-DwyFUGGS.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:37 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 97393\r\ndate: Wed, 27 May 2026 00:29:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":387247,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58387)","md5":"8f4c3a2f1aadc67d49f4b6a777b56241","sha1":"c74973823d5d1b1ddd7e1ccba3127b79cd9e5303","sha256":"fce01c63777fc42f8405a962a978c8001cadc4ad732c69f52d121079382444a0","sha512":"705e26c9a35095bff68bfcfdb07a4fcc39d16f7142ec2d63240f8b203db0e4be3fdf7fbc62900792a1199f7ed9f487386cc721a8cf664eb38e6f588fb3ec6d28","ssdeep":"6144:2nmMs0oj/TVhRCgtcxAvgUY5RnCVYhFpfPiYOLVY4rsgtCpjv4NKvTdknmWR0MFJ:4gkAvgUY59aYhFpiYSYg04NKvOnmW2Mb","tlshash":"c9841b44b051bfbdad7b09d1e87e901cb01f0f98ea2f8ce0f07e68241a54956b65b7d8","first_seen":"2026-05-27T00:30:14.558246Z","last_seen":"2026-05-27T00:30:14.558246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-react-5y6YZCrg.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-react-5y6YZCrg.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 51435\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"56160fd7461d2862767d69b5d017c06a","sha1":"9a701e56f212056a40b13d989fa0059d0dd3a873","sha256":"5d5e0b5e9eaaf089da7857d96feb394fc87a1b9f21cf9256ec34d888faa0da6d","sha512":"a2b3dac8b922c1e73973b03053d446feb6c159130919f9379d025be195139f363534038c596bbb47def2251b2d772bd6db12a23c0a025f120a74fd26e8bdf6c1","ssdeep":"3072:jAHEaQ3ZfEomQ0JcQ8JAdf9OoFjqw/14o91vV:UHizmQ0JcQ8JAdFe01b9dV","tlshash":"93f31ae831aeb6626ba316b600af1507733829172c0d8861b111fd9e77f540991bbffd","first_seen":"2026-05-26T17:33:48.231682Z","last_seen":"2026-05-27T00:30:14.554853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1779097388495-65b5d06b-5109-4655-af96-c468578e7e1d.jpg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1779097388495-65b5d06b-5109-4655-af96-c468578e7e1d.jpg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\netag: \"ba6e54edbd2551405e6fed9ee5d99ef9\"\r\nlast-modified: Mon, 18 May 2026 09:43:08 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 204551\r\ncf-bgj: csam-hash,h2pri\r\ncf-polished: vary_header_present\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhDPtUqxYcQ4A9HLOjAy89NAYnYswrkXzQdzoyJGFzFNpMnc9%2BqiocmyNA79rV%2BuoCRLPRPcRlt8iH7RaSjDhlsBURQmNb0VgmHB3JvpVgzY%2F%2Fp4O0Vj9rcYrttKjaKg7rYehg%3D%3D\"}]}\r\ncf-ray: a020e820d9d3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1386x2084, components 3","md5":"ba6e54edbd2551405e6fed9ee5d99ef9","sha1":"9376a1318cf2891dc467d30523ebb55ed5b57bc0","sha256":"b1cf0acedad94bcd9b74a92a372ffb6382377c86271b80e03527020c49d664fa","sha512":"e36bd8b24d82c408f961c3b5a64de81da67d7328dc21f0dca608a305a25836a019260d7323f60379e5478dcb254938497047bb269455d358998abfb2b58e1ea9","ssdeep":"6144:FjtB/GxeghezvwQicJI8N46vviPH0gT/8kmU4WHK:Fjt0UgwUMO6iHDNmTN","tlshash":"5a14235e1b01ccc984423cd3dcb967547f6ef7124ea536602f42ce08f05aedae99b962","first_seen":"2026-05-26T17:33:48.24536Z","last_seen":"2026-05-27T00:30:14.559179Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_07.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_07.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_08.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_08.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_09.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_09.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92628\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d90b4e6c1c8ac2cc39410d12bc254340","sha1":"a4c34db87b454728835a84081fae66d5f338ab71","sha256":"62017d0984de7e3a0ec6473648d4b021adac2f06c58605fbdca3929b998d038c","sha512":"842c2f630500cc709b3c4a47ce85fc2f90028e108bcc0d7a73165649f0765f5d6695a980180ca2923119e6df22f09c2b1c38d9ad9bbefad2a2acba497f44da58","ssdeep":"1536:u+FA+yeGixSc0IXiA0dg4pi2dXKslVOeLybaOBMfvOU0Nm/cPcCE3IF:lFA6rAcUVZzllL2BMHOU6mIcxYF","tlshash":"2893120a7013609bb38b46b49ed7bfaa57753b52463b0e3e26e783149afc360760d05d","first_seen":"2026-05-26T17:33:48.247147Z","last_seen":"2026-05-27T00:30:14.559925Z","times_seen":4,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/Invikita.png","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /Invikita.png HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Mon, 23 Nov 2026 00:29:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 04:05:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1550818\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1550818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"16cda3ef26bd42f5c25ca4b214b6a0ed","sha1":"a2b6e2396ce2a0a83108613045504deb208197a7","sha256":"70694e6a5afa80c4c01d55759e652b8411768886438c24585affe51942802d0f","sha512":"38e2fd8ca32c58df5886435b0a1ad49f8fe9088ba2bb4628c81df6a6816f8c5af9120bc56234d06a37ee9e6f75f4ec7df1eb7bdb2af081b4be6d0674b3ded7b4","ssdeep":"24576:xpBFqNPILe1xYIz5wMWocnYPu/S0TcXCKbq:x8KJmWtYYHcyd","tlshash":"a42533e196155e2cc3c39a356abc3c8b0b6875c2bdd0b48790f366857509e3aa64f13f","first_seen":"2026-03-06T15:52:42.09314Z","last_seen":"2026-05-27T00:30:14.560784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-query-DTAS3CGy.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:38.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-query-DTAS3CGy.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/assets/index-DwyFUGGS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:38 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13326\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44641)","md5":"54882181bead47903b305dbdf86196ce","sha1":"6e7349085333e8a0dfb5b2aaa93d5f6c570b73e9","sha256":"51310a1143f110bb153fb49017fd92c6cc4582a5b4ffd4160157c88b8838c750","sha512":"2b28192463ae0ad47c897eff62bb4dbdb14529431604edaee9ee7763d179451f7e719fb8de130a4cdf813a05e02e9daaf5936aac3d2685b49b4df9ec48fe900f","ssdeep":"768:cT/iCQmgG85YacPB2SNRIvsm9GiuKuHhRsy3GK6zfoTr+9DX5cF32pp+XTjnnYtO:0ye2mv7wsKl5TkFzVcW8y","tlshash":"1c13d9d97267f1276af28991c03e4116b1246f1a340ec028b47cafe676b164bf57af34","first_seen":"2026-05-26T17:33:48.211761Z","last_seen":"2026-05-27T00:30:14.561277Z","times_seen":4,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/payment.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /payment.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1777277114932-63226a9b-055c-41d0-a8e5-3c22e70cf1a6.png","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1777277114932-63226a9b-055c-41d0-a8e5-3c22e70cf1a6.png HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:29:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 268187\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\netag: \"2f35d1c3d5a7477693d91c86e787deda\"\r\nlast-modified: Mon, 27 Apr 2026 08:05:15 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncf-bgj: csam-hash,h2pri\r\ncf-polished: vary_header_present\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2S15qEgMU0ZpiTBMv8UoreKPEsqj6SpytvBaCC72C1zHn7bezdl8x1%2FGzSaUEE6oYUtpD6DMyrMimWQyspLeLGjuwM0OpaAQbYq1u6FTAnkzrhmVZsMN2npDkBck8FesSL%2BxMg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a020e817baee2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3780 x 600, 8-bit colormap, non-interlaced","md5":"2f35d1c3d5a7477693d91c86e787deda","sha1":"d92102882ade3a5c96a06bc2ca6cf2cc078555c0","sha256":"83e3fd96e4593bf8cf0c146fd5db2f12fa799d2f09015a1ca052ae5514f4f5d6","sha512":"5666709343662090f987b5224acaef11e8eb3dca33127ef861937adbc3c4b1bd3d094fc500a4b6236959cff3407dc05dccbede9a88471dc289b60062457201b2","ssdeep":"6144:fqK0E4PZFIPeBqPf8elj3+d0T4zh4Na8+yNIqJZFWT:yK0EsZFIFfZ+Vl4a8+eI2ZI","tlshash":"63442309ade1a83cd7107435288457923a72d243df38a6808c3d6c6f5657d2ba62dfef","first_seen":"2026-05-26T17:33:48.228378Z","last_seen":"2026-05-27T00:30:14.562151Z","times_seen":4,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":65,"dns":43,"connect":1,"send":0,"wait":11,"receive":14,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/orders?status=completed\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/orders?status=completed\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128852,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"51c6ef110e1ddc081d835e4bd45714ce","sha1":"ed2e2031fbe339f777cf9b73d8fec17be9924dfd","sha256":"afcbaeb2c519ff80225893211dcbc26314a5f62cd0c63617d20e720680c2b190","sha512":"0f65204330e1a81e59191c4aebc4751a5f2cc3b2047bb05a22ee05c231fcb57f499a0eea312c1987f387346c606e18ca9ce002ef0cecc98fa2ced998a233ab61","ssdeep":"3072:ttXRUYwEEPphASXgbBAcBPzP9sWT25IjnotnWoMYOU:t1KAmncBPJbT2ijnanW3+","tlshash":"e9c3d03ba8dea8ef6319cd20d24c3a6caefea46359c14d54b17c1f801058566db1e9ec","first_seen":"2026-05-27T00:30:14.562635Z","last_seen":"2026-05-27T00:30:14.562635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":954,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/display_settings?limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/display_settings?limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:41 GMT\r\ncontent-length: 451\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"70c00ec753f3caab5a22e738e472a8b7","sha1":"1f7fe05af5d8b7b971a9dbbca803e84b64c38f69","sha256":"b82afab6b2d4fde09d6591c93602d9b9155b7cda6ae303b82fe319e6e9faf54a","sha512":"4a749424d6b23f09ec86a62a46a5e89b8c375f69db8ac0f2bad34e81cb0694508f416941f70b23d2595a8fc27d4d04a53211938280774536c54d3f9445ce8306","ssdeep":"","tlshash":"93118c1671b1dd7bd781bfab667abfab7504761031934eb8e190cb1400194b0058f586","first_seen":"2026-05-27T00:30:14.563558Z","last_seen":"2026-05-27T00:30:14.563558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-icons-BJ_Ut609.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-icons-BJ_Ut609.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9092\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53501,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1249)","md5":"28903b196796be65536a24c0f8a86af3","sha1":"4b4af124938b96fd7c86d7503e301fc3d3ed8aff","sha256":"c5b02dc8c8f969d3ce3f062d92acf898844a10cf6a41990f067116c6128625db","sha512":"4879756b1c9bfdc9b4a6d537ff58ec896ffe57ea735d8862aaf3318a3c81dfa31346b10d1cf1ac7a2ead6d600b41657e8111a3f0b746ca4999a32caebb0261df","ssdeep":"384:M+kNXIhNnrS5yXW2IiiEvsa4vI7mJc0dWMGKu4Q8rj7w3T0b3U+i8:MpNWNmAXW2Ii3SvIiy2dcAw3T0bE+7","tlshash":"cf339c7e5b8812774061c96c2f0fe5ce5b8c12bdb65e7060b41b83789a3156fcadaed0","first_seen":"2026-05-27T00:30:14.555569Z","last_seen":"2026-05-27T00:30:14.555569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-motion-BDZr22gz.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-motion-BDZr22gz.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37088\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115148,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64229)","md5":"8f18d8bca7867cab4f16425993abfb69","sha1":"888b0d665d78befe368ab24dd158e5ed6fbf06fc","sha256":"abf3ed52ea35007590031bf68e1b1a53f51a1cf399d8a4444a8db717000b0891","sha512":"f26bffc0b9b0c11f8cf816bead1b75378cb0c60c0fad69df086ec88479c7c8cdb1969a65cff39a94b12c949e65e93d70c9286f3e402272ffc9f91e1425e98efa","ssdeep":"1536:cKb5yM0doNeLAH+5ee4gaUCHIejqlpIdcVM9bDIVpt9PtXXBlux0z+IYbVjpQXv:cKb5yVdMUAH+5KIzCcyC7RK0zqVjiXv","tlshash":"bbb308c5b2917161d3d688e5c07f0741b73b29983409c0acb63dadcb3d2154aa6bbb7e","first_seen":"2026-05-26T17:33:48.21852Z","last_seen":"2026-05-27T00:30:14.551559Z","times_seen":4,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/theme_categories?orderBy=created_at\u0026orderDir=asc\u0026limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/theme_categories?orderBy=created_at\u0026orderDir=asc\u0026limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 438\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ce50a965fd8474dd5a9919618e418167","sha1":"6fc5ab4a954f656c558d835c5c1f24a5d0a990e4","sha256":"735a0d26617e75c56a86e694cce3b764a6a6008589eee1239b61fe6c191c1cc1","sha512":"45e088c95d7a6a1901672b2cab5a3c04b97a488e76369b601ed86370a4d93b1e7eb6cdbfa2734441b55da67992b2757d3c1012f15eb22bee2cc47d18ef50ade7","ssdeep":"","tlshash":"5e216b9973ea9a3a6e5c1ed3245fbfc3302a380f206788d5f170da04c8c9e524c0d8b9","first_seen":"2026-04-13T14:21:41.60696Z","last_seen":"2026-05-27T00:30:14.564442Z","times_seen":6,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/Invikita.png","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /Invikita.png HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Mon, 23 Nov 2026 00:29:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 04:05:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1550818\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1550818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"16cda3ef26bd42f5c25ca4b214b6a0ed","sha1":"a2b6e2396ce2a0a83108613045504deb208197a7","sha256":"70694e6a5afa80c4c01d55759e652b8411768886438c24585affe51942802d0f","sha512":"38e2fd8ca32c58df5886435b0a1ad49f8fe9088ba2bb4628c81df6a6816f8c5af9120bc56234d06a37ee9e6f75f4ec7df1eb7bdb2af081b4be6d0674b3ded7b4","ssdeep":"24576:xpBFqNPILe1xYIz5wMWocnYPu/S0TcXCKbq:x8KJmWtYYHcyd","tlshash":"a42533e196155e2cc3c39a356abc3c8b0b6875c2bdd0b48790f366857509e3aa64f13f","first_seen":"2026-03-06T15:52:42.09314Z","last_seen":"2026-05-27T00:30:14.560784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1777277114932-63226a9b-055c-41d0-a8e5-3c22e70cf1a6.png","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.293Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /r2/default/images/1777277114932-63226a9b-055c-41d0-a8e5-3c22e70cf1a6.png HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/home_features?is_active=1\u0026orderBy=created_at\u0026orderDir=asc\u0026limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/home_features?is_active=1\u0026orderBy=created_at\u0026orderDir=asc\u0026limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 6\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-14T08:53:42.955902Z","times_seen":316866,"resource_available":true,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1779303576073-6c75df11-c55d-4afd-8771-49eb4c126b38.webp","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1779303576073-6c75df11-c55d-4afd-8771-49eb4c126b38.webp HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/webp\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\netag: \"655a991dec75ea9a49dd883c1701025c\"\r\nlast-modified: Wed, 20 May 2026 18:59:36 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 81550\r\ncf-polished: vary_header_present\r\ncf-bgj: h2pri,csam-hash\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIeGLUmlLaoO4Y5scIZtI1vnxpJwS%2BbvUAD3Hx%2FHC9DKCkwdgz2fhHNlMXwMyYnqm6raC628JOAfmYFu5dQbTee3mNHLMxfRf3QVyafvxyXMeeJUCRA8PSLhIJA3WNvv2uA8qA%3D%3D\"}]}\r\ncf-ray: a020e820c9d2569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81550,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"655a991dec75ea9a49dd883c1701025c","sha1":"fd7aeb4a5c1d3ca9d1d2947b047755e900f672ce","sha256":"d477fdb42900eacdc1dd434460c277a8b7417a08010e5259529108fd2b776a16","sha512":"4e4b2ecbb7c5c9548f8cc36cb7cb9353f51600a7aa47fea6c11bb837ec27c10c30747552cab63c31aabad5270a1890e3f78290f66374bf963dd553872b8a7865","ssdeep":"1536:Xdr1TnaBroY5gbF9Bes8GAayOgmSlE3e1tuTOmP9U8gk/aEo5PABu4:XrTEgdes8cVSlOPVf/aj5PABu4","tlshash":"a08302ef102401c5d1d858e67994a6a6cfa4cd5320faa0a0fbfce865cb65d3c6c285ec","first_seen":"2026-05-26T17:33:48.24362Z","last_seen":"2026-05-27T00:30:14.565175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_01.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_01.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_04.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_04.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59588\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2316e7665a1b55f6b7cdcc84977ab5e3","sha1":"a8fbf797517edef3e8742f10a47f13c74a11a21f","sha256":"8e6ce84e0adaf2455f05a2d9bb0bc2b3e0ea59ca21e56c5da8a62b2594d67c27","sha512":"3fda5cf5d5537f9620848e5a1f142e3185a662e5b8e15b063dbf579dd56b129f42353ebb92b20d14676bbbb870a6ae9c8e53ca86934ee2c24a4f7832af9cf9b7","ssdeep":"1536:0dPRZgB+6uxrLT9dHtVRBBT1Konqm/Y4SmKbc+hckYf:0dpZV6A7FqJnThakYf","tlshash":"594302e2d59cad2aec531df12b7e161373dd280cd4d8da13449936e32fdb02635ea202","first_seen":"2026-05-26T17:33:48.252722Z","last_seen":"2026-05-27T00:30:14.565745Z","times_seen":4,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-query-DTAS3CGy.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-query-DTAS3CGy.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13326\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44641)","md5":"54882181bead47903b305dbdf86196ce","sha1":"6e7349085333e8a0dfb5b2aaa93d5f6c570b73e9","sha256":"51310a1143f110bb153fb49017fd92c6cc4582a5b4ffd4160157c88b8838c750","sha512":"2b28192463ae0ad47c897eff62bb4dbdb14529431604edaee9ee7763d179451f7e719fb8de130a4cdf813a05e02e9daaf5936aac3d2685b49b4df9ec48fe900f","ssdeep":"768:cT/iCQmgG85YacPB2SNRIvsm9GiuKuHhRsy3GK6zfoTr+9DX5cF32pp+XTjnnYtO:0ye2mv7wsKl5TkFzVcW8y","tlshash":"1c13d9d97267f1276af28991c03e4116b1246f1a340ec028b47cafe676b164bf57af34","first_seen":"2026-05-26T17:33:48.211761Z","last_seen":"2026-05-27T00:30:14.561277Z","times_seen":4,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/index-Qovs0mO_.css","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:37.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/index-Qovs0mO_.css HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15484\r\ndate: Wed, 27 May 2026 00:29:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112581,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cbe6c580b5e6139abae8b6a1cb21ba56","sha1":"a0cf0fb57e9066d09eeee38ea314ae567418f56d","sha256":"2986cbbcc756b35e2c6bc65c67b40f7df400512076813b3e66cf9ecaa4399047","sha512":"69d7b37cd53d6ca63a0dfb42b0e8abf17a1ddb382a0661de1add1af4c4beeef3dddc4d962489f8c7adb14ec83a6789ad4f6ae75045527554e73b18daef4fcec0","ssdeep":"3072:pB/TAQeJRHT0I+atRiNNvgkMU0qerzxgQZ75FHzRrc+Uc2:r/TAQeJRHT0I+atRiNNv2xgQZ75FHzRO","tlshash":"b4b3672d5e65403f3c53a1f5d798b9adf61bb1c0de3e1aaabc8201146be23f65c9b500","first_seen":"2026-05-27T00:30:14.566295Z","last_seen":"2026-05-27T00:30:14.566295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/BrandName1.png?v=2","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /BrandName1.png?v=2 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Mon, 23 Nov 2026 00:29:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 04:03:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 221731\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":221731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 425, 8-bit/color RGBA, non-interlaced","md5":"ecb5521aca97f1f8c630ed87ee4c6d23","sha1":"211f8018a03ee56f2c51b266f4197834cf7f4053","sha256":"4a1c3b4b6dce3e0a09a32ce3f8cc7b3e454c754d4b18ae4b398c73886c71bbd6","sha512":"cbdfcb13f6d741c01d588921d117119146d147c8c93176e2a6793f0e447930fe896c472ec82cb42b527db9e9035270a23cac9ff663458a10f021b6468e331483","ssdeep":"3072:oTNgynMmWaEWGyaQHtBD9aC/IJ5oKzZ5PMMeue3pnKECQo6qxbSbRWZNOlr34rQp:84j78laYIJ5hTe1KVutWZSBHBEOGwwcF","tlshash":"e82413ae0fe3fee7c668e8f282e45b5616e3c07f19106d78bd4fc12dd25128959805b2","first_seen":"2026-03-06T15:52:42.0974Z","last_seen":"2026-05-27T00:30:14.567147Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/Invikita.png?v=2","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /Invikita.png?v=2 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Mon, 23 Nov 2026 00:29:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 04:05:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1550818\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1550818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"16cda3ef26bd42f5c25ca4b214b6a0ed","sha1":"a2b6e2396ce2a0a83108613045504deb208197a7","sha256":"70694e6a5afa80c4c01d55759e652b8411768886438c24585affe51942802d0f","sha512":"38e2fd8ca32c58df5886435b0a1ad49f8fe9088ba2bb4628c81df6a6816f8c5af9120bc56234d06a37ee9e6f75f4ec7df1eb7bdb2af081b4be6d0674b3ded7b4","ssdeep":"24576:xpBFqNPILe1xYIz5wMWocnYPu/S0TcXCKbq:x8KJmWtYYHcyd","tlshash":"a42533e196155e2cc3c39a356abc3c8b0b6875c2bdd0b48790f366857509e3aa64f13f","first_seen":"2026-03-06T15:52:42.09314Z","last_seen":"2026-05-27T00:30:14.560784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1713,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":787,"receive":926,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_05.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_05.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_07.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_07.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106080\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba32d62ed26da635b68dc025b442714d","sha1":"e48b1e11cb77717320dc2da630bef3d5c6181e2b","sha256":"ffadd82aa3e20c4540119ac8defe07e24081ee500fe73f43f3e83f399d4302a9","sha512":"1493c9df6c78317f51f85fd2b2854aa45d095606f6c579844264de93b29f2288d10a40316b8931ce60b054b133a4972fa19615e349d809fa0b355bcfbd8d23fa","ssdeep":"3072:BeNg9g3tZAkK58YOcwGwdReXVAghTkRMDTqQT1R3:AK9L8BpPiBWQj3","tlshash":"0aa312f033d9d5c6f1d3d4fa05d43b7cc83266ae7bec21a6ae1c6a06a88d406f51c499","first_seen":"2026-05-26T17:33:48.216644Z","last_seen":"2026-05-27T00:30:14.567628Z","times_seen":4,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_10.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_10.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 128734\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":128734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdd11c72a5fab2894acff94b89b16382","sha1":"5869fc8825254ab0c3622747dd65350ed255af08","sha256":"af3848f74f80dff5c50f5ec5e5b9eb7ba5cbeab6eb7aac5b8efc15c29a26d5bd","sha512":"11d53e38e30fde56b64224acf12b603f7bf445fa506072d001477cc912e55a5bf33e8a326609a6f4f02baa2ca0fabaa9f86a9f79037c0872ad73698852549352","ssdeep":"3072:0kQ01Uft9ky15y28+MPhtKcZEUkHGLY3M4cDpKiDQ:0kQ0mzkO5CXPhHEUkmM3M/DIiDQ","tlshash":"2bc313db329f696edac858f825eafb435141f6c08846806d77e88b886f967558f30603","first_seen":"2026-05-26T17:33:48.244517Z","last_seen":"2026-05-27T00:30:14.568168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1778935453619-30b38655-a8b4-4be9-a614-6371e9af6413.jpg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:45.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1778935453619-30b38655-a8b4-4be9-a614-6371e9af6413.jpg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Wed, 27 May 2026 00:29:45 GMT\r\netag: \"205924cc9b9f5e040fe879f2c5d0f96b\"\r\nlast-modified: Sat, 16 May 2026 12:44:13 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 381748\r\ncf-bgj: h2pri,csam-hash\r\ncf-polished: vary_header_present\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vg55EHGyzN9DB5lVN3K22A8pe6u88uVw9iUpqg3n%2F8YVRY0MNjikbrQYKFxOUPAHDLWb89ogEbIwS4bVVx%2Bp%2B2hOukpqLngwg4okkIWJrXChsWDDYXwLsfid4%2B0s0BvY9VJpqg%3D%3D\"}]}\r\ncf-ray: a020e839fa0b569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381748,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4000x6000, components 3","md5":"205924cc9b9f5e040fe879f2c5d0f96b","sha1":"c54f7508247af3e5496a667338f611ef922d4cd3","sha256":"37f562eeb99d5ab45472e3f409c28f0f7953011ef39427a7fb2ab5e7d85d4758","sha512":"b65940ebb7706e08b9707f02d699e50145ef73c2c0688d974f6441c65e22eeb33233f88aada4fc2d6e68764230423a4aa2fe564e0962c807acdb4c2513ab1f72","ssdeep":"6144:pN64/sxzPJDNNhIQgFvnufPnq7UMzgoC8EO/xVp9IzaruFIFVu/mCRWe+I6I7:64/CJxXukPq7UpoC8F5X9hruFLH7","tlshash":"a584f132eb0681bbc038173044d36b2a3fb785b653a75203ab65547aacb7354bd6dbc1","first_seen":"2026-05-26T17:33:48.227182Z","last_seen":"2026-05-27T00:30:14.568691Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/mochkup.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /mochkup.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_10.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_10.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 19:12:21 GMT\r\nexpires: Wed, 26 May 2027 19:12:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 19039\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T08:29:31.201535Z","times_seen":20308,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_06.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_06.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_12.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_12.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70702\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa90aa7ba56ea6110543e1448c5078c8","sha1":"a209dcad739977edaf762d790ba36af2a59fe099","sha256":"6b8436c8ed44d77c46da7a16bd89d0383431a0f4dfec0d92cc3ac86b444ce4ff","sha512":"6a0d1b7b22c1dea0e5a0fea73e2930996d3e5da2a136e7eeb80838f310654866bff4f4c536b352acd822a7bfbb79b6ea619e9cb61ae12f821b2f652da8dafe68","ssdeep":"1536:sTcIGkfdl+Ckc5wR0R/0ZONWPMdW+Q33FDPduzrqPUCUdz:sOkP+Ckc5cigLHJPQBdz","tlshash":"626312c22585dbcbf2e7f9f0626e9bf2fe3c8e108b5d996407670710592169b2043e98","first_seen":"2026-05-26T17:33:48.221641Z","last_seen":"2026-05-27T00:30:14.56923Z","times_seen":4,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1778935453619-30b38655-a8b4-4be9-a614-6371e9af6413.jpg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:45.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1778935453619-30b38655-a8b4-4be9-a614-6371e9af6413.jpg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/mochkup.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /mochkup.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=15552000\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 21:47:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 196080\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":196080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1376, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a5e9dd7f5c5d9c942490fa12cc67b5e","sha1":"0d8b7801a67d0a18b5f5a57857c91d82d0223819","sha256":"e3c417544633a583f59b396985b6e7e39f303b167253b1a51249b22a395e32f9","sha512":"8d613c026cb641337a7ef5eefcf2e60130d3bb5caaa9b09f71d2577d67b75ba5c79b533aa62754a18a38cd9ae3f3770ebb9987eb09f2487c2426f60577c874bf","ssdeep":"3072:TBRh2tXzPZDBroFG0cvS5pd84ky8rnib0nxa2+9fjTz2ULByvzcta7KPO/b8cwk7:FGXzPDYHcvQpd8V5jibeX+JnJyvzcYG0","tlshash":"4a141245c82d72b71a7a0f38373988a44014b3fbec5ab711c54addb6527e2cd649e1cd","first_seen":"2026-05-27T00:30:14.569721Z","last_seen":"2026-05-27T00:30:14.569721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":778,"receive":648,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/announcement_bars?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=1","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/announcement_bars?is_active=1\u0026orderBy=created_at\u0026orderDir=desc\u0026limit=1 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 401\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3a001bd751ebc91af0870904ed47513e","sha1":"00255f33f89bfb12f1b9f2fde93b7ae7f990724a","sha256":"76dd487f859c58f249e1f3ed4f13a85685e757000a3485e9510e7ff8bf8dda89","sha512":"c3d0b14894d39e2e072aa55c1385946e986db3251cc1b5ada2bbba3526d382a2313e4c8b94222859499c88d16bb8d7ce2e7c9b1c2e956c24171923210ed03ba0","ssdeep":"","tlshash":"a1012b31c2b76d7a7ec7a3d0bbc9bb0910dd623ab246ca549dc4cd2cb3e34669204123","first_seen":"2026-05-27T00:30:14.570583Z","last_seen":"2026-05-27T00:30:14.570583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_05.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_05.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113766\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"127b201b360eaf830aa3989ff51db1ad","sha1":"a6b4ba9e16dc7b08fd3d4ba23f3599bcf6e73b80","sha256":"2465e04dbdf4eaba11f937bba8f04954f71446c28aec1e485d05c1f152ba56f0","sha512":"b9c69f014b6dc6c1c41ed117da49aa84d6f94162d6414efe251fb6631035e163ef8230d92d91c8c63a961bc6f330704fc60e8daeb2f2c673ae114f8387247cae","ssdeep":"3072:hBkh3TjK7D3gXsXDPZL4NI14BdMcRuXGiXX:hBsTqDwXsF0IODO","tlshash":"cfb3123fdcf8d3e9d040ab3a2829c6da00b454327727d2f9542a41215ba7fbab56c74d","first_seen":"2026-05-26T17:33:48.249938Z","last_seen":"2026-05-27T00:30:14.571385Z","times_seen":4,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_06.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_06.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79098\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79098,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f95ce68e46d44eacb2318c62c2944941","sha1":"270b168a67b4504f6a4c9f9a80b1e4648a4b42ba","sha256":"14b9d493550c9baca0a91b078f8c69e2b881751f9057a529d10a416a6bb0ac11","sha512":"32411bb64ae47e447288ea699bbcc2cb0809d9ae03756034d1523887a03741a042743b978bebf9ff89e92b42e57c8fd76aeac9d0c229fb1d71fbbefb6d7c7964","ssdeep":"1536:R1np1ktR8OaC9ETt+j5H6shh2byC6asp93OB7utkuyxQRWDp:R1nJRTt+j5ash26asp8BqtkuyxBt","tlshash":"c973022b5a4b72bef9d9b9fead414d01b0c0e23fd2d127b820b34506d449eb5854b78a","first_seen":"2026-05-26T17:33:48.224482Z","last_seen":"2026-05-27T00:30:14.5719Z","times_seen":4,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/api/display_settings?limit=100","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /api/display_settings?limit=100 HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g0$t1779841778$j60$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://invikita.id\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, X-Invikita-Timestamp, X-Invikita-Signature\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\nvary: Origin,Accept-Encoding\r\ncontent-type: application/json; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Fri, 26 Jun 2026 00:29:39 GMT\r\ncontent-length: 451\r\ncontent-encoding: br\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://invikita.id https://*.invikita.id; object-src 'none'; base-uri 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"70c00ec753f3caab5a22e738e472a8b7","sha1":"1f7fe05af5d8b7b971a9dbbca803e84b64c38f69","sha256":"b82afab6b2d4fde09d6591c93602d9b9155b7cda6ae303b82fe319e6e9faf54a","sha512":"4a749424d6b23f09ec86a62a46a5e89b8c375f69db8ac0f2bad34e81cb0694508f416941f70b23d2595a8fc27d4d04a53211938280774536c54d3f9445ce8306","ssdeep":"","tlshash":"93118c1671b1dd7bd781bfab667abfab7504761031934eb8e190cb1400194b0058f586","first_seen":"2026-05-27T00:30:14.563558Z","last_seen":"2026-05-27T00:30:14.563558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1779097458628-13640684-3f13-40c8-af38-ab0e2ba3e321.jpg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1779097458628-13640684-3f13-40c8-af38-ab0e2ba3e321.jpg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\netag: \"5d822a7ece911a0ba8676e5d3d9043b1\"\r\nlast-modified: Mon, 18 May 2026 09:44:18 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 727743\r\ncf-polished: vary_header_present\r\ncf-bgj: csam-hash,h2pri\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVFgCvK6PUSZAVsywa62hgZ0%2BuGfE6mKFzmRyEWJg1cZdD4Z9%2FadfAS26WUDEjIs5RB1noRcQ%2BhFUE5bAYAjcLRQEq0NmwvOcHWUqwSPuXje98l599gFcmbWmkiugZUIAzXmOQ%3D%3D\"}]}\r\ncf-ray: a020e820d9d4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727743,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3473x4944, components 3","md5":"5d822a7ece911a0ba8676e5d3d9043b1","sha1":"c295b257a22ff76a3ce77e40fe141cccc838170b","sha256":"1fc72e0a6eb2f36c0915a0f4d923c15f4cd97e8deb113f12c955056737008ae1","sha512":"f852be2ab1f691b8004a404e7cab761955e9d88ebbe63a6ed4c4e9d099b1a11d3543cbef8865f273e08ec8090c8dcda0ddaecf853ec3984489cd03b658692fe0","ssdeep":"12288:M/q1dcNlxZ5ccQsP5UeO5H703BPZaTmttzFrOvMlKne0f+k+cvOenlSdVgCvj5:MS1d+HRUeOV7ChZa2l2Mb0f7+C1c375","tlshash":"a2f423454f3a607bfc9dc7781cc34b0972f35aa0a118b7d9085b474da18ab9dfb8e291","first_seen":"2026-05-26T17:33:48.246187Z","last_seen":"2026-05-27T00:30:14.572381Z","times_seen":4,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_02.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_02.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_03.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_03.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_04.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_04.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_11.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_11.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_08.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_08.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56958\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a6b4acdc93da20d14fce1b89f3d7b40","sha1":"d62ccbb8b979cf6d99f940aed69a6d205a14f980","sha256":"4e70794f4ef4a88f2180b47478c1a0ebdd2bbea250fb72ca7eeb3cbccd6b743f","sha512":"2cfbc301c46f4ac2c43ca5d2fc10ca05c15fb1c363f50d5d95ad8a32607e227009527726728d0b6ec8304ba3b3b02d57ebc55d8ef7309214e8ee66cd8cfc412d","ssdeep":"768:2OnEU0luQxp5voJsHfA4NaqEFZR5MEEmX9bBxutHlOZRRniUm2cRtY57EvY5NkLR:Tnu4QloJt00ZLHXE5lAN/4mIYGG4MkN","tlshash":"6243018b7754872fdd909ab37003db18c68049ac47b60ed09f36352acc4dce97a68363","first_seen":"2026-05-26T17:33:48.253586Z","last_seen":"2026-05-27T00:30:14.57291Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_11.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_11.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55954\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc33ef9c9910977e266d67652165e33e","sha1":"6e222f68bfad3c40068d6dca51289aebbf219386","sha256":"beb858803879249c8e9b4b68426700408a8bf2946a5a88bcc3383d52e7e7b3c2","sha512":"7cb8bed243e396717560dc1dd87aea2743a0885716f51f7ae50f8bc3a3c58b6e8c30e11e239ad4ca729d2abe3728fc2a022d3fa3713e5b40a949768605eb9b20","ssdeep":"1536:hj7m+wxSh+mSitjgKcr3038BhBmiX9/YjZyKKwTu7nN:hHaohnSitzcj036YZTCnN","tlshash":"b543f25a7d88a340e8de627b567e0de5f8302ea3020b09b77600cd39b602bd9f57562d","first_seen":"2026-05-26T17:33:48.220766Z","last_seen":"2026-05-27T00:30:14.573462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 19:12:21 GMT\r\nexpires: Wed, 26 May 2027 19:12:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 19039\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T08:29:31.201535Z","times_seen":20308,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":50,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_12.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:41.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_12.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T08:51:43.57595Z","times_seen":17883714,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/themes/Bugoy_02.webp","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:42.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/themes/Bugoy_02.webp HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/Home\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_EKVEVE02JL=GS2.1.s1779841778$o1$g1$t1779841781$j57$l0$h0; _ga=GA1.1.1036571507.1779841778\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74698\r\ndate: Wed, 27 May 2026 00:29:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b13ccf28e57d46cfb0fb63a7fae5755","sha1":"a942529d47b8aa1a32afa467ca0a58d5e3d6cd33","sha256":"0d2c979ebb9c5ebff161c9cdd33a750c193c22ee62bad49df0584bae5db58cb9","sha512":"1c2a98469794867d18df288a6f56fb4f43be4d5799d6a10d09e297a006aa62871d468d8f37525b879df1e315467fb4e33b042fab3c8259ac367b6cd7fa7f0c66","ssdeep":"1536:Lj6f6FHZPhzHSYYn2S7In+5MaTIairIHfwPYmVI03k43qUh:HLFxhzyYW/eU1dirrQM9R3qUh","tlshash":"4c7302f7c007421ae1c89cf5a135138fb6da98a03e0537e7382a96547ff584db81e8e6","first_seen":"2026-05-27T00:30:14.574186Z","last_seen":"2026-05-27T00:30:14.574186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1778856457073-86c7413c-44db-45d0-96e2-9c16b96380d8.jpg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:49.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1778856457073-86c7413c-44db-45d0-96e2-9c16b96380d8.jpg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Wed, 27 May 2026 00:29:49 GMT\r\netag: \"4c7a18620f5315b2c80574c78ffd3fba\"\r\nlast-modified: Fri, 15 May 2026 14:47:37 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 601706\r\ncf-bgj: h2pri,csam-hash\r\ncf-polished: vary_header_present\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jbKCxJn4gHswYneH0oEF4aT56AgMj315moq9fOau4feVyIrTmtDmdmc3EWqOdeEcLcj7LThwd7v0Puj5LJpIEYdd28%2ByAk07%2FCQeI1PIF3YOywgKZtSz5wD%2BGK2WuStvuqmJQ%3D%3D\"}]}\r\ncf-ray: a020e852da43569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=1067, software=Android X6817-H6920ABCDEFHIJ-S-OP-240218V2220, orientation=[*0*], width=720], baseline, precision 8, 720x1067, components 3","md5":"4c7a18620f5315b2c80574c78ffd3fba","sha1":"c18f5bcc6c77245f7c02802efea6a0a04fc1d343","sha256":"bbbc15b19fcfe44d00ca372e9251ed9a53935714d390ebae15e9d893af8ba51f","sha512":"b00dd4c2aca2833b24aa4df9d19b7ce4d2d682be084712de1de1e515e628c6e62f45231468be7e941665ced382f0b4abe7f0b21f82832157b55463524423efa5","ssdeep":"12288:EGzvN6rmMvqLz+h0dsikFo7M4JrQKwzbhFNnXVTsIIDOO1Z:E0vwKMQ/7MEOxnXRQCe","tlshash":"a7d423b2552c88eee66a75b48ab3231bde67a5c0f50b1616584f23f15590e0e73303fb","first_seen":"2026-05-26T17:33:48.239169Z","last_seen":"2026-05-27T00:30:14.575068Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.image2url.com/r2/default/images/1777357025524-8b4054e3-d56e-4024-bf9c-8ef7cfe82f42.jpeg","fqdn":"www.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"104.21.12.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:53.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image2url.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:03:43 GMT","end":"Thu, 30 Jul 2026 05:03:42 GMT"},"fingerprint":{"sha1":"4A:87:DD:87:08:8C:37:EB:EE:EB:5F:92:71:B8:6C:C9:A3:30:98:72","sha256":"7F:9A:4F:93:E7:DB:85:05:EE:04:59:F3:3C:60:D9:1F:E8:BE:B5:11:56:05:6F:43:D5:6E:65:AB:AE:99:E2:FD"}}},"request":{"raw":"GET /r2/default/images/1777357025524-8b4054e3-d56e-4024-bf9c-8ef7cfe82f42.jpeg HTTP/1.1\r\nHost: www.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Wed, 27 May 2026 00:29:53 GMT\r\netag: \"862ff15e56c735d093db7fdcc09cd957\"\r\nlast-modified: Tue, 28 Apr 2026 06:17:05 GMT\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-robots-tag: noindex, nofollow, noarchive, noimageindex\r\ncontent-length: 36910\r\ncf-polished: vary_header_present\r\ncf-bgj: h2pri,csam-hash\r\nage: 24986\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wthVEDHH2aOPg5qczBkWBx5X%2B%2FYQI7gg3OnxT6gAvR537TzNhYaAl0Oumdk3QrqdtsBwa0z%2BFX0GUnOIYy3DtqX9UsYFHAhfpU9TlruxTay15EYMfdSRY%2F5PFhaQPgpQL9CBA%3D%3D\"}]}\r\ncf-ray: a020e86bca94569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 1066x1600, components 3","md5":"862ff15e56c735d093db7fdcc09cd957","sha1":"1b85dd1eb75aab6ba4f8abe517571ee05ca2f5d8","sha256":"808dd69601886352243a64ba0370a5aeefd83804f1f16af34bcfa41b6eb4b94b","sha512":"32c7c32f308c3141b9478adaa299497ec9c57f5f284c45dc87a6c23c46ca45ba85123aab743dc9048dfd0d9d9ac58a8298475bc8ebcc3238404e01cc7def3d16","ssdeep":"768:stoEAewyQEHuL8OG5vng+U0PraZx8VgqDDzLXohcLcEJkHKMGua:stpbwyVHuLy5vgJzKgqD3LXoCwEBzF","tlshash":"70f2f1ba7f35d937c82d3372d6e2cb143b9d01b9ce566542ddae0c1094989c43e182ee","first_seen":"2026-05-26T17:33:48.242753Z","last_seen":"2026-05-27T00:30:14.575665Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"www.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,400;0,600;0,700;1,400\u0026family=Plus+Jakarta+Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:37.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Playfair+Display:ital,wght@0,400;0,600;0,700;1,400\u0026family=Plus+Jakarta+Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 00:29:38 GMT\r\ndate: Wed, 27 May 2026 00:29:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15156,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6c9b2030938a9ab2e68a3a2e4413162d","sha1":"a7a8c51152116fbbeae683303792c2373fa6aa9d","sha256":"bba5df9f4451ad126902212e1662cff68fb083a9a27d06224f305e4f26fff463","sha512":"9bc223c8594d1ac373745629ea5c7a99237f63178a22c860fe7552325308cf66aa88879076b5cd6efcccfeb14561ec80cf5ecf1f4889e99ddea02caa464cd860","ssdeep":"384:JJ129lM129q129m1299L2R/W2v/2bv26F2R/Y2v52bp26E2R/J2vI2b42JfdrFn:haAawacapaOw/0vxaww50pAahwI04G","tlshash":"2362ffa1056ba600eb431cc763cf7e369e9e6191704581bc9ffd18989c6fc2aa374b0d","first_seen":"2026-03-06T15:52:42.084392Z","last_seen":"2026-05-27T00:30:14.576416Z","times_seen":9,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":99,"dns":1,"connect":28,"send":0,"wait":33,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invikita.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 19:12:21 GMT\r\nexpires: Wed, 26 May 2027 19:12:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 19039\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T08:29:31.201535Z","times_seen":20308,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":40,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invikita.id/assets/vendor-toast-B2Adpom0.js","fqdn":"invikita.id","domain":"invikita.id","tld":"id"},"ip":{"addr":"202.10.43.48","port":443,"asn":58487,"as":"CV. Rumahweb Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invikita.id/","date":"2026-05-27T00:29:40.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.invikita.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:28:38 GMT","end":"Fri, 29 May 2026 20:28:37 GMT"},"fingerprint":{"sha1":"64:44:EE:15:71:75:CE:0D:3D:BD:73:CF:EF:DC:AD:78:1D:FD:3A:40","sha256":"FE:A8:46:2B:3A:F0:ED:0D:03:67:0A:37:73:6C:B1:F4:76:53:15:A0:64:94:B2:C8:7B:6C:7C:98:BD:74:6D:68"}}},"request":{"raw":"GET /assets/vendor-toast-B2Adpom0.js HTTP/1.1\r\nHost: invikita.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://invikita.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 27 May 2027 00:29:39 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 May 2026 23:43:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8950\r\ndate: Wed, 27 May 2026 00:29:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32884,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20809)","md5":"3ce86e6243e5d8aa7e08112f8ae45477","sha1":"75bf8977bb5c6b0f85823c1a8f95162f674d671c","sha256":"c5c44340ab392a9d3e6651a47c8092a295e02710b72c00d24dd94ce147066be5","sha512":"e48a47fcc85c07ab17b2ee08984fd8f911c5cc101d661a4671b61ba516a39db31d65af2ae236e33e22852a3c4652c9a748a7c08555f9cb654b4ec8b08beb3caf","ssdeep":"768:B7jw/CYToTxxMsnB7cxksc64Jysq7vHFhvkXksv4z:BjuZTkxxMXx/c64Jysq7vlZkXkQ6","tlshash":"5de20884f02c1138b92fa214e9dd532db1393602bde64426b11e1c5de2d3be53afaf65","first_seen":"2026-05-26T17:33:48.240897Z","last_seen":"2026-05-27T00:30:14.549892Z","times_seen":4,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"invikita.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
