{"report_id":"2f4bffe4-3aed-40ae-bbfc-d817fe53c25d","version":6,"status":"done","tags":[],"date":"2023-09-21T01:31:57Z","url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"104.21.20.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"title":"GRUP BANTUAN KERAJAAN"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T22:56:06Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":5408,"first_seen":"2013-12-18 14:14:30","last_seen":"2023-09-20 19:40:47","alert_count":0,"request_count":9,"received_data":430982,"sent_data":4165,"comment":"","tags":null,"fingerprints":null},{"fqdn":"beritaviral-terkini.my.id","ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-09-11","domain_rank":0,"first_seen":"2023-09-11 07:21:00","last_seen":"2023-09-20 13:09:40","alert_count":6,"request_count":3,"received_data":88414,"sent_data":1383,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-09-20 18:36:41","alert_count":0,"request_count":1,"received_data":31465,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.godaddy.com","ip":{"addr":"192.124.249.22","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"1999-03-02","domain_rank":698,"first_seen":"2012-05-20 21:28:57","last_seen":"2023-09-20 18:14:13","alert_count":0,"request_count":4,"received_data":10460,"sent_data":1320,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T05:30:10.288584Z","times_seen":217468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c629a0c52a2afad699d260f673481fd","sha1":"a4fd0ed3e5daa31480eb6de0faa5d442f015cbf6","sha256":"ea0d804370930ee958af535ce56cddf1dda419bdc676315ae8af0fbb4c733471","sha512":"dac369a2699b0f8a0d32acfcdd5c43c73d77e3dbd07dda400d0087608fd5e3f857d6952b730d1ce20f89d095f67794d3549dfc16181276b92e550bb76c7e0a53","ssdeep":"","tlshash":"57c012b42900643a2daa096cb636dbe83d321563f2a23410e22cc16c0021ed31000ec8","size":193,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-04-03T12:42:58.861473Z","times_seen":58800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b89d34702716a8ad2cc3977718f53a3","sha1":"04406ebd6a9e2ce79dbac5e5048cfe1384e4574a","sha256":"2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6","sha512":"e6fbda1e7d1e24c0db5a724e4cd30c883ceb5d35de1cc6ab8851c9b19e202024752e7e42aecc21002f9f9684ea98775f1ebe0ee8da9bd7562dac2fe171464242","ssdeep":"","tlshash":"b151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","size":2979,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-04-04T03:27:22.609336Z","times_seen":66416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.827Z","timestamp":1695259900827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\nage: 457702\r\nx-served-by: cache-lga13628-LGA, cache-bma1667-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 59, 114839\r\nx-timer: S1695259901.699122,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T05:30:10.288584Z","times_seen":217468,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":67,"dns":28,"connect":8,"send":0,"wait":9,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.22","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-21T01:31:41.040981607Z","timestamp":1695259901040,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 21 Sep 2023 01:31:40 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19022\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Wed, 20 Sep 2023 05:19:29 GMT\r\nExpires: Thu, 21 Sep 2023 05:19:29 GMT\r\nETag: \"88b9ea5c19627571f597add59002c40678c6e9fc\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"371379628c25b8dfea677086a2eab631","sha1":"88b9ea5c19627571f597add59002c40678c6e9fc","sha256":"791ae9a4f8e89633f38800bd7552a2af156e7feff285305f7473a53f92a51167","sha512":"adaa6abc45d0b15a9abbcc112f981166e8ea98e79990afffaf920bb101e9aeae6c061b5f4555731a463561ef11fcb756d4f9d099ee5a33680acc2876cfc34437","ssdeep":"","tlshash":"c841faed9b6e99c9bf030f88baf4c5320db914f1a39c049938f3c65119553c87a8409d","first_seen":"2023-09-20T08:04:20Z","last_seen":"2023-09-21T03:32:01Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.22","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-21T01:31:41.042000415Z","timestamp":1695259901042,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 21 Sep 2023 01:31:40 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19022\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Wed, 20 Sep 2023 05:19:29 GMT\r\nExpires: Thu, 21 Sep 2023 05:19:29 GMT\r\nETag: \"88b9ea5c19627571f597add59002c40678c6e9fc\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"371379628c25b8dfea677086a2eab631","sha1":"88b9ea5c19627571f597add59002c40678c6e9fc","sha256":"791ae9a4f8e89633f38800bd7552a2af156e7feff285305f7473a53f92a51167","sha512":"adaa6abc45d0b15a9abbcc112f981166e8ea98e79990afffaf920bb101e9aeae6c061b5f4555731a463561ef11fcb756d4f9d099ee5a33680acc2876cfc34437","ssdeep":"","tlshash":"c841faed9b6e99c9bf030f88baf4c5320db914f1a39c049938f3c65119553c87a8409d","first_seen":"2023-09-20T08:04:20Z","last_seen":"2023-09-21T03:32:01Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.22","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-21T01:31:41.04292473Z","timestamp":1695259901042,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 21 Sep 2023 01:31:40 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19022\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Wed, 20 Sep 2023 05:19:29 GMT\r\nExpires: Thu, 21 Sep 2023 05:19:29 GMT\r\nETag: \"88b9ea5c19627571f597add59002c40678c6e9fc\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"371379628c25b8dfea677086a2eab631","sha1":"88b9ea5c19627571f597add59002c40678c6e9fc","sha256":"791ae9a4f8e89633f38800bd7552a2af156e7feff285305f7473a53f92a51167","sha512":"adaa6abc45d0b15a9abbcc112f981166e8ea98e79990afffaf920bb101e9aeae6c061b5f4555731a463561ef11fcb756d4f9d099ee5a33680acc2876cfc34437","ssdeep":"","tlshash":"c841faed9b6e99c9bf030f88baf4c5320db914f1a39c049938f3c65119553c87a8409d","first_seen":"2023-09-20T08:04:20Z","last_seen":"2023-09-21T03:32:01Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.22","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-21T01:31:41.043812031Z","timestamp":1695259901043,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 21 Sep 2023 01:31:40 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19022\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Wed, 20 Sep 2023 05:19:29 GMT\r\nExpires: Thu, 21 Sep 2023 05:19:29 GMT\r\nETag: \"88b9ea5c19627571f597add59002c40678c6e9fc\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"371379628c25b8dfea677086a2eab631","sha1":"88b9ea5c19627571f597add59002c40678c6e9fc","sha256":"791ae9a4f8e89633f38800bd7552a2af156e7feff285305f7473a53f92a51167","sha512":"adaa6abc45d0b15a9abbcc112f981166e8ea98e79990afffaf920bb101e9aeae6c061b5f4555731a463561ef11fcb756d4f9d099ee5a33680acc2876cfc34437","ssdeep":"","tlshash":"c841faed9b6e99c9bf030f88baf4c5320db914f1a39c049938f3c65119553c87a8409d","first_seen":"2023-09-20T08:04:20Z","last_seen":"2023-09-21T03:32:01Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:41.291Z","timestamp":1695259901291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://beritaviral-terkini.my.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Mon, 25 Sep 2023 01:31:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\\012- data","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-04T05:17:38.162288Z","times_seen":73252,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:41.294Z","timestamp":1695259901294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://beritaviral-terkini.my.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11040\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b20\"\r\nexpires: Mon, 25 Sep 2023 01:31:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11040,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\\012- data","md5":"5e22a46c04d947a36ea0cad07afcc9e1","sha1":"6091d981c2a4ee975c7f6b56186ee698040bb804","sha256":"0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44","sha512":"3e2dcb20c7416160573ea7c7a17bf7250132c5203161b03aeaa3cf065e3ce609da6d1b317d3739aad7fc0c092c44cd0c4ea5657a63bfa530c66f9b0ecb9daf15","ssdeep":"192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt","tlshash":"3b32d0a8682c19fc49357837b8034109dfdfa1c1428c0a5633ebf5f45da3a264e2fe61","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-04T04:29:08.050949Z","times_seen":67236,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/apple-touch-icon.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:41.449Z","timestamp":1695259901449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Thu, 21 Apr 2022 13:47:47 GMT\r\netag: \"62616083-160c\"\r\nexpires: Mon, 25 Sep 2023 01:31:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\\012- data","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-04-04T03:27:22.602254Z","times_seen":67666,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/2.jpeg","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.840Z","timestamp":1695259900840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beritaviral-terkini.my.id","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Sep 2023 04:20:08 GMT","end":"Sun, 10 Dec 2023 04:20:07 GMT"},"fingerprint":{"sha1":"AF:DF:4F:33:54:0D:F6:F9:B5:55:34:6F:A5:B4:2D:DF:A7:91:CF:0C","sha256":"DC:06:FB:4B:86:87:EF:03:6D:09:61:C2:E4:33:51:21:06:B0:D8:76:16:3F:DC:78:01:C8:67:3E:25:9B:EA:B5"}}},"request":{"raw":"GET /2.jpeg HTTP/1.1\r\nHost: beritaviral-terkini.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77038\r\nlast-modified: Sun, 17 Sep 2023 12:12:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=rxhLTt%2Fi4OttzLfqeXQoXDqmBEePF13gbreivvkeKrjmy%2FSfwQy6zOBAfo1JSCdFtv0rYGsx%2Bk84euqpy4hfzygwPit6nwwQ3lDWXo6N4IbtlUbJYBa3evIBNwLzD3mCkn9xybaVhr3Jp6ea\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 809e8ccafbcb56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 800x800, components 3\\012- data","md5":"846620037ddbe00cc63ea7ee9380306a","sha1":"6882f879bc404271caff513eda63c5074063b407","sha256":"7983160171ef1d347ff1d773fb06b804dc4c8ad9bc8a1ae9091c767e15f8cf4f","sha512":"8839ba1e3f3242bdcbd9de5a25d697a2d165d1bf8c0394ebb268bcde1435ec2bc5dd9e9b9afff85f3eeaf8ab8bce242dd7b03e0cba1485d003b7f9682c171d9a","ssdeep":"","tlshash":"","first_seen":"2023-09-21T03:32:01Z","last_seen":"2023-09-21T03:32:01Z","times_seen":1,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-21T01:31:40.078Z","timestamp":1695259900078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beritaviral-terkini.my.id","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Sep 2023 04:20:08 GMT","end":"Sun, 10 Dec 2023 04:20:07 GMT"},"fingerprint":{"sha1":"AF:DF:4F:33:54:0D:F6:F9:B5:55:34:6F:A5:B4:2D:DF:A7:91:CF:0C","sha256":"DC:06:FB:4B:86:87:EF:03:6D:09:61:C2:E4:33:51:21:06:B0:D8:76:16:3F:DC:78:01:C8:67:3E:25:9B:EA:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: beritaviral-terkini.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ad4RZmS59%2BIIyT90WV5mzF8v1xdg6arXieVfUHiU4MjQ8Uym4v5iJCy9%2FZxk%2F4zGHNCECKQ%2Bsb6Obi4FloHQDXhYaR5WSLCHdWUdlWDrHhprO89n%2F1WqXL%2F1ok6NPU501wtThyo1%2Bppu4SxT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 809e8cc65ec9b50c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9196,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (9585), with no line terminators","md5":"af129cf5dbb160c0463f982a058835f9","sha1":"08fcbce5048161b980b41e65d69b2e844b537b4c","sha256":"157b0085149f77b65296f2cd7f177bb729ce7907a95d9514b4f4e9c067f2f6ba","sha512":"57a5b7ffcb4ed85c3e240a0eb921470133800968d97fbaa4370ba737a724a280c41ff4e04b6fab13b2d9b2f4dd577f599675f87614bd99f2c0a6f036fe4944aa","ssdeep":"192:E1V1h7SqugxuURnigni6U3qV0OKPGO/cswXukq:EX1hvVJPOqVbeAzukq","tlshash":"0012e6d717a0c06e264bc86aaf7bbd6c3826f4d57c62154076adc51ed7d2dd0c823ea0","first_seen":"2023-09-21T03:32:01Z","last_seen":"2023-09-21T03:32:01Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.841Z","timestamp":1695259900841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /js/tgwallpaper.min.js?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Mar 2022 19:57:25 GMT\r\netag: W/\"62211da5-ba3\"\r\nexpires: Mon, 25 Sep 2023 01:31:40 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2979,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2998), with no line terminators","md5":"f03422dc797fd26a3834b1ec041128ed","sha1":"a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a","sha256":"046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac","sha512":"2f69e16fc15721ac83ba4ce928b971c280b3fdd137709adccf8ce309ed4c95a894d8514bad5647bdb541f0f1e43b03c29c7a171309a137815157d8d0a7319dcc","ssdeep":"","tlshash":"2151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","first_seen":"2023-04-05T13:41:41Z","last_seen":"2025-04-06T21:57:59.142551Z","times_seen":46726,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":207,"dns":13,"connect":28,"send":0,"wait":53,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/tgme/pattern.svg?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:41.278Z","timestamp":1695259901278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/tgme/pattern.svg?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?236\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Jan 2023 17:52:04 GMT\r\netag: W/\"63b70e44-3891a\"\r\nexpires: Mon, 25 Sep 2023 01:31:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"d0c22c6a97023d85ba6e644a41c44a5d","sha1":"4284efb616c182da4450c123174ce0e81a322845","sha256":"118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4","sha512":"da96462f4f999bb65509d32e4d5d2e1fd74555ce78d43e5f80fc350155bce59250337cd1796b17d2132f39429b5e3fd95d05101ee9f9b29bce2bb7b44b6e4eb8","ssdeep":"1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc","tlshash":"0a34c1834304f7fbada582589b3814e971c29debd430e1d475bb2d52da0ccd8598cbea","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:27:22.604339Z","times_seen":63356,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beritaviral-terkini.my.id/ast/css/main.css","fqdn":"beritaviral-terkini.my.id","domain":"beritaviral-terkini.my.id","tld":"my.id"},"ip":{"addr":"172.67.192.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.825Z","timestamp":1695259900825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beritaviral-terkini.my.id","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Sep 2023 04:20:08 GMT","end":"Sun, 10 Dec 2023 04:20:07 GMT"},"fingerprint":{"sha1":"AF:DF:4F:33:54:0D:F6:F9:B5:55:34:6F:A5:B4:2D:DF:A7:91:CF:0C","sha256":"DC:06:FB:4B:86:87:EF:03:6D:09:61:C2:E4:33:51:21:06:B0:D8:76:16:3F:DC:78:01:C8:67:3E:25:9B:EA:B5"}}},"request":{"raw":"GET /ast/css/main.css HTTP/1.1\r\nHost: beritaviral-terkini.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=m9CDflOD5cbd9NkVWD%2F1MNbAEMqNYqWtL82yeKtgzYCQgF7F7Ae5aqWI82D5tbt2Ire8dxlAZJ8FYwjIWTHtoRguIbh54rhm1gJ5o22pXy5QdBx821%2FOHXKa3RPQHS0TJ6W0Z75fKSVXryi3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 809e8ccaebc956c1-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-20","alert":"Telegram","trigger":"beritaviral-terkini.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-21","alert":"Sinkholed","trigger":"beritaviral-terkini.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.835Z","timestamp":1695259900835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Mon, 25 Sep 2023 01:31:40 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6354), with no line terminators","md5":"c06318a1f377e388b69b104b4cefa1a6","sha1":"151f067aae997487880e573876f96b8d598e64db","sha256":"1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70","sha512":"3921dd19ce6a7b0c1913ba22c8c6c6adb4160f04d5ead4451656abd051f90085c7304078f3ea0ab49e6548a16cf770fa82af978e94f05789d4a187ba24cac72f","ssdeep":"48:AIFZnu3toDdNkoraFZsyEto5Nko5OzzFZI97isxtoc1Nkoj:AIFZudoDdNfaFZsyeo5N4HFZy3o0Nn","tlshash":"e2d15940581b6000e7534ee637df7a36b98e2f1520624233abfd55ae6ddbc2253a4b4d","first_seen":"0001-01-01T00:00:00Z","last_seen":"2025-04-06T21:57:59.141612Z","times_seen":44551,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":212,"dns":17,"connect":33,"send":0,"wait":55,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/bootstrap.min.css?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.836Z","timestamp":1695259900836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/bootstrap.min.css?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: W/\"5a05e7c6-a61b\"\r\nexpires: Mon, 25 Sep 2023 01:31:40 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-04-04T03:27:22.606342Z","times_seen":67209,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":210,"dns":16,"connect":28,"send":0,"wait":55,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/telegram.css?236","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:40.838Z","timestamp":1695259900838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/telegram.css?236 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Mar 2023 10:58:55 GMT\r\netag: W/\"64183c6f-1c0b3\"\r\nexpires: Mon, 25 Sep 2023 01:31:40 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267)","md5":"0d209d756face073dd14a437f07e58b2","sha1":"20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0","sha256":"acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76","sha512":"43ff3f3fcfb37178ac4ac365d0246cbff649b57c1f83f1072c2280c0909cdb054dbede85f1a3aed865536b15eb7a9eaf77a25eb90369d0ce83660ddeb32aaeae","ssdeep":"1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfoV685u:xylc7xYzwwyVXkC0Yz6KL5u","tlshash":"d4b382db9ab99608746b80687ea35b42337d8003a54ece7dbbb1346cefc56d08173749","first_seen":"2023-04-05T13:41:41Z","last_seen":"2026-01-01T20:02:52.892627Z","times_seen":2929,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":212,"dns":16,"connect":28,"send":0,"wait":55,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/website_icon.svg?4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beritaviral-terkini.my.id/","date":"2023-09-21T01:31:41.450Z","timestamp":1695259901450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beritaviral-terkini.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 21 Sep 2023 01:31:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2020 20:41:37 GMT\r\netag: W/\"5f160181-768\"\r\nexpires: Mon, 25 Sep 2023 01:31:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML document, ASCII text, with very long lines (1968), with no line terminators","md5":"5caca7ae1cffb3da0b06150a15020005","sha1":"04cfb934f238d33209406393a3fbf78454815739","sha256":"1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f","sha512":"01f2f0bf09c9ba032a732b01706f50afc22d823abf3086d5377be20ebdf13cb42ebdd2e813849ccc598115b42fc03e2774439b2266272e1ef1d2f8cd000c7d37","ssdeep":"","tlshash":"3941a69e237554f9fa01c3ba8c30884f696674692b8980d0b0cd56fe7b180f1c7cd881","first_seen":"2023-05-02T07:47:09Z","last_seen":"2025-04-06T21:57:59.139859Z","times_seen":47669,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}