{"report_id":"32af4a0e-bcc2-45a4-96ab-2708e7f5bcb3","version":6,"status":"done","tags":[],"date":"2026-01-06T13:31:18Z","url":{"schema":"http","addr":"cek1k.9jt.web.id","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"51.79.157.177","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"title":"𝗞𝘂𝗽𝗼𝗻 𝗨𝗻𝗱𝗶𝗮𝗻 | 𝗕𝗮𝗻𝗸 𝗕𝗥𝗜 𝟮𝟬𝟮𝟱","dom":{"size":8309,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"934c2404b7d697e4b8e08cc56cfa37c0","sha1":"9d7a8cb9fced72e1d488221b0eddaf8d4e53d0f6","sha256":"69ecbbd111635f86809124b84fbfc7520ba35ef69bb269fc5d899e080556528e","sha512":"184d4ff591216cb0af9dda2b0ce81dbe2f54eaf349cade8fbb26e83f3b9c0f9e099622dafd63edd0449e12eb36a9c35b38117b9e50f09c1c39a9e036d89cecbc","ssdeep":"96:N/rTJqJ/J/TJtJtG/SiaNnP99KksYHm6bl49cmCbl4P+GoR6JwhNwSXeiWbSJoSl:EB9tdHmkl49cmsl4XotwSOdSqSok","tlshash":"3e024455b5f28006027370782b7ba80c6e7b4007a50dee14b69c1ad48f99fa5cbb7b6d","dom_hash":"domhashf54fe0f49c0d85c060d29a8f193feaea","first_seen":"2026-01-06T05:34:46.8796Z","last_seen":"2026-01-06T13:32:48.723088Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cek1k.9jt.web.id","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"51.79.157.177","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T13:31:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-06","alert":"Phishing Block","trigger":"cek1k.9jt.web.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cek1k.9jt.web.id","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-08","domain_rank":0,"first_seen":"2026-01-06T13:31:18.803923Z","last_seen":"2026-01-06T13:31:18.803924Z","alert_count":9,"request_count":3,"received_data":214719,"sent_data":1237,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"hosting.tigerengine.id","ip":{"addr":"103.150.93.32","port":443,"asn":133800,"as":"PT Biznet Gio Nusantara","country":"Indonesia","country_code":"ID"},"domain_registered":"2014-08-15","domain_rank":4322744,"first_seen":"2019-06-09T14:03:35Z","last_seen":"2026-01-06T05:34:41.836245Z","alert_count":0,"request_count":3,"received_data":330954,"sent_data":1326,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37e37378953cbe0830dd9a1f498c0a88","sha1":"b01cb7edf0128aee5e86d3e8c02c59925baf2f51","sha256":"39a0fbeb8278f0c50535036d4d0a875d30f4eaa7c0db893743a3e08605d991cd","sha512":"01edbf5346a5c4264d8182f731b38138adacda2c1baa9105293ed8e687ad6c41aabe57b5c3bddb39f7f864245e5cfe36ba6a98a8d697b9aaaae0523089c98193","ssdeep":"","tlshash":"97c08c8ef4f81044a3b3303709bb911c7d32ba16120a0e003a4c3ad0afa4a784271e28","size":183,"data":"","first_seen":"2024-10-20T16:45:06.315779Z","last_seen":"2026-05-27T08:25:17.11337Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73780915f1091c7bebfda12adfd49bf4","sha1":"65e6423fa06ce4df28770aeebc22227141aaaaf2","sha256":"310fd576622580ae0e3886acd684cc247725a38b64ee506244d0353ac9c221bf","sha512":"1db791c81198b64143a4d41de91b12cbccd6afd0821c34ecbb398cce852c268006ad779e51e9e7c635db21d78a71283cd2e9d588c15ec18c01bfd4f4d399cbe4","ssdeep":"","tlshash":"91a00269b9ec5308c4b36465143bb508be6f791523eb2d5c215cead00f297a8e146c06","size":75,"data":"","first_seen":"2024-10-20T16:45:06.319597Z","last_seen":"2026-05-27T08:25:17.114008Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"926a365d72737f4c0e612fb43f068f27","sha1":"bd1735ca2035a1ea508eb98056d15cf9930ff374","sha256":"694daf7f4a21c0fcd84952154381004c48df7c256e792ad435b5415dc209273d","sha512":"d8b6ae8d2fc19a58c1b25c8c84b29f631b946349fec03f57b6b48ed23d00bd700ff2e713d8a1efb75ba6bfd24c16b4c02788f1013a4d5508d303bbe0a034855f","ssdeep":"","tlshash":"c6d02baf31a22e31465f6d31945e475677248002180a69103c0c44450fe9e2005f5e62","size":253,"data":"","first_seen":"2024-10-20T16:45:06.32315Z","last_seen":"2026-05-27T08:25:17.115151Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2dbf052c31af60e614676a74f7b1644","sha1":"9dcd9f6fb9168a96ae10de19fe9a3a4d2a04727b","sha256":"e6c04a817dab292263b0d3c504fa3766b3b5dd7d80579458afa0618d0f0e408c","sha512":"59d293753bcfc928e4209cd90efb5c3d4de216784035dbda5c918f5a26c9765abc7e60ceb533e3c988eea40c6c11ddd3a01294c905561585599a9835166f1b29","ssdeep":"","tlshash":"b311c45510f250415137257d2bdb0458a63700633949aa99be2c0b445f99b76cbfef28","size":876,"data":"","first_seen":"2024-10-20T16:45:06.335106Z","last_seen":"2026-05-27T08:25:17.116036Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f01b2ba5bede126f503ad27787b88937","sha1":"d7db1cf4710e8e52b130f3b8b2c9c4d49e882898","sha256":"603795952b296143637ab41375cd87cb308435056bc88ba4d5e396a2ca19a1cc","sha512":"3ef95b71bb5013bdeac3b4081a16cdc577fe75b9d3cf3105ab5c19b560e7e2c233df4349f60efd5eaeee0d4d9c6ecaa71eb5d0bad719dc26d48dc9e3f25185f6","ssdeep":"","tlshash":"d711f55920f290515277247d2fcb04186a3b00a73919ea99be1c1f445f99b76cbfdf38","size":875,"data":"","first_seen":"2024-10-20T16:45:06.342717Z","last_seen":"2026-05-27T08:25:17.117339Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0801e361abe62cbcda706cb31e68f39","sha1":"89bf7855e47bfa2ff1a06bbc2d5460050612cf87","sha256":"4c2e5183e69670071a0cb69ce25fb049792c24461c6c593719bbb27869658981","sha512":"0fb1c755a7e54de2057bd7b76b88b612a0fd12926fb1706c47057f49ec93f43ad1606975630f75a753a4c96942fa5e1e6b8e331546f6b3b7f66515298e4d00f4","ssdeep":"","tlshash":"6ff0b45db4fa580040b334ba1f3b51043e2e580b311dee49fa5c3ae84f35565e325b2d","size":616,"data":"","first_seen":"2024-10-20T16:45:06.346164Z","last_seen":"2026-05-27T08:25:17.118729Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ffb4e667e71b9749eeb529d6f1f83df","sha1":"3ed0304103217befa94a8fd3584d03de8d675d89","sha256":"94e793b3563095d8986eac0bad3e1a2a493ea5b65a46406a0213511f7da4c9c9","sha512":"07e0560133ca67c4c6a2e423f7393998e27bea9ed9dd0660422c2d0a77dd16f0a27624d3d4abff549cdeb516a9e207baef2c4da3a89b669da22b5b79c2b8ea51","ssdeep":"","tlshash":"06f0e558f0b696d50273706d0abbc401ad35944b3484ee20b48c0ce48f6c699d472769","size":515,"data":"","first_seen":"2025-03-07T18:18:38.442866Z","last_seen":"2026-05-27T08:25:17.119461Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aba16843d9b71b1443b377f60c81b341","sha1":"f6c99882ca4a310586407b72f3a43f60d2299bf7","sha256":"4e97d337828bb1b1b0ea39273c6c7364ece495531b8ac8b10a14f59478a765d9","sha512":"7581b34d69ec6a23e10afaeb5e624ff7e1231801160442241abdaad15dcfc7f1bb6037b623d989d968ab9b29f31d7b0d8ab043d5a937c02216dc814aa4189d89","ssdeep":"","tlshash":"9ae02659f5ba09a9487370a9577b80475e54480b7100ee01b19c0ce48f2d6a9e932608","size":394,"data":"","first_seen":"2025-03-07T18:18:38.443702Z","last_seen":"2026-05-27T08:25:17.120716Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"804fc9abd58aa3a913b4ba6d0b3b4fe4","sha1":"5ace4eb426c6e2bfe4872ff66c089e71d9f6f7fa","sha256":"406505bb90f85c7563d72638e98c9a1d937e64a0901dfab2f93c5c0773bb3898","sha512":"752a7fcb3f3187be63529e84b1d50ad6722a0a3209ecb0ad400d85605c02ce513374ddfbcb244c6d9e05f0509ea0849e1db0c8bf4fa9f2bf0ccd7ce3a1c18ce8","ssdeep":"","tlshash":"eef0975eb1aa144a1eb710284a3fa8092db426131140df4cb80d0df18f4d2aaf833a88","size":572,"data":"","first_seen":"2025-03-07T18:18:38.444426Z","last_seen":"2026-05-27T08:25:17.121604Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"560521c7d58760362dffb04cc8572a34","sha1":"a9937511e84401ab153734b96d6f813831c26802","sha256":"4b3307227a3fcce266a50b95a1ff5f2bfda8d11747437a30573ce0f65b2e09ee","sha512":"c864e5de6108d2d6111ebd2e9fef88c07d76c98acb9d7dd8174531ca5c17f9686920eb82c840a1a7fcc46db9b833ac9ddace9747c307d77fef358095e51ed246","ssdeep":"","tlshash":"32d0125c57fd09610d2790b67bbf865ca9d540138009d615f4dc54c43f303219033694","size":196,"data":"","first_seen":"2024-10-20T16:45:06.360312Z","last_seen":"2026-05-27T08:25:17.122243Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fe5181f7775b9b197a43f7c066c4986","sha1":"c4d09cdf107ade1f193d4ee70550c4435917ea63","sha256":"ac7c407113a2ebd79fdcd3ac9e3925f84a34d95f8dab8f3d18c91909ea46243b","sha512":"340d3b4adf608ea65c39a8f6e38989a9faa022af9302c05cf981c806f066a0d20d8ef15b2fa51a734995db34727e7f1e7b404525d119c20ef48af7f0d5fe5789","ssdeep":"","tlshash":"31e09e1cb9fb90863237f0fa4a7b8514283f322fb04acf55b86d49c04fb5699b151ad8","size":330,"data":"","first_seen":"2024-10-20T16:45:06.363981Z","last_seen":"2026-05-27T08:25:17.122774Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T13:30:56.980Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cek1k.9jt.web.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T06:46:10.361835Z","times_seen":17898807,"resource_available":true,"data":null}},"time_used":924,"timings":{"blocked":924,"dns":0,"connect":255,"send":0,"wait":0,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-06","alert":"Phishing Block","trigger":"cek1k.9jt.web.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"51.79.157.177","port":80,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T13:30:58.197Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cek1k.9jt.web.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 2519\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nDate: Tue, 06 Jan 2026 13:30:58 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8314,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8a73be9df55b9ac9fdfc8c853a73c179","sha1":"58857fa1b6011d18aeb65f98b1976f679ced7e4c","sha256":"c061a5c6f0cf1354f59596fbd6a2952a87d73f172a16a987e80f81c91c1a2628","sha512":"22f4acc51d20e9886dae14661e780e87c71894988ee5c38b6b808aed680c9000bc31b96bdb604a74e005bfdbcaaa66d2dbb212534d1064d932640aefc6be018e","ssdeep":"96:R/rTJqJ/J/TJtJtG/SiaNnP99KksYHm6bl49cmCbl4P+GoR6JwhNwSXeiWbSJoSJ:AB9tdHmkl49cmsl4XotwSOdSqSok","tlshash":"7a025455b5f28006027370782b7ba80c6e7b4007a50dee14b69c1ad48f99fa5cbb7b6c","first_seen":"2025-07-14T08:45:59.11775Z","last_seen":"2026-01-06T13:32:48.740005Z","times_seen":6,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":294,"dns":1,"connect":297,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-06","alert":"Phishing Block","trigger":"cek1k.9jt.web.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cek1k.9jt.web.id/1.jpg","fqdn":"cek1k.9jt.web.id","domain":"9jt.web.id","tld":"web.id"},"ip":{"addr":"51.79.157.177","port":80,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cek1k.9jt.web.id/","date":"2026-01-06T13:30:58.933Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /1.jpg HTTP/1.1\r\nHost: cek1k.9jt.web.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cek1k.9jt.web.id/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nCache-Control: public, max-age=604800\r\nExpires: Tue, 13 Jan 2026 13:30:59 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 14 Feb 2025 20:32:26 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 205837\r\nDate: Tue, 06 Jan 2026 13:30:59 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":205837,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1080x2049, components 3","md5":"5711b10516a973facaecbb34d9276db4","sha1":"641d10553e8879f29d90053d189920f081b45432","sha256":"fdc3cb0ac274f59418e7f43c3cd95a5435ea2e0c49b96c704153907ea447a5fc","sha512":"c94e74055efafb6a363aa32585b0186728c0524e0f25aa06faff4aacf9b588daade55c35b4d5f2bc2b46ec225f8c2f1a3b3a66ae6350bca11d79437fbd10c730","ssdeep":"3072:JMn/QOJorbs2IM2QVXMrYLsuFojBDT/I0VlISy96mXZBjGjgogfUfpaugJjc:GY3nIT3rYLsht/IJXJXZxABgMBazJQ","tlshash":"46148b1398085e93f428c7a9ff474fac6b057a18f9933afb15651dca7b351620c8e07a","first_seen":"2025-07-14T08:45:59.115027Z","last_seen":"2026-01-06T13:32:48.736125Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1020,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-06","alert":"Phishing Block","trigger":"cek1k.9jt.web.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cek1k.9jt.web.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hosting.tigerengine.id/ciakn7.png","fqdn":"hosting.tigerengine.id","domain":"tigerengine.id","tld":"id"},"ip":{"addr":"103.150.93.32","port":443,"asn":133800,"as":"PT Biznet Gio Nusantara","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cek1k.9jt.web.id/","date":"2026-01-06T13:30:58.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.tigerengine.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 12:00:51 GMT","end":"Fri, 20 Feb 2026 12:00:50 GMT"},"fingerprint":{"sha1":"39:81:3A:53:1C:D9:4F:31:2F:E5:79:35:16:7D:68:4B:D4:3F:98:17","sha256":"69:1C:0F:63:CF:F1:6C:E6:49:43:2E:A4:E9:AA:7E:BE:A8:CF:6D:B4:30:C0:BF:3A:DF:08:D7:18:35:2A:48:1E"}}},"request":{"raw":"GET /ciakn7.png HTTP/1.1\r\nHost: hosting.tigerengine.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cek1k.9jt.web.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-rc\r\ndate: Tue, 06 Jan 2026 13:30:59 GMT\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 257, 8-bit/color RGBA, non-interlaced","md5":"30907c77255924f7354fba98d05fbba4","sha1":"a56388e68b10c00516808fd20e80f0fcfdc67469","sha256":"c49694b7d5935e0a2c77fb577b45ec99850ecd35b8acf80a40be09e497ab3e61","sha512":"06c210e547d4d7f118bb8f66855a0119efecca6e50c380bc891fae65991d13453f3d39c93a0c754d9d30ad8d889f57869b4b6ea52f40ea2e8013d3598e2544d3","ssdeep":"768:IjGo/NXXHNw8a9nq3lLpnGbfiYs3RG9uLfYc3rOktiOJ3bAdPup2czGAlfiPl+j7:ILe8a9q3Rpnkf8ROYYczBJ3bAdo2e2QN","tlshash":"ca23f1b55ea1cfafc9f4965213e14040ab8d835d1769c3b5da14b69cce9327c16c22fc","first_seen":"2024-10-04T10:36:09.314398Z","last_seen":"2026-05-10T07:25:16.93204Z","times_seen":97,"resource_available":false,"data":null}},"time_used":2006,"timings":{"blocked":849,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":421},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hosting.tigerengine.id/lvit0j.jpg","fqdn":"hosting.tigerengine.id","domain":"tigerengine.id","tld":"id"},"ip":{"addr":"103.150.93.32","port":443,"asn":133800,"as":"PT Biznet Gio Nusantara","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cek1k.9jt.web.id/","date":"2026-01-06T13:30:59.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.tigerengine.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 12:00:51 GMT","end":"Fri, 20 Feb 2026 12:00:50 GMT"},"fingerprint":{"sha1":"39:81:3A:53:1C:D9:4F:31:2F:E5:79:35:16:7D:68:4B:D4:3F:98:17","sha256":"69:1C:0F:63:CF:F1:6C:E6:49:43:2E:A4:E9:AA:7E:BE:A8:CF:6D:B4:30:C0:BF:3A:DF:08:D7:18:35:2A:48:1E"}}},"request":{"raw":"GET /lvit0j.jpg HTTP/1.1\r\nHost: hosting.tigerengine.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cek1k.9jt.web.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-rc\r\ndate: Tue, 06 Jan 2026 13:30:59 GMT\r\ncontent-type: image/jpeg\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141255,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 988x988, components 3","md5":"8d75d033e3dd4aae96db9154897c4be3","sha1":"95fa53b5c0f045f4973b4ce4579212a2881137eb","sha256":"0cc66aaf3e9dc6495f011552cf167b748cda7332ec1b6c1c3c61456267f7975d","sha512":"92c0e651aa4acdf6c56142768930bc7e923c156ded1832d7968d2eed8a8d03978cbf8547a69fa30b866dcaddb1992ae12cc6a05156da325590d2d6cb6bee5a39","ssdeep":"3072:wVkp8W8AYrbOKGjqLXrwpzetQeKuAHPLAId4C2j:wUyGurrwpzOQemLAId4T","tlshash":"0dd3cf535c4c9fc32529c7ecbf430dfd2b5a2b1998867aef05660edf3a242121d9a42d","first_seen":"2025-01-03T16:48:55.568034Z","last_seen":"2026-07-04T21:33:27.051363Z","times_seen":53,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":198,"send":0,"wait":387,"receive":0,"ssl":401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hosting.tigerengine.id/lvit0j.jpg","fqdn":"hosting.tigerengine.id","domain":"tigerengine.id","tld":"id"},"ip":{"addr":"103.150.93.32","port":443,"asn":133800,"as":"PT Biznet Gio Nusantara","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cek1k.9jt.web.id/","date":"2026-01-06T13:30:59.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.tigerengine.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 12:00:51 GMT","end":"Fri, 20 Feb 2026 12:00:50 GMT"},"fingerprint":{"sha1":"39:81:3A:53:1C:D9:4F:31:2F:E5:79:35:16:7D:68:4B:D4:3F:98:17","sha256":"69:1C:0F:63:CF:F1:6C:E6:49:43:2E:A4:E9:AA:7E:BE:A8:CF:6D:B4:30:C0:BF:3A:DF:08:D7:18:35:2A:48:1E"}}},"request":{"raw":"GET /lvit0j.jpg HTTP/1.1\r\nHost: hosting.tigerengine.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cek1k.9jt.web.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-rc\r\ndate: Tue, 06 Jan 2026 13:30:59 GMT\r\ncontent-type: image/jpeg\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141255,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 988x988, components 3","md5":"8d75d033e3dd4aae96db9154897c4be3","sha1":"95fa53b5c0f045f4973b4ce4579212a2881137eb","sha256":"0cc66aaf3e9dc6495f011552cf167b748cda7332ec1b6c1c3c61456267f7975d","sha512":"92c0e651aa4acdf6c56142768930bc7e923c156ded1832d7968d2eed8a8d03978cbf8547a69fa30b866dcaddb1992ae12cc6a05156da325590d2d6cb6bee5a39","ssdeep":"3072:wVkp8W8AYrbOKGjqLXrwpzetQeKuAHPLAId4C2j:wUyGurrwpzOQemLAId4T","tlshash":"0dd3cf535c4c9fc32529c7ecbf430dfd2b5a2b1998867aef05660edf3a242121d9a42d","first_seen":"2025-01-03T16:48:55.568034Z","last_seen":"2026-07-04T21:33:27.051363Z","times_seen":53,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":1,"connect":204,"send":0,"wait":751,"receive":0,"ssl":412},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}