{"report_id":"68f6d858-dc24-403a-82de-d45367ae82ae","version":6,"status":"done","tags":[],"date":"2023-09-18T01:28:15Z","url":{"schema":"https","addr":"infobansosindonesia.my.id/","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"ip":{"addr":"172.67.135.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"infobansosindonesia.my.id/","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"title":"INFO BANSOS INDONESIA"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T07:02:24Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"i.postimg.cc","ip":{"addr":"162.19.88.69","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2016-06-11","domain_rank":23840,"first_seen":"2018-04-11 12:01:12","last_seen":"2023-09-17 19:09:23","alert_count":0,"request_count":1,"received_data":52324,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":5408,"first_seen":"2013-12-18 14:14:30","last_seen":"2023-09-17 23:31:36","alert_count":0,"request_count":9,"received_data":430982,"sent_data":4165,"comment":"","tags":null,"fingerprints":null},{"fqdn":"infobansosindonesia.my.id","ip":{"addr":"172.67.135.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":10669,"sent_data":929,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-09-17 20:12:03","alert_count":0,"request_count":1,"received_data":31464,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.godaddy.com","ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"1999-03-02","domain_rank":698,"first_seen":"2012-05-20 21:28:57","last_seen":"2023-09-17 18:12:20","alert_count":0,"request_count":4,"received_data":10460,"sent_data":1320,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-09-18T01:27:57Z","timestamp":1695000477,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38082,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-09-18T01:27:57.590600+0000\",\"flow_id\":1569929322889992,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.9\",\"src_port\":38082,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":26424,\"rrname\":\"i.postimg.cc\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":83,\"bytes_toclient\":0,\"start\":\"2023-09-18T01:27:57.590600+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-09-18T01:27:57Z","timestamp":1695000477,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33631,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-09-18T01:27:57.590709+0000\",\"flow_id\":376692918780789,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.9\",\"src_port\":33631,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":41379,\"rrname\":\"i.postimg.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":83,\"bytes_toclient\":0,\"start\":\"2023-09-18T01:27:57.590709+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-17","alert":"Telegram","trigger":"infobansosindonesia.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-17","alert":"Telegram","trigger":"infobansosindonesia.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-18","alert":"Sinkholed","trigger":"infobansosindonesia.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-18","alert":"Sinkholed","trigger":"infobansosindonesia.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"infobansosindonesia.my.id/","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"ip":{"addr":"172.67.135.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c629a0c52a2afad699d260f673481fd","sha1":"a4fd0ed3e5daa31480eb6de0faa5d442f015cbf6","sha256":"ea0d804370930ee958af535ce56cddf1dda419bdc676315ae8af0fbb4c733471","sha512":"dac369a2699b0f8a0d32acfcdd5c43c73d77e3dbd07dda400d0087608fd5e3f857d6952b730d1ce20f89d095f67794d3549dfc16181276b92e550bb76c7e0a53","ssdeep":"","tlshash":"57c012b42900643a2daa096cb636dbe83d321563f2a23410e22cc16c0021ed31000ec8","size":193,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-04-03T12:42:58.861473Z","times_seen":58800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-03T19:20:31.951929Z","times_seen":217323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infobansosindonesia.my.id/","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"ip":{"addr":"172.67.135.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b89d34702716a8ad2cc3977718f53a3","sha1":"04406ebd6a9e2ce79dbac5e5048cfe1384e4574a","sha256":"2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6","sha512":"e6fbda1e7d1e24c0db5a724e4cd30c883ceb5d35de1cc6ab8851c9b19e202024752e7e42aecc21002f9f9684ea98775f1ebe0ee8da9bd7562dac2fe171464242","ssdeep":"","tlshash":"b151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","size":2979,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-04-03T12:42:58.855287Z","times_seen":66414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.595Z","timestamp":1695000477595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\nage: 198279\r\nx-served-by: cache-lga13628-LGA, cache-bma1625-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 59, 44658\r\nx-timer: S1695000478.539132,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-03T19:20:31.951929Z","times_seen":217323,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":90,"dns":27,"connect":8,"send":0,"wait":8,"receive":4,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-18T01:27:57.783192208Z","timestamp":1695000477783,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Mon, 18 Sep 2023 01:27:57 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Sun, 17 Sep 2023 13:28:04 GMT\r\nExpires: Mon, 18 Sep 2023 13:28:04 GMT\r\nETag: \"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"05d63d441a5e5bca719f2fdf3eeedafc","sha1":"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61","sha256":"eef36614766a2f4ade42094edc593b3228fc6a4190a6d58284a6b5f2e9f05a24","sha512":"845a014d2d3adf5eabd32b0f8fbceffc00c3f85497c6a866fe4f047b21c833cccaf576528db29e5fea4d77ddd340f1f2522137b8805be4198b6b1341134e983f","ssdeep":"","tlshash":"254118df6ebc4499ad424f94bef9c2300ebc20f273c4488278b2c4651aa77a42d9c59d","first_seen":"2023-09-17T21:54:19Z","last_seen":"2023-09-18T06:57:03Z","times_seen":15,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-18T01:27:57.784592516Z","timestamp":1695000477784,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Mon, 18 Sep 2023 01:27:57 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Sun, 17 Sep 2023 13:28:04 GMT\r\nExpires: Mon, 18 Sep 2023 13:28:04 GMT\r\nETag: \"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"05d63d441a5e5bca719f2fdf3eeedafc","sha1":"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61","sha256":"eef36614766a2f4ade42094edc593b3228fc6a4190a6d58284a6b5f2e9f05a24","sha512":"845a014d2d3adf5eabd32b0f8fbceffc00c3f85497c6a866fe4f047b21c833cccaf576528db29e5fea4d77ddd340f1f2522137b8805be4198b6b1341134e983f","ssdeep":"","tlshash":"254118df6ebc4499ad424f94bef9c2300ebc20f273c4488278b2c4651aa77a42d9c59d","first_seen":"2023-09-17T21:54:19Z","last_seen":"2023-09-18T06:57:03Z","times_seen":15,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/0Q04r6Gq/IMG-20230911-WA0007.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"162.19.88.69","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.601Z","timestamp":1695000477601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 05:13:18 GMT","end":"Tue, 21 Nov 2023 05:13:17 GMT"},"fingerprint":{"sha1":"7C:A2:32:CE:24:3E:C2:52:E5:FD:21:44:88:CF:35:01:74:B6:8D:5A","sha256":"B1:29:A6:28:E6:71:DD:DE:5F:B0:91:F0:C0:09:43:46:21:62:D0:E0:10:43:08:9F:C2:73:56:45:4D:D1:48:4F"}}},"request":{"raw":"GET /0Q04r6Gq/IMG-20230911-WA0007.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51962\r\nlast-modified: Wed, 13 Sep 2023 12:17:40 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51962,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 799x384, components 3\\012- data","md5":"8c65b09a85f9fecc225382030245b9ac","sha1":"4087701cd74fbac3a59d3c062b1b863459f24d0f","sha256":"a7dca2eaa476246124a886eea00e660b52539c9fc03a23e8cdc29d9487ddb80c","sha512":"e1cca35c2cfa1d712df75ffb9503553eaae569b2db591f65dd7cb09cb9e5d687d642ff7c2aedbe3b9b1efba90afc1955341b4bb820611260d9b70935db088287","ssdeep":"","tlshash":"","first_seen":"2023-09-18T03:28:23Z","last_seen":"2023-09-18T03:28:23Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":86,"dns":1,"connect":36,"send":0,"wait":36,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-18T01:27:57.824338655Z","timestamp":1695000477824,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Mon, 18 Sep 2023 01:27:57 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Sun, 17 Sep 2023 13:28:04 GMT\r\nExpires: Mon, 18 Sep 2023 13:28:04 GMT\r\nETag: \"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"05d63d441a5e5bca719f2fdf3eeedafc","sha1":"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61","sha256":"eef36614766a2f4ade42094edc593b3228fc6a4190a6d58284a6b5f2e9f05a24","sha512":"845a014d2d3adf5eabd32b0f8fbceffc00c3f85497c6a866fe4f047b21c833cccaf576528db29e5fea4d77ddd340f1f2522137b8805be4198b6b1341134e983f","ssdeep":"","tlshash":"254118df6ebc4499ad424f94bef9c2300ebc20f273c4488278b2c4651aa77a42d9c59d","first_seen":"2023-09-17T21:54:19Z","last_seen":"2023-09-18T06:57:03Z","times_seen":15,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:58.839Z","timestamp":1695000478839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://infobansosindonesia.my.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\\012- data","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-03T18:36:39.535638Z","times_seen":73241,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:58.846Z","timestamp":1695000478846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://infobansosindonesia.my.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11040\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b20\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11040,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\\012- data","md5":"5e22a46c04d947a36ea0cad07afcc9e1","sha1":"6091d981c2a4ee975c7f6b56186ee698040bb804","sha256":"0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44","sha512":"3e2dcb20c7416160573ea7c7a17bf7250132c5203161b03aeaa3cf065e3ce609da6d1b317d3739aad7fc0c092c44cd0c4ea5657a63bfa530c66f9b0ecb9daf15","ssdeep":"192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt","tlshash":"3b32d0a8682c19fc49357837b8034109dfdfa1c1428c0a5633ebf5f45da3a264e2fe61","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-03T13:50:03.590054Z","times_seen":67230,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/apple-touch-icon.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:58.918Z","timestamp":1695000478918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Thu, 21 Apr 2022 13:47:47 GMT\r\netag: \"62616083-160c\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\\012- data","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-04-03T12:42:58.856943Z","times_seen":67664,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.godaddy.com/","fqdn":"ocsp.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-18T01:27:59.879827105Z","timestamp":1695000479879,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.godaddy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 75\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Mon, 18 Sep 2023 01:27:59 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2107\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Sun, 17 Sep 2023 13:28:04 GMT\r\nExpires: Mon, 18 Sep 2023 13:28:04 GMT\r\nETag: \"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"05d63d441a5e5bca719f2fdf3eeedafc","sha1":"1f937fdd8aea28a283ba7b77f14c14e23dcd4f61","sha256":"eef36614766a2f4ade42094edc593b3228fc6a4190a6d58284a6b5f2e9f05a24","sha512":"845a014d2d3adf5eabd32b0f8fbceffc00c3f85497c6a866fe4f047b21c833cccaf576528db29e5fea4d77ddd340f1f2522137b8805be4198b6b1341134e983f","ssdeep":"","tlshash":"254118df6ebc4499ad424f94bef9c2300ebc20f273c4488278b2c4651aa77a42d9c59d","first_seen":"2023-09-17T21:54:19Z","last_seen":"2023-09-18T06:57:03Z","times_seen":15,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.602Z","timestamp":1695000477602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /js/tgwallpaper.min.js?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Mar 2022 19:57:25 GMT\r\netag: W/\"62211da5-ba3\"\r\nexpires: Fri, 22 Sep 2023 01:27:57 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2979,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2998), with no line terminators","md5":"f03422dc797fd26a3834b1ec041128ed","sha1":"a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a","sha256":"046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac","sha512":"2f69e16fc15721ac83ba4ce928b971c280b3fdd137709adccf8ce309ed4c95a894d8514bad5647bdb541f0f1e43b03c29c7a171309a137815157d8d0a7319dcc","ssdeep":"","tlshash":"2151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","first_seen":"2023-04-05T13:41:41Z","last_seen":"2025-04-06T21:57:59.142551Z","times_seen":46726,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":14,"connect":30,"send":0,"wait":49,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/tgme/pattern.svg?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:58.824Z","timestamp":1695000478824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/tgme/pattern.svg?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?236\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Jan 2023 17:52:04 GMT\r\netag: W/\"63b70e44-3891a\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"d0c22c6a97023d85ba6e644a41c44a5d","sha1":"4284efb616c182da4450c123174ce0e81a322845","sha256":"118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4","sha512":"da96462f4f999bb65509d32e4d5d2e1fd74555ce78d43e5f80fc350155bce59250337cd1796b17d2132f39429b5e3fd95d05101ee9f9b29bce2bb7b44b6e4eb8","ssdeep":"1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc","tlshash":"0a34c1834304f7fbada582589b3814e971c29debd430e1d475bb2d52da0ccd8598cbea","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T12:42:58.856125Z","times_seen":63354,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infobansosindonesia.my.id/","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"ip":{"addr":"172.67.135.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-18T01:27:57.006Z","timestamp":1695000477006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infobansosindonesia.my.id","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:14:10 GMT","end":"Tue, 12 Dec 2023 06:14:09 GMT"},"fingerprint":{"sha1":"85:4E:9C:61:8C:05:72:7F:B0:79:36:0B:30:28:CE:5E:38:D3:FB:2B","sha256":"B1:B7:87:AB:BA:42:58:60:D5:E6:DC:91:7F:1A:C0:C3:58:56:76:1D:30:80:CC:B6:82:88:FB:0F:A6:EA:1C:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: infobansosindonesia.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0T8d8vuWAomephCJEhaCTlXDhCsuBM%2BDSrotBSEU%2FbdOI25nKN3pa6g9pMCqS6TGsqDWPiMrAN0OIgc%2BI5jjWeAaneOiyP5nLuzbqwXnofq6vOF8KgS537ZGgCoUIdPHLgQiHkrsXxFL%2B%2F9V\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8085cf347dea56cc-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9149,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (9534), with no line terminators","md5":"84bd82b99d63949e3d59a3c4a9e20dee","sha1":"7c51fce399dc5f67b3c16b6f6e2fb25a1f69622b","sha256":"9779cce69af39e1a6befd36452127eb74b48ceec1924d9af549e45ef65df467f","sha512":"971629b473166ec8539e71e596544a4f127ac3b05ac85b4b19f7e2e7433c1ebf54a6e7f3660da99e5d332d7cb96d628beebb7a73eee54b4aa9859d4ff800d5d8","ssdeep":"192:GBEe7SqugxuURnigni6U3qV0OKPG6+acswXukq:G2evVJPOqVbeP+Zzukq","tlshash":"7f12e6d717a0c06a264bc86aae7bbd6c3827f4d6bc62054076edc11de3d6dd0c813ea0","first_seen":"2023-09-18T03:28:23Z","last_seen":"2023-09-18T03:28:23Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":17,"dns":5,"connect":1,"send":0,"wait":166,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-17","alert":"Telegram","trigger":"infobansosindonesia.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-18","alert":"Sinkholed","trigger":"infobansosindonesia.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infobansosindonesia.my.id/ast/css/main.css","fqdn":"infobansosindonesia.my.id","domain":"infobansosindonesia.my.id","tld":"my.id"},"ip":{"addr":"172.67.135.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.593Z","timestamp":1695000477593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infobansosindonesia.my.id","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:14:10 GMT","end":"Tue, 12 Dec 2023 06:14:09 GMT"},"fingerprint":{"sha1":"85:4E:9C:61:8C:05:72:7F:B0:79:36:0B:30:28:CE:5E:38:D3:FB:2B","sha256":"B1:B7:87:AB:BA:42:58:60:D5:E6:DC:91:7F:1A:C0:C3:58:56:76:1D:30:80:CC:B6:82:88:FB:0F:A6:EA:1C:BB"}}},"request":{"raw":"GET /ast/css/main.css HTTP/1.1\r\nHost: infobansosindonesia.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=C9mFvm32Nv98KxqLkfwR818XQdouuXx7TOBsoZ%2FYoX2p9czB6QjQoyBPGL%2BjuyM5AJ7HFbO19cR2eMHIkNwzDbjARu%2F%2F4U000sn1eojgIA2KrT5t9v0p0XPvRTXRKwewFO1pTuXcFZfYe5Fe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8085cf37fa99b505-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-09-17","alert":"Telegram","trigger":"infobansosindonesia.my.id/","verdict":"phishing","severity":"medium","comment":"Telegram","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-18","alert":"Sinkholed","trigger":"infobansosindonesia.my.id","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.597Z","timestamp":1695000477597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Fri, 22 Sep 2023 01:27:57 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6354), with no line terminators","md5":"c06318a1f377e388b69b104b4cefa1a6","sha1":"151f067aae997487880e573876f96b8d598e64db","sha256":"1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70","sha512":"3921dd19ce6a7b0c1913ba22c8c6c6adb4160f04d5ead4451656abd051f90085c7304078f3ea0ab49e6548a16cf770fa82af978e94f05789d4a187ba24cac72f","ssdeep":"48:AIFZnu3toDdNkoraFZsyEto5Nko5OzzFZI97isxtoc1Nkoj:AIFZudoDdNfaFZsyeo5N4HFZy3o0Nn","tlshash":"e2d15940581b6000e7534ee637df7a36b98e2f1520624233abfd55ae6ddbc2253a4b4d","first_seen":"0001-01-01T00:00:00Z","last_seen":"2025-04-06T21:57:59.141612Z","times_seen":44551,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/bootstrap.min.css?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.598Z","timestamp":1695000477598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/bootstrap.min.css?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: W/\"5a05e7c6-a61b\"\r\nexpires: Fri, 22 Sep 2023 01:27:57 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-04-03T18:10:10.988656Z","times_seen":67207,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":230,"dns":17,"connect":29,"send":0,"wait":34,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/website_icon.svg?4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:58.923Z","timestamp":1695000478923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2020 20:41:37 GMT\r\netag: W/\"5f160181-768\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML document, ASCII text, with very long lines (1968), with no line terminators","md5":"5caca7ae1cffb3da0b06150a15020005","sha1":"04cfb934f238d33209406393a3fbf78454815739","sha256":"1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f","sha512":"01f2f0bf09c9ba032a732b01706f50afc22d823abf3086d5377be20ebdf13cb42ebdd2e813849ccc598115b42fc03e2774439b2266272e1ef1d2f8cd000c7d37","ssdeep":"","tlshash":"3941a69e237554f9fa01c3ba8c30884f696674692b8980d0b0cd56fe7b180f1c7cd881","first_seen":"2023-05-02T07:47:09Z","last_seen":"2025-04-06T21:57:59.139859Z","times_seen":47669,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/telegram.css?236","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infobansosindonesia.my.id/","date":"2023-09-18T01:27:57.600Z","timestamp":1695000477600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/telegram.css?236 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://infobansosindonesia.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 18 Sep 2023 01:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Mar 2023 10:58:55 GMT\r\netag: W/\"64183c6f-1c0b3\"\r\nexpires: Fri, 22 Sep 2023 01:27:58 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267)","md5":"0d209d756face073dd14a437f07e58b2","sha1":"20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0","sha256":"acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76","sha512":"43ff3f3fcfb37178ac4ac365d0246cbff649b57c1f83f1072c2280c0909cdb054dbede85f1a3aed865536b15eb7a9eaf77a25eb90369d0ce83660ddeb32aaeae","ssdeep":"1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfoV685u:xylc7xYzwwyVXkC0Yz6KL5u","tlshash":"d4b382db9ab99608746b80687ea35b42337d8003a54ece7dbbb1346cefc56d08173749","first_seen":"2023-04-05T13:41:41Z","last_seen":"2026-01-01T20:02:52.892627Z","times_seen":2929,"resource_available":false,"data":null}},"time_used":2355,"timings":{"blocked":1144,"dns":16,"connect":31,"send":0,"wait":59,"receive":0,"ssl":1079},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}