{"report_id":"96afc963-ee98-4ff9-801f-4d243b91988c","version":0,"status":"done","tags":[],"date":"2026-09-23T20:09:11Z","url":{"schema":"http","addr":"sede-dgt-gob-es.pandjul.com/","fqdn":"sede-dgt-gob-es.pandjul.com","domain":"pandjul.com","tld":"com"},"ip":{"addr":"111.221.42.175","port":0,"asn":45713,"as":"PT. DEWATA TELEMATIKA","country":"Indonesia","country_code":"ID"},"final":{"url":{"schema":"https","addr":"sede-dgt-gob-es.pandjul.com/","fqdn":"sede-dgt-gob-es.pandjul.com","domain":"pandjul.com","tld":"com"},"title":"sede-dgt-gob-es.pandjul.com","dom":{"size":429,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b079cae4a0e2ad8588c285b49d2aec74","sha1":"194a54699f54765104183fb8d443ac610d9d9f84","sha256":"66fe44fc3edbf378425a68bbcc1476da4ca1b209b47613a3bcb6a34b4a235be7","sha512":"cb42aa61e9b75ade12763c8e439941907c4f0e9f0eb1e8650be2b31743b9942bf4ff9162d2fb244d8cc6d5cf2c5d77f842e57a56f360d4328fa8545c0cd9a628","ssdeep":"","tlshash":"47e02bd721863455b825d949728377c091c9a033a2a6ecb15a438cd7d8862a6d893fdd","dom_hash":"domhash219367bd561970f749cd9922c9b57676","first_seen":"2026-09-23T19:43:25.827922Z","last_seen":"2026-09-23T20:09:12.246926Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sede-dgt-gob-es.pandjul.com/","fqdn":"sede-dgt-gob-es.pandjul.com","domain":"pandjul.com","tld":"com"},"ip":{"addr":"111.221.42.175","port":0,"asn":45713,"as":"PT. DEWATA TELEMATIKA","country":"Indonesia","country_code":"ID"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T20:09:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"sede-dgt-gob-es.pandjul.com","ip":{"addr":"111.221.42.175","port":443,"asn":45713,"as":"PT. DEWATA TELEMATIKA","country":"Indonesia","country_code":"ID"},"domain_registered":"2020-02-28","domain_rank":0,"first_seen":"2026-07-21T12:28:14.228929Z","last_seen":"2026-09-23T19:43:24.194027Z","alert_count":4,"request_count":2,"received_data":1220,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sede-dgt-gob-es.pandjul.com/","fqdn":"sede-dgt-gob-es.pandjul.com","domain":"pandjul.com","tld":"com"},"ip":{"addr":"111.221.42.175","port":443,"asn":45713,"as":"PT. DEWATA TELEMATIKA","country":"Indonesia","country_code":"ID"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T20:08:42.712Z","timestamp":1790194122712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pandjul.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 08:17:14 GMT","end":"Sun, 20 Dec 2026 08:17:13 GMT"},"fingerprint":{"sha1":"8D:65:23:2E:4F:4C:EE:61:E9:37:5D:E2:BC:EA:5A:84:AB:9F:E1:34","sha256":"F8:34:39:2F:B3:54:BC:D1:19:5E:2B:32:52:A2:88:B5:71:F6:96:FA:74:40:F3:CF:31:41:1A:62:EF:CC:6C:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sede-dgt-gob-es.pandjul.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 01 Feb 2026 01:02:31 GMT\r\netag: \"19f-649b8c2d3004a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 268\r\ncontent-type: text/html\r\ndate: Wed, 23 Sep 2026 20:08:43 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":415,"size_decoded":562,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"38684a31105572c4c39ea98dc2a3a645","sha1":"e432e3ac9c1254fcf8731ee3fd7acfdc2f5f0947","sha256":"9a39093dc49ac393778ea8ef1c8759b69d77780ac547edd795338da870f1bc90","sha512":"5da7a1e293ebb347ffefeffe3128cbefcf3272728de36d3732ea4a6876bef49dbb5bb1764518d88e32b1e8a53486dbd5f333677509643995bcbd727adb0b2f5d","ssdeep":"","tlshash":"79e02bd721463451b415d909728377c0918a6032a2a69cb15a43c8d3d886192d893f9d","first_seen":"2026-09-23T19:43:25.829499Z","last_seen":"2026-09-23T20:09:12.251626Z","times_seen":2,"resource_available":true,"data":null}},"time_used":933,"timings":{"blocked":0,"dns":374,"connect":182,"send":0,"wait":183,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sede-dgt-gob-es.pandjul.com/favicon.ico","fqdn":"sede-dgt-gob-es.pandjul.com","domain":"pandjul.com","tld":"com"},"ip":{"addr":"111.221.42.175","port":443,"asn":45713,"as":"PT. DEWATA TELEMATIKA","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sede-dgt-gob-es.pandjul.com/","date":"2026-09-23T20:08:43.870Z","timestamp":1790194123870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pandjul.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 08:17:14 GMT","end":"Sun, 20 Dec 2026 08:17:13 GMT"},"fingerprint":{"sha1":"8D:65:23:2E:4F:4C:EE:61:E9:37:5D:E2:BC:EA:5A:84:AB:9F:E1:34","sha256":"F8:34:39:2F:B3:54:BC:D1:19:5E:2B:32:52:A2:88:B5:71:F6:96:FA:74:40:F3:CF:31:41:1A:62:EF:CC:6C:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sede-dgt-gob-es.pandjul.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sede-dgt-gob-es.pandjul.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 23 Sep 2026 20:08:43 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":511,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-25T11:38:32.210496Z","times_seen":63733,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"sede-dgt-gob-es.pandjul.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}