{"report_id":"c0979d4e-cdfd-4314-8fda-9d7a64425317","version":6,"status":"done","tags":[],"date":"2026-02-28T05:36:19Z","url":{"schema":"http","addr":"angkasa77xhoki.online/","fqdn":"angkasa77xhoki.online","domain":"angkasa77xhoki.online","tld":"online"},"ip":{"addr":"104.21.39.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"angkasa77xhoki.online/","fqdn":"angkasa77xhoki.online","domain":"angkasa77xhoki.online","tld":"online"},"title":"ANGKASA77XHOKI : Agen Slot Online Pusat Jackpot Paus Jaminan Menang Beruntun Tiap Hari","dom":{"size":18240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"149efb8e199ce6fc6bdb1cb08efa1783","sha1":"b0915db3a8de9598ffb45474c1c891aa1236839d","sha256":"dc24ed877a604c13847fc1349f22458e46a9650e4f2b71c582221d018e7b98fd","sha512":"f09cb68321610dca00a794056122232e3d315beed5ec7688dab957875e138895e5a0ffd1be0de0ff41dc66184ce6984111a51586a4894e5593c3dc74ccad9a54","ssdeep":"192:jd7L4UGeVroA5eLU+LMeLNVLsXymrqGUr8DE6/x/0kmk0k2kPD32VE8JmSyE7TUN:eW0A3XZrXUr8w6/x/iPxRzubY3lQ7","tlshash":"73826257b5892089a117d32245e2f77f2e38c80397324d1dfe4d7b98cf59b867a3260a","dom_hash":"domhashb748d5e44674468308b97a597d5a58d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"angkasa77xhoki.online/","fqdn":"angkasa77xhoki.online","domain":"angkasa77xhoki.online","tld":"online"},"ip":{"addr":"104.21.39.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T05:36:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"angkasa77xhoki.online","ip":{"addr":"104.21.39.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-28T05:36:19.927243Z","last_seen":"2026-02-28T05:36:19.927243Z","alert_count":0,"request_count":2,"received_data":231998,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"gunungbokor.edgeone.dev","ip":{"addr":"43.174.247.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2025-06-09","domain_rank":0,"first_seen":"2025-12-21T06:57:46.010888Z","last_seen":"2026-02-24T06:16:44.940383Z","alert_count":4,"request_count":2,"received_data":59051,"sent_data":815,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-02-23T06:41:39.33784Z","alert_count":0,"request_count":2,"received_data":295630,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","size":284617,"data":"","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://angkasa77xhoki.online/","date":"2026-02-28T05:35:58.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://angkasa77xhoki.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 19:24:31 GMT\r\nexpires: Wed, 24 Feb 2027 19:24:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295887\r\netag: \"bcfe0d3a461d36bf\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":47,"dns":1,"connect":15,"send":0,"wait":16,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"angkasa77xhoki.online/banner.jpg","fqdn":"angkasa77xhoki.online","domain":"angkasa77xhoki.online","tld":"online"},"ip":{"addr":"104.21.39.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angkasa77xhoki.online/","date":"2026-02-28T05:35:58.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angkasa77xhoki.online","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:38:33 GMT","end":"Sun, 24 May 2026 06:38:32 GMT"},"fingerprint":{"sha1":"71:96:9D:C3:E1:20:B6:83:54:6D:94:9F:8C:AA:C9:B3:02:50:E5:84","sha256":"64:12:79:CA:AA:D0:14:7F:31:68:AB:85:55:40:16:40:54:8B:BB:26:49:04:C5:5C:EB:D2:3E:92:61:89:BA:AA"}}},"request":{"raw":"GET /banner.jpg HTTP/1.1\r\nHost: angkasa77xhoki.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://angkasa77xhoki.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 05:35:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 24 Feb 2026 10:24:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d7c61-36a5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FosPPbbxuLgiaI1xlgDIrjVm%2FGfety4F%2FS81yKnUzPbUwULfxotJeuwg%2BEdja7vxeZMlCQ7p7MJjB5sQtRml%2BInb4J1rMW2ywl0DQ5xj1x3K6TDpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4d8fc469232678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223837,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1080x1080, components 3","md5":"fe9fa6534edeb06f46a4d2ed7e94b089","sha1":"f5697843a04018c70ddfc70685535470a47c0f8d","sha256":"7dd32ca31ddd9c6d6c6da1e340c14255032db4e54fe7e1d28ddc455d2020e78e","sha512":"fe95fcbf76af70e3cb975a8efe6ae99ad8cca6999f396d177da87dc98186a33f619f635e81f15f0e99b9439ca6bda7183d1ab5e05b562f071116885171186b78","ssdeep":"6144:sZw6K3x2ns5DcRucum5tY0lKWCcii3nUZcUWI:z3qsNwYvWjN3UZc1I","tlshash":"b2241332c8dc8747d18943f2249d4802656d576a2e44dbbe3bdd0439a7ebecfbc98849","first_seen":"2026-02-28T05:36:24.908815Z","last_seen":"2026-02-28T05:36:24.908815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":795,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gunungbokor.edgeone.dev/logo.png","fqdn":"gunungbokor.edgeone.dev","domain":"edgeone.dev","tld":"dev"},"ip":{"addr":"43.174.247.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angkasa77xhoki.online/","date":"2026-02-28T05:35:58.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.dev","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:CA:B6:6A:0A:FF:05:33:79:85:57:92:0C:82:B6:ED:89:51:FA:DA","sha256":"58:DE:5B:23:BF:52:57:E4:1D:9C:E5:9C:98:94:BD:03:41:42:D5:6E:F1:20:A6:40:F4:70:0C:F8:4C:F0:61:9B"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: gunungbokor.edgeone.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 03 Dec 2025 08:53:15 GMT\r\nEtag: \"a06ec02ea213cd67bf064883c73b492d\"\r\nContent-Type: image/png\r\nAge: 2413086\r\nContent-Length: 54033\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nServer: edgeone-pages\r\nCache-Control: public,max-age=3600,must-revalidate\r\nDate: Sat, 28 Feb 2026 05:35:59 GMT\r\nEO-LOG-UUID: 13302469127158488902\r\nEO-Cache-Status: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 135, 8-bit/color RGBA, non-interlaced","md5":"a06ec02ea213cd67bf064883c73b492d","sha1":"b31d718975a73a662cce46dd7004a05d2c5a277d","sha256":"7e9d45aae29260049458c0d1d6d92903ad0984b6b39545c4e9959bcec3126837","sha512":"33520f5648109e16aecd011ac7b3b84019de00ee21619d322cb946940b48852e6d5128963320701c5be686d0d5d3a32980052986e92037d493dcd62e83a0b956","ssdeep":"1536:OdYOymXdKyMWKg9jooIHpWm7zTqRwoUed8xwn9:efdHKgdooIHpLqRSed8xw9","tlshash":"993302a67ae54e860310158a818e83055af0ecc7c187fcf7295f5d5a36997e0a4cf8fb","first_seen":"2025-12-21T06:57:52.763673Z","last_seen":"2026-04-05T08:35:34.649755Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2611,"timings":{"blocked":1293,"dns":855,"connect":21,"send":0,"wait":19,"receive":2,"ssl":419},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angkasa77xhoki.online/","fqdn":"angkasa77xhoki.online","domain":"angkasa77xhoki.online","tld":"online"},"ip":{"addr":"104.21.39.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T05:35:56.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angkasa77xhoki.online","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:38:33 GMT","end":"Sun, 24 May 2026 06:38:32 GMT"},"fingerprint":{"sha1":"71:96:9D:C3:E1:20:B6:83:54:6D:94:9F:8C:AA:C9:B3:02:50:E5:84","sha256":"64:12:79:CA:AA:D0:14:7F:31:68:AB:85:55:40:16:40:54:8B:BB:26:49:04:C5:5C:EB:D2:3E:92:61:89:BA:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: angkasa77xhoki.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 05:35:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 10:24:33 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9f%2Btr4u39UKa%2BscJxcAfpMm6USnEGDYY6g3PI7iX%2Ba1Xf1KkVm5DDUNREeMXLFPj%2BeTV7yVAO3uMCm%2FOqyVK6mUcOOmIM%2FgukZ2Q1ihja1dUfU6gJg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d4d8fbcce5a3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6613,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"90612a4dc49482114c2723d4ac00c5f0","sha1":"9ea81014ed3e54c624ad457280bcb7811df240e9","sha256":"db4e4ff02447639c50eb58a5f6db624b876d968719c8be4606bfe2961c141de6","sha512":"63fb994e668109e57cb2562edf180486ad369883dee64577ec6d402877c057d84877b9d733af9bf0790ed7f282256b69f3248cf857817161360f92fc1ebd542a","ssdeep":"192:pauf/g/ekRklkTkq9J2jqyp0s3YXQ0UfR42s:Qg/g/SrZBs","tlshash":"0ed16066994520026233d3b2ab77b75cdb125067db424818bbdd334b1fba6198273fac","first_seen":"2026-02-28T05:36:24.913759Z","last_seen":"2026-02-28T05:36:24.913759Z","times_seen":1,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":56,"dns":43,"connect":1,"send":0,"wait":609,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://angkasa77xhoki.online/","date":"2026-02-28T05:35:57.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73111\r\ndate: Sat, 28 Feb 2026 05:35:57 GMT\r\nexpires: Sat, 28 Feb 2026 05:35:57 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"cbf8b0320ab789fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":106,"dns":4,"connect":15,"send":0,"wait":30,"receive":28,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gunungbokor.edgeone.dev/favicon.png","fqdn":"gunungbokor.edgeone.dev","domain":"edgeone.dev","tld":"dev"},"ip":{"addr":"43.174.247.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angkasa77xhoki.online/","date":"2026-02-28T05:35:57.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.dev","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:CA:B6:6A:0A:FF:05:33:79:85:57:92:0C:82:B6:ED:89:51:FA:DA","sha256":"58:DE:5B:23:BF:52:57:E4:1D:9C:E5:9C:98:94:BD:03:41:42:D5:6E:F1:20:A6:40:F4:70:0C:F8:4C:F0:61:9B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: gunungbokor.edgeone.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 03 Dec 2025 08:53:15 GMT\r\nEtag: \"452a83b364d6f3fd23f0ea73beb9f034\"\r\nContent-Type: image/png\r\nAge: 382191\r\nContent-Length: 4241\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nServer: edgeone-pages\r\nCache-Control: public,max-age=3600,must-revalidate\r\nDate: Sat, 28 Feb 2026 05:35:59 GMT\r\nEO-LOG-UUID: 6119269346141295629\r\nEO-Cache-Status: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"452a83b364d6f3fd23f0ea73beb9f034","sha1":"53d0b2be9d9684153838b51611eb10ca1f6b76e6","sha256":"5e54ad9643c64b63740fcfe87699ff38f48e390b1a456a1c5e23cbb08ac58bdc","sha512":"f7bfbaacd03e9418b08a52f07a20699e96a9f5f9b6efa2c32bf572e437be124644726064db09a918a25c21418a8f741241e8834a08beeb5240cdc43c60ad4cde","ssdeep":"96:gY2IEQq20BzEK3B9ennoo6HweA6Rlfbx0S8ViVR:g6iZEVnn8RlWJ0VR","tlshash":"cd918f45f4e6589657c4df2631f9413a8ee70ee7eee9f440b6cfe026480b3604099093","first_seen":"2025-12-21T06:57:52.760808Z","last_seen":"2026-04-05T08:35:34.655461Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1880,"timings":{"blocked":0,"dns":1213,"connect":19,"send":0,"wait":19,"receive":0,"ssl":629},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"gunungbokor.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}