{"report_id":"c2bacfd9-0311-4e1d-a8f4-a5f269b73436","version":0,"status":"done","tags":[],"date":"2026-08-28T14:17:10Z","url":{"schema":"http","addr":"bigebindonesia.com/","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"title":"BIgeb","dom":{"size":58476,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b33ec0c81f72268d87ce2fa58e78ddee","sha1":"30198f4916bfdef4083712d263b344709dcb109b","sha256":"fcdeef7d2b30de9043ff08a0a677994ac599077d45fcfa451e0e253465f141db","sha512":"2b4aaaf879d7a2b5ee51f847a4359927edf8059993b30d727bf8d3cc6c4ff44766387ff193d9233079f24beb88806a4e41ef5cc5c600b6755549b16423640547","ssdeep":"384:fPlkcZsbQTENszhjOTSz6If49BJ7ukN1o+d7clNH7FphyjqK4QT9ojFZBhbc/mmK:fPlkcAsRKuLa7pQ+5clNH7jhyjq2DOxx","tlshash":"16432010c7dd191720a290826da55e1abcfe9f32e25e0544f3af4aa5bf83f45ae23149","dom_hash":"domhashd9d4a0cf1efd30359adf3b47d8d132ee","first_seen":"2026-08-28T14:17:16.909773Z","last_seen":"2026-08-28T14:17:16.909773Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bigebindonesia.com/","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:17:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-08-28","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"bigebindonesia.com/static/mobile/img/home.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bigebindonesia.com","ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T14:04:31.436376Z","last_seen":"2026-08-28T14:04:31.436376Z","alert_count":68,"request_count":67,"received_data":11308199,"sent_data":39476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"mg.rp989.com","ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T14:00:57.879525Z","last_seen":"2026-08-28T14:00:57.879525Z","alert_count":0,"request_count":3,"received_data":1516,"sent_data":1749,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b611cde12f18866736f030afae60c32","sha1":"e364290dedf94d28ac84aaf0992a25ea9aa9cd39","sha256":"2226421a04282eaee5be9bb57521b83c69a5405b3277e2a04c70e0e070518fa2","sha512":"dcdc3f363102a7e5874c6d096e4a6d7a96d2e43202fea35c1cc27a0d7bb44bb74b143220b25adc4f358e075e3736fdd86390664350dc6bb0869569db2af65489","ssdeep":"","tlshash":"aed05e88844b86960b6a046a4b5fb2117112c4770349c4107b1c26eaafe177fa6aaad6","size":265,"data":"","first_seen":"2026-06-08T23:14:59.684176Z","last_seen":"2026-08-28T14:17:30.96853Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f259df655fcb953f394299169f3ec91c","sha1":"f5464f692e8fb66ddc2a42fa5895d48132cde790","sha256":"dd5d9ade106f4c23775b0223b7f4a87e33426c8daa32fc0772f421872396cd6a","sha512":"8b75905a133e9ce578c2a03c12b1458fca2c59c96ca0e2e77f6ecedd97c6a77dcb3d0e3ca3438f49cb52196e84b6f1757a6103bf1cbf61d60cb9a1b368ee0c78","ssdeep":"","tlshash":"35e0c204cad786ca7c08184123ae153b7092d80351c9d656fd6eb11b9f5350fa5e83ec","size":312,"data":"","first_seen":"2026-08-28T14:01:08.302727Z","last_seen":"2026-08-28T14:17:30.969735Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2890177bd2fcb7ac5b7185ae8eddcf7","sha1":"87238cf5365f43e3980250614880be9f05c8993f","sha256":"12f29f8aec96b797e9e0956c255efe1e46a7406207015ce600dbaed7ad0a3bb0","sha512":"aea085f467f3e681fdb1c6262889ff5427678123edaebb0aaad1c08f4e4125f95d8ddedeb297b9872589433fde1d9f8ba6b1ffde065d43974ed30ee325130956","ssdeep":"","tlshash":"9c41cc6ed0a62014c1b366541e9f2118381470e7840dc82f7fcc92a5aff553ec9eb79c","size":2364,"data":"","first_seen":"2026-06-08T23:14:59.686027Z","last_seen":"2026-08-28T14:17:30.971202Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a673cbb5206e793ee3e4744cb269d38c","sha1":"157c643953b7fdadf573cef328e817de67e79806","sha256":"2724fad55e91f52a78317e264911e689d3c8c5dab7c2736f7205b55030b72d8a","sha512":"791f0ffd7809a7224a649ebc4fd394b95d4d2b56e51e6ea2497fbf8c159ab08f227871b7cdcce13b8815b86a893fa6a5d0fc08a6d65172fa4bd116909c63e775","ssdeep":"","tlshash":"30e04f3bf265530101b320fa0d2b2b909832388b6c492d0e7b1c05d14f1c6964c21b0e","size":390,"data":"","first_seen":"2026-08-28T14:01:08.304519Z","last_seen":"2026-08-28T14:17:30.972222Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c529979faa8a1b49ef45cf6279cb3b4e","sha1":"9039d2a23b4679cec1e0478895e25c0b62501fd5","sha256":"632dbca59e1e5b6ebd57dfb5f1f354e0d565eaa364b83c8446b617b0b439264b","sha512":"d71db7c7de2116e482ffbdb111fa788aa50d554cbbeb62c8b8175fdb21fbccd6b26a92843fd818870448826ef7ff585fdcd732fb56576eb572815c16e53ea493","ssdeep":"","tlshash":"e631f3da40d51349a9b728929b8b3a01316794b714cc500bbe1cf6681f4a31f4acbfee","size":1755,"data":"","first_seen":"2026-08-28T14:01:08.305857Z","last_seen":"2026-08-28T14:17:30.972947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b079015879110e8d38fbde163d145292","sha1":"c38f410062f607117a5cb1de8cbc1d6673aa9210","sha256":"acd5895bd78407e9ea93750a80a9c12ae0d5d0609809a4861dab028f128597a4","sha512":"a0006071d2bb6658c336f092a73160f967a13f74d75f07bbd0269b218e7f4fa24dc76a602377f1747cdc0908f035f99ee85a16ea7dec4e7cb63b920dd11eba64","ssdeep":"","tlshash":"a470000c8f2a8000a00a8cc0208082000ca8200222200000a80a0e0030802a0802a0a8","size":20,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.974561Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7ce9aa6a2db0adce79936c961bbe90","sha1":"e335c5857172d93f96041a3d07604d63c127dad8","sha256":"13980e5864f430313cd72432cea992e5f50069551d953ce9b63ab1e7e32819b9","sha512":"9733d3eb9e804073df08cceaf9ac06b1b4cd0b930346e778c75152ea42248311bfe3d9e222397fcd3c76ed9038df22118b42cf3c71c9d6d1d487ecf34613c15b","ssdeep":"","tlshash":"26715288f70e654c283631a65b5e10c8791c443b85148c27ff2d9c7c6f9eb199755a2f","size":3752,"data":"","first_seen":"2026-08-28T14:01:08.318111Z","last_seen":"2026-08-28T14:17:30.975503Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd143f09d154c1c9ca348c559d53ee80","sha1":"34860721cf753765b16fe526cd7a5618326a3b1a","sha256":"83938f0bdc966fd9a7b7ec3d757eccd7d990a7ae12bef7406e528e9c22a9015b","sha512":"5733bbd345d8fafe9cd76e218d9adba741106fd630aa8be303f0e2d0091f3ab83cf1a63eecbcfc6b92c09d7a94eec161bdb2e4f5dcb53068d30b818598737735","ssdeep":"192:EHjrXg7hWXwiQRdUFUMeajJiMF0Cl3Loa5fFwy4HrwIIgUdjAN:EDrQ0XRQLM1iMF0Cl3LoaILEWNN","tlshash":"167252a0fbac151f50f6102d84ac55c86bdc8571c7a849e7babca6d00748f1e146bdbf","size":16129,"data":"","first_seen":"2025-10-15T23:11:00.714426Z","last_seen":"2026-08-28T14:17:30.883186Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","size":22041,"data":"","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-28T14:17:30.864344Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","size":9591,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.873695Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","size":3862,"data":"","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-28T14:17:30.953888Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","size":7091,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.856727Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/lang/id-id.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0830794652be840903e66f12655f586","sha1":"be262a53a29ed6bbc60caf662a5c4a320bdcae1b","sha256":"27829e29d238cd1570fa53dfa3ee87f38d820b7d2263dc77e9db659aa5b6cceb","sha512":"1afafc034d6c4c03ba9b1dc23f630ca44d571f16348d5d47a7b31382bddac2ad5aa266bff9ffd43fd263555a4a53e7aa69d66103957b82a41af07bc1ee16eb96","ssdeep":"","tlshash":"1411f6545b09a40da51126af17e401c9e5ed40770627760c77b7a981df3fd1f40ed60f","size":857,"data":"","first_seen":"2026-08-28T14:01:08.267489Z","last_seen":"2026-08-28T14:17:30.840183Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/layui.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","size":7395,"data":"","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-29T01:32:11.479743Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/script.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd8dbda74fc465ae66adcc739addd22","sha1":"9a7cdadeeec394ca68f30ceeb4cd0a5a807008eb","sha256":"816e4ac149a00e91f7dcab8e6494abac7ea31f15d0ac667e117e48308eda79a8","sha512":"37a2fcb6dca3612a35d314448726fe71334d342fa9b9cf491e90ab13920b8cdfae8db3d5d333320e13c277e3e958b94f6367711132f2ba544926f5d981b7e47c","ssdeep":"96:z9+ApqIu5jK5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejqj6Ev1js23vh831GhECX/H","tlshash":"cc9163a87156362d83f233744cfe4425dc3ed665460b8960f0a1b9942d7463e4eebecd","size":4285,"data":"","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.832665Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/iosapp.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","size":2054,"data":"","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.925679Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/index/d3.v4.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","size":221957,"data":"","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-29T08:53:34.638441Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/index/index.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","size":4625,"data":"","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-28T14:17:30.929942Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/jquery.cookies.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","size":3139,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-28T23:33:57.579786Z","times_seen":3124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-29T19:16:23.344499Z","times_seen":140026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-29T19:19:51.422405Z","times_seen":750130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/layer_mobile/layer.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b779281d1bc48453207fe2cfe0fc269f","sha1":"9d7a4f3faaa85d8abf62bb8f450146a5920144eb","sha256":"27751e247667cc06cc4985515759153864421aab1f2f5a660a79ea82548c7ed4","sha512":"92553de96e3388f4ac94924f577f72cd1cb4b2c3ecef7dbc8a86eac66d4b51ee24292d8d39d0d22c495842a30b99a622d08dafb9fbec890e4f7f24bc417e5bc9","ssdeep":"","tlshash":"8361b876f1013677662321c4e06f590f7a736591b100c802e0e4d1ada9fec4ca8bbf6d","size":3330,"data":"","first_seen":"2025-03-15T23:28:02.133651Z","last_seen":"2026-08-28T14:17:30.932174Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/clipboard.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","size":10111,"data":"","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-28T14:17:30.86776Z","times_seen":2278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/i5scroll.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","size":1779,"data":"","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-28T14:17:30.853136Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","size":7264,"data":"","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-28T14:17:30.831602Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/web3.min.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef095da06a14bf00d20e844cf96202f","sha1":"8e3dea60e686c94eeded2035c110cbf8b62d847f","sha256":"b2f2c092aadaadb3a720e4f7f114005eff3fa05c663ed84c0b9791b0b39c4aa7","sha512":"e6dc0322c2857cad096fbf29567947ef7e2619d6802f8738f06ea9e7f065ed6fbb5d4012f1a562ae790eb86e5d303b18074b7698facf13005dea7a0405f318c6","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KL3zxK6C8:QZoQjxAzCamsviTeyXaKiX","tlshash":"5155d9c4b650b051c3a66a90441f900ee37ef96d3c4e0169fa57ecf37cb8a89552af39","size":1384704,"data":"","first_seen":"2024-10-04T10:53:17.054173Z","last_seen":"2026-08-28T14:17:30.964749Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj324 class:Event extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false composed:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj327 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] defaultPrevented:false eventPhase:2 isTrusted:true returnValue:true srcElement:map[actor:server1.conn0.watcher17.process7//obj326 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] timeStamp:3019] target:map[actor:server1.conn0.watcher17.process7//obj325 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:error] sealed:false type:object]depth-socket::error","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":100,"column_number":11},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj328 class:Event extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false composed:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj331 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] defaultPrevented:false eventPhase:2 isTrusted:true returnValue:true srcElement:map[actor:server1.conn0.watcher17.process7//obj330 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] timeStamp:4056] target:map[actor:server1.conn0.watcher17.process7//obj329 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:error] sealed:false type:object]depth-socket::error","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":100,"column_number":11},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj332 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj336 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"init\",\"client_id\":\"7f00000107d000000765\"} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj334 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj335 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj333 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj337 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj341 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"onweb\",\"client_id\":\"7f00000107d000000765\"} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj339 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj340 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj338 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj342 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj346 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79438.77,\"close\":78473.26,\"high\":81334.15,\"low\":78397.95,\"change\":-2.2692,\"amount\":1751.62824936,\"count\":24495,\"vol\":139879673.28217,\"volume\":139879673.28217,\"canvas\":[79150.11,79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57],\"usd\":\"78,473.260000\"},{\"market\":\"ethusdt\",\"open\":2490.47,\"close\":2474.1,\"high\":2532.7,\"low\":2466.9,\"change\":-1.8674,\"amount\":40579.23475941,\"count\":87888,\"vol\":101528644.60326,\"volume\":101528644.60326,\"canvas\":[2498.84,2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43],\"usd\":\"2,474.100000\"},{\"market\":\"xrpusdt\",\"open\":1.4463,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5989810.9586848,\"count\":7069,\"vol\":8616797.121947,\"volume\":8616797.121947,\"canvas\":[1.416,1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.088,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19383799.003588,\"count\":2342,\"vol\":1708652.9705126,\"volume\":1708652.9705126,\"canvas\":[0.0864,0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7938,\"close\":7.5619,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3935,\"amount\":93749.4163597,\"count\":5788,\"vol\":728780.28285964,\"volume\":728780.28285964,\"canvas\":[7.6625,7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623],\"usd\":\"7.561900\"},{\"market\":\"wowusdt\",\"open\":1.5128,\"close\":1.5491,\"high\":1.6058,\"low\":1.5491,\"change\":4.1062,\"amount\":47678738766.537,\"count\":47664518439,\"vol\":47672419227.904,\"volume\":47672419227.904,\"canvas\":[1.5558,1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066],\"usd\":\"1.549100\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8575,\"high\":0.8933,\"low\":0.8555,\"change\":-2.9868,\"amount\":254416.79231207,\"count\":2319,\"vol\":222802.1481585,\"volume\":222802.1481585,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.857500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7171,\"close\":0.6957,\"high\":0.7307,\"low\":0.6923,\"change\":-4.1736,\"amount\":3413368.3118009,\"count\":14070,\"vol\":2420779.8832803,\"volume\":2420779.8832803,\"canvas\":[0.7006,0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961],\"usd\":\"0.695700\"},{\"market\":\"linkusdt\",\"open\":11.7522,\"close\":11.59,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4485,\"amount\":526005.06196148,\"count\":13597,\"vol\":6222129.4755282,\"volume\":6222129.4755282,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.590000\"},{\"market\":\"ltcusdt\",\"open\":49.91,\"close\":48.53,\"high\":50.51,\"low\":48.41,\"change\":-3.3459,\"amount\":53319.22570833,\"count\":6599,\"vol\":2643201.6842253,\"volume\":2643201.6842253,\"canvas\":[48.9,48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5],\"usd\":\"48.530000\"},{\"market\":\"adausdt\",\"open\":0.2133,\"close\":0.2053,\"high\":0.2179,\"low\":0.2041,\"change\":-4.9486,\"amount\":7466941.1869244,\"count\":6056,\"vol\":1584365.7864059,\"volume\":1584365.7864059,\"canvas\":[0.2073,0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049],\"usd\":\"0.205293\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.338,\"close\":0.3401,\"high\":0.342,\"low\":0.337,\"change\":0.7031,\"amount\":47697141.668339,\"count\":10587,\"vol\":16174641.223674,\"volume\":16174641.223674,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340141\"},{\"market\":\"bchusdt\",\"open\":269.08,\"close\":253.69,\"high\":273.89,\"low\":251.79,\"change\":-6.8412,\"amount\":4664.93597441,\"count\":5555,\"vol\":1238181.0458385,\"volume\":1238181.0458385,\"canvas\":[257.14,257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91],\"usd\":\"253.690000\"},{\"market\":\"bsvusdt\",\"open\":16.9263,\"close\":16.5321,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1625,\"amount\":41039.59949822,\"count\":18393,\"vol\":693333.25741574,\"volume\":693333.25741574,\"canvas\":[16.6829,16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311],\"usd\":\"16.532100\"},{\"market\":\"xmrusdt\",\"open\":458.93,\"close\":468.29,\"high\":476.07,\"low\":453.08,\"change\":0.6426,\"amount\":16264.04503351,\"count\":21359,\"vol\":7546718.7120748,\"volume\":7546718.7120748,\"canvas\":[469.41,469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67],\"usd\":\"468.290000\"},{\"market\":\"iotausdt\",\"open\":0.0424,\"close\":0.0404,\"high\":0.0447,\"low\":0.0399,\"change\":-7.5515,\"amount\":15379229.50546,\"count\":23939,\"vol\":648200.53547632,\"volume\":648200.53547632,\"canvas\":[0.0411,0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404],\"usd\":\"0.040400\"},{\"market\":\"dashusdt\",\"open\":39.27,\"close\":37.99,\"high\":40.62,\"low\":37.88,\"change\":-4.9775,\"amount\":67284.5682275,\"count\":12234,\"vol\":2646309.7009895,\"volume\":2646309.7009895,\"canvas\":[38.64,38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98],\"usd\":\"37.990000\"},{\"market\":\"zecusdt\",\"open\":728.45,\"close\":779.12,\"high\":807.24,\"low\":719.24,\"change\":4.0519,\"amount\":870.04660112,\"count\":20885,\"vol\":661529.15000511,\"volume\":661529.15000511,\"canvas\":[790.6,791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07],\"usd\":\"779.120000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj344 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj345 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj343 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj347 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj351 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79438.77,\"close\":78471.01,\"high\":81334.15,\"low\":78397.95,\"change\":-2.272,\"amount\":1751.65525336,\"count\":24497,\"vol\":139881792.33056,\"volume\":139881792.33056,\"canvas\":[79150.11,79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57],\"usd\":\"78,471.010000\"},{\"market\":\"ethusdt\",\"open\":2490.47,\"close\":2473.76,\"high\":2532.7,\"low\":2466.9,\"change\":-1.8809,\"amount\":40579.24835941,\"count\":87900,\"vol\":101528678.24865,\"volume\":101528678.24865,\"canvas\":[2498.84,2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43],\"usd\":\"2,473.760000\"},{\"market\":\"xrpusdt\",\"open\":1.4463,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5989810.9586848,\"count\":7069,\"vol\":8616797.121947,\"volume\":8616797.121947,\"canvas\":[1.416,1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.088,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19383799.003588,\"count\":2342,\"vol\":1708652.9705126,\"volume\":1708652.9705126,\"canvas\":[0.0864,0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7938,\"close\":7.5619,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3935,\"amount\":93749.4163597,\"count\":5788,\"vol\":728780.28285964,\"volume\":728780.28285964,\"canvas\":[7.6625,7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623],\"usd\":\"7.561900\"},{\"market\":\"wowusdt\",\"open\":1.5491,\"close\":1.5367,\"high\":1.6058,\"low\":1.5491,\"change\":3.2728,\"amount\":47678738767.697,\"count\":47664518441,\"vol\":47672419229.065,\"volume\":47672419229.065,\"canvas\":[1.5558,1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066],\"usd\":\"1.536700\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8575,\"high\":0.8933,\"low\":0.8555,\"change\":-2.9868,\"amount\":254416.79231207,\"count\":2319,\"vol\":222802.1481585,\"volume\":222802.1481585,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.857500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7171,\"close\":0.6957,\"high\":0.7307,\"low\":0.6923,\"change\":-4.1736,\"amount\":3413368.3118009,\"count\":14070,\"vol\":2420779.8832803,\"volume\":2420779.8832803,\"canvas\":[0.7006,0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961],\"usd\":\"0.695700\"},{\"market\":\"linkusdt\",\"open\":11.7522,\"close\":11.5893,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4544,\"amount\":526028.05196148,\"count\":13598,\"vol\":6222395.9135352,\"volume\":6222395.9135352,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.589300\"},{\"market\":\"ltcusdt\",\"open\":49.91,\"close\":48.53,\"high\":50.51,\"low\":48.41,\"change\":-3.3459,\"amount\":53319.22570833,\"count\":6599,\"vol\":2643201.6842253,\"volume\":2643201.6842253,\"canvas\":[48.9,48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5],\"usd\":\"48.530000\"},{\"market\":\"adausdt\",\"open\":0.2133,\"close\":0.2053,\"high\":0.2179,\"low\":0.2041,\"change\":-4.9486,\"amount\":7466941.1869244,\"count\":6056,\"vol\":1584365.7864059,\"volume\":1584365.7864059,\"canvas\":[0.2073,0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049],\"usd\":\"0.205293\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.338,\"close\":0.3401,\"high\":0.342,\"low\":0.337,\"change\":0.7029,\"amount\":47728662.148339,\"count\":10593,\"vol\":16185362.599742,\"volume\":16185362.599742,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340140\"},{\"market\":\"bchusdt\",\"open\":269.08,\"close\":253.69,\"high\":273.89,\"low\":251.79,\"change\":-6.8412,\"amount\":4664.93597441,\"count\":5555,\"vol\":1238181.0458385,\"volume\":1238181.0458385,\"canvas\":[257.14,257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91],\"usd\":\"253.690000\"},{\"market\":\"bsvusdt\",\"open\":16.9263,\"close\":16.532,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1631,\"amount\":41041.16429822,\"count\":18394,\"vol\":693359.12668934,\"volume\":693359.12668934,\"canvas\":[16.6829,16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311],\"usd\":\"16.532000\"},{\"market\":\"xmrusdt\",\"open\":458.93,\"close\":468.29,\"high\":476.07,\"low\":453.08,\"change\":0.6426,\"amount\":16264.54693351,\"count\":21360,\"vol\":7546953.7468258,\"volume\":7546953.7468258,\"canvas\":[469.41,469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67],\"usd\":\"468.290000\"},{\"market\":\"iotausdt\",\"open\":0.0424,\"close\":0.0404,\"high\":0.0447,\"low\":0.0399,\"change\":-7.5515,\"amount\":15379229.50546,\"count\":23939,\"vol\":648200.53547632,\"volume\":648200.53547632,\"canvas\":[0.0411,0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404],\"usd\":\"0.040400\"},{\"market\":\"dashusdt\",\"open\":39.27,\"close\":37.99,\"high\":40.62,\"low\":37.88,\"change\":-4.9775,\"amount\":67284.5682275,\"count\":12234,\"vol\":2646309.7009895,\"volume\":2646309.7009895,\"canvas\":[38.64,38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98],\"usd\":\"37.990000\"},{\"market\":\"zecusdt\",\"open\":728.45,\"close\":779.12,\"high\":807.24,\"low\":719.24,\"change\":4.0519,\"amount\":870.04660112,\"count\":20885,\"vol\":661529.15000511,\"volume\":661529.15000511,\"canvas\":[790.6,791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07],\"usd\":\"779.120000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj349 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj350 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj348 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj352 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj356 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79438.77,\"close\":78465.43,\"high\":81334.15,\"low\":78397.95,\"change\":-2.279,\"amount\":1751.67559636,\"count\":24499,\"vol\":139883388.5528,\"volume\":139883388.5528,\"canvas\":[79150.11,79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57],\"usd\":\"78,465.430000\"},{\"market\":\"ethusdt\",\"open\":2490.47,\"close\":2473.53,\"high\":2532.7,\"low\":2466.9,\"change\":-1.89,\"amount\":40579.26435941,\"count\":87906,\"vol\":101528717.82964,\"volume\":101528717.82964,\"canvas\":[2498.84,2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43],\"usd\":\"2,473.530000\"},{\"market\":\"xrpusdt\",\"open\":1.4463,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5989810.9586848,\"count\":7069,\"vol\":8616797.121947,\"volume\":8616797.121947,\"canvas\":[1.416,1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.088,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19383799.003588,\"count\":2342,\"vol\":1708652.9705126,\"volume\":1708652.9705126,\"canvas\":[0.0864,0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7938,\"close\":7.5619,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3935,\"amount\":93749.4163597,\"count\":5788,\"vol\":728780.28285964,\"volume\":728780.28285964,\"canvas\":[7.6625,7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623],\"usd\":\"7.561900\"},{\"market\":\"wowusdt\",\"open\":1.5367,\"close\":1.5044,\"high\":1.6058,\"low\":1.5491,\"change\":1.1022,\"amount\":47678738769.555,\"count\":47664518442,\"vol\":47672419230.922,\"volume\":47672419230.922,\"canvas\":[1.5558,1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066],\"usd\":\"1.504400\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8575,\"high\":0.8933,\"low\":0.8555,\"change\":-2.9868,\"amount\":254416.79231207,\"count\":2319,\"vol\":222802.1481585,\"volume\":222802.1481585,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.857500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7171,\"close\":0.6961,\"high\":0.7307,\"low\":0.6923,\"change\":-4.1185,\"amount\":3413489.8771009,\"count\":14071,\"vol\":2420864.5048857,\"volume\":2420864.5048857,\"canvas\":[0.7006,0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961],\"usd\":\"0.696100\"},{\"market\":\"linkusdt\",\"open\":11.7522,\"close\":11.5953,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4039,\"amount\":526207.97196148,\"count\":13602,\"vol\":6224481.2396212,\"volume\":6224481.2396212,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.595300\"},{\"market\":\"ltcusdt\",\"open\":49.91,\"close\":48.56,\"high\":50.51,\"low\":48.41,\"change\":-3.2862,\"amount\":53327.68660833,\"count\":6600,\"vol\":2643612.5455293,\"volume\":2643612.5455293,\"canvas\":[48.9,48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5],\"usd\":\"48.560000\"},{\"market\":\"adausdt\",\"open\":0.2133,\"close\":0.2053,\"high\":0.2179,\"low\":0.2041,\"change\":-4.9486,\"amount\":7466941.1869244,\"count\":6056,\"vol\":1584365.7864059,\"volume\":1584365.7864059,\"canvas\":[0.2073,0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049],\"usd\":\"0.205293\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.338,\"close\":0.3401,\"high\":0.342,\"low\":0.337,\"change\":0.7002,\"amount\":47760978.588339,\"count\":10598,\"vol\":16196354.521762,\"volume\":16196354.521762,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340131\"},{\"market\":\"bchusdt\",\"open\":269.08,\"close\":253.86,\"high\":273.89,\"low\":251.79,\"change\":-6.7788,\"amount\":4667.03277441,\"count\":5557,\"vol\":1238713.1201125,\"volume\":1238713.1201125,\"canvas\":[257.14,257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91],\"usd\":\"253.860000\"},{\"market\":\"bsvusdt\",\"open\":16.9263,\"close\":16.5319,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1637,\"amount\":41042.62529822,\"count\":18395,\"vol\":693383.27979524,\"volume\":693383.27979524,\"canvas\":[16.6829,16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311],\"usd\":\"16.531900\"},{\"market\":\"xmrusdt\",\"open\":458.93,\"close\":468.29,\"high\":476.07,\"low\":453.08,\"change\":0.6426,\"amount\":16266.08473351,\"count\":21362,\"vol\":7547673.8831878,\"volume\":7547673.8831878,\"canvas\":[469.41,469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67],\"usd\":\"468.290000\"},{\"market\":\"iotausdt\",\"open\":0.0424,\"close\":0.0404,\"high\":0.0447,\"low\":0.0399,\"change\":-7.5515,\"amount\":15379229.50546,\"count\":23939,\"vol\":648200.53547632,\"volume\":648200.53547632,\"canvas\":[0.0411,0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404],\"usd\":\"0.040400\"},{\"market\":\"dashusdt\",\"open\":39.27,\"close\":37.98,\"high\":40.62,\"low\":37.88,\"change\":-5.0025,\"amount\":67287.8973275,\"count\":12235,\"vol\":2646436.1402075,\"volume\":2646436.1402075,\"canvas\":[38.64,38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98],\"usd\":\"37.980000\"},{\"market\":\"zecusdt\",\"open\":728.45,\"close\":779.15,\"high\":807.24,\"low\":719.24,\"change\":4.0559,\"amount\":870.07770112,\"count\":20886,\"vol\":661553.38157011,\"volume\":661553.38157011,\"canvas\":[790.6,791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07],\"usd\":\"779.150000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj354 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj355 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj353 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj357 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj361 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79438.77,\"close\":78465.43,\"high\":81334.15,\"low\":78397.95,\"change\":-2.279,\"amount\":1751.67559636,\"count\":24499,\"vol\":139883388.5528,\"volume\":139883388.5528,\"canvas\":[79150.11,79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57],\"usd\":\"78,465.430000\"},{\"market\":\"ethusdt\",\"open\":2490.47,\"close\":2473.39,\"high\":2532.7,\"low\":2466.9,\"change\":-1.8955,\"amount\":40579.27395941,\"count\":87919,\"vol\":101528741.57315,\"volume\":101528741.57315,\"canvas\":[2498.84,2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43],\"usd\":\"2,473.390000\"},{\"market\":\"xrpusdt\",\"open\":1.4463,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5989810.9586848,\"count\":7069,\"vol\":8616797.121947,\"volume\":8616797.121947,\"canvas\":[1.416,1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.088,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19383799.003588,\"count\":2342,\"vol\":1708652.9705126,\"volume\":1708652.9705126,\"canvas\":[0.0864,0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7938,\"close\":7.5665,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3353,\"amount\":93765.0666597,\"count\":5789,\"vol\":728898.70085459,\"volume\":728898.70085459,\"canvas\":[7.6625,7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623],\"usd\":\"7.566500\"},{\"market\":\"wowusdt\",\"open\":1.5044,\"close\":1.536,\"high\":1.6058,\"low\":1.5491,\"change\":3.2258,\"amount\":47678738771.065,\"count\":47664518444,\"vol\":47672419232.432,\"volume\":47672419232.432,\"canvas\":[1.5558,1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066],\"usd\":\"1.536000\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8575,\"high\":0.8933,\"low\":0.8555,\"change\":-2.9868,\"amount\":254416.79231207,\"count\":2319,\"vol\":222802.1481585,\"volume\":222802.1481585,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.857500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7171,\"close\":0.6961,\"high\":0.7307,\"low\":0.6923,\"change\":-4.1185,\"amount\":3413489.8771009,\"count\":14071,\"vol\":2420864.5048857,\"volume\":2420864.5048857,\"canvas\":[0.7006,0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961],\"usd\":\"0.696100\"},{\"market\":\"linkusdt\",\"open\":11.7522,\"close\":11.5893,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4544,\"amount\":526346.54196148,\"count\":13605,\"vol\":6226087.3068062,\"volume\":6226087.3068062,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.589300\"},{\"market\":\"ltcusdt\",\"open\":49.91,\"close\":48.56,\"high\":50.51,\"low\":48.41,\"change\":-3.2862,\"amount\":53327.68660833,\"count\":6600,\"vol\":2643612.5455293,\"volume\":2643612.5455293,\"canvas\":[48.9,48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5],\"usd\":\"48.560000\"},{\"market\":\"adausdt\",\"open\":0.2135,\"close\":0.206,\"high\":0.2179,\"low\":0.206,\"change\":-4.6212,\"amount\":7138715.77741,\"count\":5794,\"vol\":1517936.0077419,\"volume\":1517936.0077419,\"canvas\":[0.2073,0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049],\"usd\":\"0.206000\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.338,\"close\":0.3401,\"high\":0.342,\"low\":0.337,\"change\":0.6969,\"amount\":47822073.338339,\"count\":10608,\"vol\":16217134.372387,\"volume\":16217134.372387,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340120\"},{\"market\":\"bchusdt\",\"open\":269.08,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4668.78967441,\"count\":5559,\"vol\":1239158.7585085,\"volume\":1239158.7585085,\"canvas\":[257.14,257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9263,\"close\":16.5315,\"high\":17.1978,\"low\":16.5306,\"change\":-3.166,\"amount\":41047.44719822,\"count\":18397,\"vol\":693462.99343381,\"volume\":693462.99343381,\"canvas\":[16.6829,16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311],\"usd\":\"16.531500\"},{\"market\":\"xmrusdt\",\"open\":458.93,\"close\":468.49,\"high\":476.07,\"low\":453.08,\"change\":0.6856,\"amount\":16267.36443351,\"count\":21364,\"vol\":7548273.3536068,\"volume\":7548273.3536068,\"canvas\":[469.41,469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67],\"usd\":\"468.490000\"},{\"market\":\"iotausdt\",\"open\":0.0424,\"close\":0.0404,\"high\":0.0447,\"low\":0.0399,\"change\":-7.5515,\"amount\":15380137.30336,\"count\":23940,\"vol\":648237.21051148,\"volume\":648237.21051148,\"canvas\":[0.0411,0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404],\"usd\":\"0.040400\"},{\"market\":\"dashusdt\",\"open\":39.27,\"close\":37.98,\"high\":40.62,\"low\":37.88,\"change\":-5.0025,\"amount\":67294.2875275,\"count\":12236,\"vol\":2646678.8400035,\"volume\":2646678.8400035,\"canvas\":[38.64,38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98],\"usd\":\"37.980000\"},{\"market\":\"zecusdt\",\"open\":728.45,\"close\":779.15,\"high\":807.24,\"low\":719.24,\"change\":4.0559,\"amount\":870.07770112,\"count\":20886,\"vol\":661553.38157011,\"volume\":661553.38157011,\"canvas\":[790.6,791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07],\"usd\":\"779.150000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj359 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj360 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj358 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj362 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj366 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79494.31,\"close\":78520.4,\"high\":81334.15,\"low\":78397.95,\"change\":-2.2105,\"amount\":1751.68740236,\"count\":24493,\"vol\":139883881.13511,\"volume\":139883881.13511,\"canvas\":[79150.11,79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57],\"usd\":\"78,520.400000\"},{\"market\":\"ethusdt\",\"open\":2490.47,\"close\":2475.19,\"high\":2532.7,\"low\":2466.9,\"change\":-1.8241,\"amount\":40596.90075941,\"count\":87932,\"vol\":101572364.17002,\"volume\":101572364.17002,\"canvas\":[2498.84,2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43],\"usd\":\"2,475.190000\"},{\"market\":\"xrpusdt\",\"open\":1.4463,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5989810.9586848,\"count\":7069,\"vol\":8616797.121947,\"volume\":8616797.121947,\"canvas\":[1.416,1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.088,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19383799.003588,\"count\":2342,\"vol\":1708652.9705126,\"volume\":1708652.9705126,\"canvas\":[0.0864,0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7938,\"close\":7.5665,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3353,\"amount\":93765.0666597,\"count\":5789,\"vol\":728898.70085459,\"volume\":728898.70085459,\"canvas\":[7.6625,7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623],\"usd\":\"7.566500\"},{\"market\":\"wowusdt\",\"open\":1.536,\"close\":1.5176,\"high\":1.6058,\"low\":1.5491,\"change\":1.9892,\"amount\":47678738772.811,\"count\":47664518446,\"vol\":47672419234.178,\"volume\":47672419234.178,\"canvas\":[1.5558,1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066],\"usd\":\"1.517600\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8585,\"high\":0.8933,\"low\":0.8555,\"change\":-2.8736,\"amount\":254485.10651207,\"count\":2320,\"vol\":222860.7958992,\"volume\":222860.7958992,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.858500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7186,\"close\":0.6961,\"high\":0.7307,\"low\":0.6923,\"change\":-4.1185,\"amount\":3413009.3723009,\"count\":14069,\"vol\":2420519.847223,\"volume\":2420519.847223,\"canvas\":[0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961,0.6966],\"usd\":\"0.696100\"},{\"market\":\"linkusdt\",\"open\":11.7772,\"close\":11.5993,\"high\":12.0479,\"low\":11.5615,\"change\":-2.3702,\"amount\":525780.27196148,\"count\":13592,\"vol\":6219413.6520532,\"volume\":6219413.6520532,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.599300\"},{\"market\":\"ltcusdt\",\"open\":49.91,\"close\":48.56,\"high\":50.51,\"low\":48.41,\"change\":-3.2862,\"amount\":53327.68660833,\"count\":6600,\"vol\":2643612.5455293,\"volume\":2643612.5455293,\"canvas\":[48.9,48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5],\"usd\":\"48.560000\"},{\"market\":\"adausdt\",\"open\":0.2135,\"close\":0.206,\"high\":0.2179,\"low\":0.206,\"change\":-4.6212,\"amount\":7138715.77741,\"count\":5794,\"vol\":1517936.0077419,\"volume\":1517936.0077419,\"canvas\":[0.2073,0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049],\"usd\":\"0.206000\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.338,\"close\":0.3402,\"high\":0.342,\"low\":0.337,\"change\":0.7114,\"amount\":47838532.888339,\"count\":10610,\"vol\":16222733.175826,\"volume\":16222733.175826,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340169\"},{\"market\":\"bchusdt\",\"open\":269.28,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4663.70117441,\"count\":5553,\"vol\":1237788.7118785,\"volume\":1237788.7118785,\"canvas\":[257.14,257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9263,\"close\":16.5312,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1678,\"amount\":41051.00359822,\"count\":18399,\"vol\":693521.78557081,\"volume\":693521.78557081,\"canvas\":[16.6829,16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311],\"usd\":\"16.531200\"},{\"market\":\"xmrusdt\",\"open\":458.93,\"close\":468.21,\"high\":476.07,\"low\":453.08,\"change\":0.6254,\"amount\":16268.25123351,\"count\":21365,\"vol\":7548688.5622348,\"volume\":7548688.5622348,\"canvas\":[469.41,469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67],\"usd\":\"468.210000\"},{\"market\":\"iotausdt\",\"open\":0.0424,\"close\":0.0404,\"high\":0.0447,\"low\":0.0399,\"change\":-7.5515,\"amount\":15380137.30336,\"count\":23940,\"vol\":648237.21051148,\"volume\":648237.21051148,\"canvas\":[0.0411,0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404],\"usd\":\"0.040400\"},{\"market\":\"dashusdt\",\"open\":39.27,\"close\":37.98,\"high\":40.62,\"low\":37.88,\"change\":-5.0025,\"amount\":67294.2875275,\"count\":12236,\"vol\":2646678.8400035,\"volume\":2646678.8400035,\"canvas\":[38.64,38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98],\"usd\":\"37.980000\"},{\"market\":\"zecusdt\",\"open\":728.45,\"close\":779.15,\"high\":807.24,\"low\":719.24,\"change\":4.0559,\"amount\":870.07770112,\"count\":20886,\"vol\":661553.38157011,\"volume\":661553.38157011,\"canvas\":[790.6,791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07],\"usd\":\"779.150000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj364 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj365 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj363 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","line_number":89,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.249Z","timestamp":1787926598249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/form.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Aug 2021 08:56:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610904aa-2577\"\r\nexpires: Sat, 29 Aug 2026 02:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qh7UBnOLXauHeMWyqnAal1yPzoX7OX3Qq2uY27yO5vzqOGYsCGJLJf6tv9b42P%2FQIQQIhBHJxaHp%2BjzStYbj7BKQ8DRrTjay1Iydk%2BGTuKKLmW7bznkFxY4jSdmu43fOts65S%2BY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef57082c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9591,"size_decoded":4971,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9284)","md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.873695Z","times_seen":131,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/favicon.ico","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.743Z","timestamp":1787926598743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNs7pJghJ4qi4dF92XTTm700ql9rF4UKOHTYwdFNCyLfalFIPYQKWBXI5Oh80KcI0CtDIHWmkn5kfvLYtzfSAgSceoz0XrLbcEYyYTFcqTn3N3ROuNFFmmbWNTZed0VhsQr0fRM%3D\"}]}\r\nlast-modified: Fri, 28 Feb 2025 09:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\nage: 767\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"67c17e69-10be\"\r\ncf-ray: a323ef5a2871712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":1772,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f7d872bed7b9ce6f1c5769df3ef3d650","sha1":"82ae3e4d5372a441031bfc73790473d1bc3f821b","sha256":"94c2c861c94e0803f436f87f681149796bf00ffd219cb4e2e8d54bda1f173248","sha512":"781c9ede05b7dcb77033b9bfe131c2a5150c1f0229a055bdcc4c473aa93fdf2cb154004489608d32690bd0039b08fb3bfb926af51b5dcfd03d2bcabb0c8842f1","ssdeep":"48:dVwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwl:dKcfQWywTHcjaMl9M","tlshash":"a29142ee306fd086f2307e79b4aaf81a70702c0835ab97421d347c591af2e7620564c8","first_seen":"2026-08-28T14:01:08.291463Z","last_seen":"2026-08-28T14:17:30.957075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/css/style.css?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.120Z","timestamp":1787926597120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/css/style.css?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jan 2025 17:22:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677c113c-5bba\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2%2BEF7Yck1sxkDlT%2BH9pbRG59CK3CuI2sCe70nUyNlrW1odsEbEECpjSJSs6mZgG55dWN4wOK3zSbkBWWxTKR1Dptex9DojFrrFO5QxhYCvx74jR%2BwTn5rpVUmSFh2MoznYz5yE%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef4fff94712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23482,"size_decoded":7043,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"4a2e781e6f87aeeb3e397e02f0c78776","sha1":"57ec85f454bffdecad6db7412cb8041914537255","sha256":"02403f5ea30f7dc322e91ce0c2817a072af7f117482d99297f1e41318abeb9d4","sha512":"92b6e0f138bf0e23d17a5aad1791fb5537b737f355be34edc28189c43eef027f69e4f5ceed64c6c7f99ed2fe801a6d5406a1c334299ad3bbc4a6071465200502","ssdeep":"192:MI8pnCzLGbV81/uGzsYyh4OKImsk9Lz7Po7fKaucG5ljo4CUY4o+hnMD6rFd1Vdq:MfC681/bzsVKFHo7IcG/DfFpax/F5R9","tlshash":"13b2852b77421c46b116d0b6ee6da7b2b33d5413a94f9db4f588312dcbc089190b7b8b","first_seen":"2025-10-15T23:11:00.949727Z","last_seen":"2026-08-28T14:17:30.923848Z","times_seen":5,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.141Z","timestamp":1787926598141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/layer.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-5619\"\r\nexpires: Sat, 29 Aug 2026 02:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 768\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvUCWIxiQVoFvoSsrmrXgyigbCSCqNa7RP7NJgcr2jxR0zDp2AEApzp1GKLKCoV3cOV8TKdf0qR0NaB6%2FiHA9Bt6NYG7fU135uE6dXy6jnOXAPxQIng59g4x%2FZDfG7wWo26VKcc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef566821712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22041,"size_decoded":9153,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21984)","md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-28T14:17:30.864344Z","times_seen":472,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.506Z","timestamp":1787926598506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/slider.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 29 Aug 2021 07:25:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"612b365e-1bb3\"\r\nexpires: Sat, 29 Aug 2026 02:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6NJhqsstHLIKn%2Fkcg3VTtug4E04byNmmBMquPVBk1WFfoAkHCW2zkMRp%2B6kjY1nFJUV6HsFdrxqhPjABMO0BfWlSw0Wpxd6Y3Z5nT%2B0UXlTTwItBHoxqvdBIsjMJl0WVsVNNWU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef58a850712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7091,"size_decoded":3483,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6929)","md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.856727Z","times_seen":135,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/index/images/vn.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.150Z","timestamp":1787926597150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/index/images/vn.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Jul 2023 08:56:10 GMT\r\netag: \"64bceb2a-2359\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CX3Hy93UznTXoTlAK7gy2l5vsL2ReDUr7kVMZPRmUEy24X3f5gdESNm95w1GeliZbgkYBey6qZ%2BrzbInapi3NnYsZCp%2F91sUs1l46FNBt9aSfwjzOjb8LQPkSAlhSMvocwp%2FjXw%3D\"}]}\r\ncf-ray: a323ef503faa712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9049\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9049,"size_decoded":9837,"mime_type":"image/png","magic":"PNG image data, 800 x 533, 8-bit/color RGB, non-interlaced","md5":"45255c9ccaa2aa5fc3742baee93ecfb9","sha1":"7b1eb5e5db500d3e72e488de1724788b638a676b","sha256":"3fa711c64741497358c7ec7cd79a020752246df8dcbec0dfc5aa2be0fee1e1e1","sha512":"89b771ffba7a2755edb4cc534ab7bcc25a37815df90673fac8ef13ec66d5d727a8c8ee35e344d9f594cbb077fc7bc3636b4f43ae81cf56e8fc67c9d4f6e164b9","ssdeep":"192:scI8xibfamfU5b+9VadMmKpD6z5T3mxmAutu1C+XTs3pYb:y8xibymfUlmSMmKpu5TmYAutcC+EpYb","tlshash":"2c122889f8dc1f924a548a369dc4b7b2615b4339068d0e56bc3f0291794a2c7a6ff343","first_seen":"2025-03-15T23:28:02.080267Z","last_seen":"2026-08-28T14:17:30.909904Z","times_seen":27,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/hegui.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.164Z","timestamp":1787926597164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/hegui.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jan 2025 16:39:51 GMT\r\netag: \"677d58d7-d07\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FcOJlFwzJ2vD3ZzweS6ll1PhNyrltpC103enRXcgmpMuvHXYB0HvWu5PiQoDnrjBWYPkAKmqYOMI44sYd28n0%2B54TdDM%2BzJ1vANnnI2Q6SUIzoHfVVDksozaUJhbdkBEmrleELY%3D\"}]}\r\ncf-ray: a323ef504fb5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3335,"size_decoded":4122,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c1b348618f9a967f0b21ea4a90cd75ba","sha1":"914b4252df536a02e91b2db8a72398ab078f3b2f","sha256":"d91c3bc13cc9a1b790056e35a16fbac5436707506a1d3238e6946e9cd35e09ac","sha512":"101a2885f30b1125f68b362ba5e2c60c4887ce14dd8eaf17724294ed88f1523d98685108f926f5d334eb2965dc64959883e5726d4224ad49ec33bc2e8dada712","ssdeep":"","tlshash":"d6610884e9406c124a04f844b8fba13b2b174bd099c08466ecefd95299b07fad88a9c3","first_seen":"2025-10-15T23:11:00.723067Z","last_seen":"2026-08-28T14:17:30.943104Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/imgn/serve_ico.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.179Z","timestamp":1787926597179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/imgn/serve_ico.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Mar 2025 09:30:13 GMT\r\netag: \"67c819a5-592\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2FjWjY9hrmKPMARjhxPpfjBU8nkvaniM64Bhhf8rPNK86DO%2BGoN24%2FsxnfJC%2BcxAbtq5Edbr0%2BhoRz3LceStdJTlrGZj%2BVmOhs8DFD7IguJL%2FbklMnGT0seu2Bg3LfM2gEct%2FZk%3D\"}]}\r\ncf-ray: a323ef505fc5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1426,"size_decoded":2223,"mime_type":"image/png","magic":"PNG image data, 36 x 41, 8-bit/color RGBA, non-interlaced","md5":"4680a234754b2c0f6d9eaa22acebe5fb","sha1":"0a53ea350b4c48b6e0824f3093f653b5dac76b3f","sha256":"5aea45e956feaa3442b14b1edf550ecc2f825179428c3d55d031803a0d9077a4","sha512":"2cb9b22e32fe8d3d4bf9380d77a8ab8c489a280df1867b2d88dd90b2c6d64a5579d61f41a8d0c3bf6364091a2afa3f550ba333a8579fd3722365c7e66f10a027","ssdeep":"","tlshash":"a021e992120fcb4eab2b83b055199a35ad700500ac8472b4cf4454290dc586b86f054f","first_seen":"2023-06-06T10:11:01Z","last_seen":"2026-08-28T14:17:30.861219Z","times_seen":19,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/index/index","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:36.704Z","timestamp":1787926596704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /mobile/index/index HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: lang=id-id; path=/\nPHPSESSID=91548055db211b22001d3f7e125ad852; path=/\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v57UW6epZGT%2Ff9%2FTcq4ZzTZbSI3qfJ54xPheYhOqTkx6uP4E8mnJlQswaMrsshMxYRfX1AIl49LJU68RyYo%2FdGWG8rnOc1VWMDqO8x4r5jWymVXVZnsiGurZo2GKfl0Yd3flb7Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323ef4d6f66712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"id-id","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=id-id; path=/"},{"name":"PHPSESSID","value":"91548055db211b22001d3f7e125ad852","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=91548055db211b22001d3f7e125ad852; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}],"data":{"size":57795,"size_decoded":10971,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"853e656e0ebded339658f98fd15114dc","sha1":"0498969e5aae3bb45bc6a378d5ee3000151090fe","sha256":"e78c0c6c00fa1470303a06dea28658c235805714e6ae8d59744d6f55cac2b941","sha512":"b1ec271042eab45bb1f8b20e009763c3be536cf1f818aa1d058032c915d73ad349d29e9e6701f5f57650ed1f03f5a744b18da3ac7e13eb73121132b142255238","ssdeep":"768:LPlkcNMxqOTk7plu7BclNH7jhyjqvLDOxP:JGkjEBclNH7jhyjqvLD4P","tlshash":"05431010c7dd191720a290c27aa45e1abcfe9f32e25e4508f3af4e95bf83f45ae13549","first_seen":"2026-08-28T14:17:16.915975Z","last_seen":"2026-08-28T14:17:16.915975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/web3.min.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.131Z","timestamp":1787926597131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/web3.min.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Apr 2023 06:09:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644228a2-152100\"\r\nexpires: Sat, 29 Aug 2026 02:03:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 769\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZAulKM5qptpFa1jvUlaMm5Y2%2F7cGZYDSBdlsfx9lF3gOMvCC1nojc77jivGpBTlp6hhfYKtcZErHdJRQ13zP%2FU9l9sh4A%2F0GeKeKt%2BwFbre0PnGswU2Sb%2B4sCJ3%2BqMuM%2BqjrSA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef501f9e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384704,"size_decoded":438539,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43607)","md5":"3dc3d8cf48a40af775c23b6e13e80fb6","sha1":"81c654f0d85665cf39e5b6358db7fc4c659cbcc9","sha256":"7ca86cf23873b463ae5620892d2bf3f7adc23e74754bf3b97edb5b9a9a26ba0d","sha512":"97d0e32150fe2f71b9a8a74f5df2cb7ec7c2e052f599a50dce6f6cd0af342a941e95410f813a8baa2034b9deca27e650ff67cc06291e4b333d1956e06d816ff9","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KLO:QZoQjxAO","tlshash":"9f25a6c4b6507051c3a56e90442f900ae33efd693c4e0169fb57ecf76cb8a89552af3a","first_seen":"2025-09-06T18:04:03.23715Z","last_seen":"2026-08-28T14:17:30.877336Z","times_seen":47,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/nav-2.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.181Z","timestamp":1787926597181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/nav-2.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-163\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FAp26l9NrHbFSAdqcL3oV4nPOmKKq5JrGV%2BUYZP2xfT0qUCsXhhXQtvL1NJUu%2B%2BMDv1M1VpuhY2jbDZsE5uD5HP0v1eN9rd5TebUg2QYOl0Axx9BG1Kl0nkjt2mxc%2F2vHgXqqg%3D\"}]}\r\ncf-ray: a323ef506fc7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1145,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"bba6863c9929a3858b0fb3c77201ae8d","sha1":"f6d7dfa984b3ccf6d38d9d9051c0462578bfe9fc","sha256":"7519ccca854d4151acb7e3ef7546148612fa8be43bc7af75d98e29d65d7463fa","sha512":"9faabc908c44d52e21e308b116394e8fb4c12e31f3446b4bd8a7f5c7c418d4c064309f6c841614d018649652286b08d4ee6ebd1bf97134eae8fe3b0d9a090591","ssdeep":"","tlshash":"04e0c0c5f7e774c0d39223bf413e08260433c1ad3d55069ca31bcc55592b00b80c00d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.83476Z","times_seen":270,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mg.rp989.com/wss","fqdn":"mg.rp989.com","domain":"rp989.com","tld":"com"},"ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:41.050Z","timestamp":1787926601050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rp989.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:59:26 GMT","end":"Thu, 12 Nov 2026 03:56:01 GMT"},"fingerprint":{"sha1":"C5:61:B2:53:7F:60:A2:97:54:A4:E5:58:18:C0:13:DD:9B:32:DB:90","sha256":"C5:9A:71:0C:A3:E3:1B:78:4E:1E:82:41:55:D2:5F:6B:79:36:1C:3F:3E:0D:2D:F4:52:67:5E:68:1D:57:15:13"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: mg.rp989.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bigebindonesia.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4mfR+FkBqbw/5keGfZcesA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 28 Aug 2026 14:16:41 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: MIRiuKOV+Gv03QCUB8+pVNMBwjw=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sq9CWA1X8yTz9oGUWpHQU3gFG2P0lqhQ5MnVU26P9eSM3g5L%2BZ%2FJB%2BMbcllBME4OBDclGL7n54JTE1cqwhUWqM6Urhw%2FS0N9%2Boi6CGQMYgNSxQopPhyYe%2BqWTTxc4L8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a323ef689a99b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":624,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":409,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/css/dark.css?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.124Z","timestamp":1787926597124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/css/dark.css?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 02 Mar 2025 11:45:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c444bf-2198\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LneJaTzQYgbg65azmfuULJnd0nbNurIIDYUPg8sLOzyUusspEHnADpSXFyKdYRvJUDmr5Y5AJxhGsZwaRCi2Geu6xqatPacU1bnZDpI0ZIFQ0GhxeIm1nTbfxP09tO14qYJFaLI%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f98712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8600,"size_decoded":3522,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"555df577901f379e8f82c9a5cdafe68d","sha1":"db165f8d8a75a76efafda48654f930c6cd63c7be","sha256":"a6bb4e6f14544456d577208c9d17d765ca777322819318bb30790fc8b8d0a5a1","sha512":"ae6860e264e174ba550e555971aa65c10ccdb2679cc7ea33f52f90f5fa797ca5e322ffe93e6177d891c1fa010d0c64c8aa3f67bdd4c932de9b020cc9e8de3794","ssdeep":"96:66pDT4IZ1pGLPxckf674TwGtRh4KB5uH2HXHHUAXHQmCrWs+Xozh6/KkY:6QH7Zmo74btRh4x2HXHHUAXHQbrZ+OMO","tlshash":"ae024f13e2972c8b3027c0f55a2ea331a73c9027990e5f3dba59b1b66fc18d194b2d53","first_seen":"2025-10-15T23:11:01.023393Z","last_seen":"2026-08-28T14:17:30.827626Z","times_seen":5,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/layui.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.128Z","timestamp":1787926597128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/layui.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1ce3\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrY9OZENCMn2y8sMpEJPA%2FCd31Uyf8aRTodSeyc09S0TLZUv5KPhDNMFufAsCMo4O7DGe827mm%2B%2Bnnb1qPmP5%2FQrcZY50X8pKrBP4KHsBBR3xmDTESHCNa9lLU418Vj5J%2FC63vo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f9c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7395,"size_decoded":4075,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7324)","md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-29T01:32:11.479743Z","times_seen":596,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mg.rp989.com/wss","fqdn":"mg.rp989.com","domain":"rp989.com","tld":"com"},"ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:39.895Z","timestamp":1787926599895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rp989.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:59:26 GMT","end":"Thu, 12 Nov 2026 03:56:01 GMT"},"fingerprint":{"sha1":"C5:61:B2:53:7F:60:A2:97:54:A4:E5:58:18:C0:13:DD:9B:32:DB:90","sha256":"C5:9A:71:0C:A3:E3:1B:78:4E:1E:82:41:55:D2:5F:6B:79:36:1C:3F:3E:0D:2D:F4:52:67:5E:68:1D:57:15:13"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: mg.rp989.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bigebindonesia.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: c2emeD57FU8lUp0KVYUewg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 28 Aug 2026 14:16:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6387\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a323ef616944569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-12.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.173Z","timestamp":1787926597173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-12.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-19c5\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNr8coqt%2Bz%2BDlD0Mf2PirP4TfAAwwl6%2Faluu6hRI05BSY8KMJl8sbkjeucSfIsRm6w0WboDr7wSaokfnV37FAT6k9CkYilSlXoXm7LyVv1ipZdgXNLixY8mUbTL4CKdf7AwyS7E%3D\"}]}\r\ncf-ray: a323ef505fbf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6597,"size_decoded":7387,"mime_type":"image/png","magic":"PNG image data, 86 x 87, 8-bit/color RGBA, non-interlaced","md5":"f65bbf6247b64ab0aa4d192730f5bc62","sha1":"58f64d34c30d0efbe91b2ecfd6cd1d1eedefb592","sha256":"11812f741ae3c78eb8840fb986f6b2b65c8f580d2db6be4d58d40d0567b12e1e","sha512":"f3ec7c165a0845bb40fb39f3d3acf66a3aa1e8258f6f892f76e71db09783dd04bf60db6905d6a6042c32e6e133f3013a70442fd114fbfcadb9c8ffa0ff9c274b","ssdeep":"96:xknmWIHh/TsyNGjmGg37HuH5/M1WVSX2RzBFe5qVqS+nISx/e1MCx5hyncMGyC+/:xkn27O5M1BGR9Fv1a//C9yncFyC+xwi","tlshash":"32d17e01ff6d0db84a9f59a046d9e16a1b310bd48fc134967ccdc5230e216f9ce1d5d6","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.952122Z","times_seen":76,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/layui/css/layui.css?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.118Z","timestamp":1787926597118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/layui/css/layui.css?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Nov 2021 07:39:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61960328-1224e\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsyPX9%2Bh3hw%2FoLyW0DGXAxEq8pv33KId3RjFSmcUC%2FSCPgHkrDg%2FdQJwA%2FwbQ0cysCeYugkEaw3G1%2FJdsaL%2FnDPKlibui9gdlklB7GnX15JWK%2BHQjCSNEQN3P7NPHb0roLDrHIo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef4fff93712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74318,"size_decoded":17366,"mime_type":"text/css","magic":"ASCII text, with very long lines (65504)","md5":"6490be49e910a3e2ccac0cd63ac5be57","sha1":"bc1b9e3070e5e051a9132a27f9a5ac494d4ded1e","sha256":"4d891687db5cd12b3f5fb777a151efcdc0a94bae9e4231d719d0b3f7716f8f2b","sha512":"09083b4fd7802d880b94aa6fe674f8c5ec5b7fb63b550251fa2ae04b622d6164e1551998e4d7c8aaa152e303da70b9dce2c94747655a32b7000fbad8c11efc9b","ssdeep":"768:4/nEWwcY/8zYbRzycl81JpZlwyQaIYKsR3zdVhlu9Tr1BpRBtfKa6G6nr4wdV7np:tWwcY/8fG68wjHmavq8","tlshash":"59739632e6012ca5762bd215b1dcbdfda0789512ea634e6df3823b1b87848471077f6b","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.875495Z","times_seen":62,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/index/index.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.142Z","timestamp":1787926597142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/index/index.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 08:26:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125feaa-1211\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O4z7886g3K3qIb6nIFY3LsHEvb8tLLwBQo6IPM9oZdmdFeCUW3wBGlLCAi%2Bx8qXrsrRuPinVxNXPWkY6do7GW1D1PASnbCVIURW4O8TOTPuhNOIZ8vPZJ6r5FmXjZap%2BZKVY9o%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef502fa5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4625,"size_decoded":2492,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-28T14:17:30.929942Z","times_seen":56,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/imgn/Dark/notice.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.158Z","timestamp":1787926597158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/notice.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 19 Feb 2023 16:24:56 GMT\r\netag: \"63f24d58-21b\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73wxotfp77Nhp0VmcdvpyRtfjGR8kaH%2FJoyJxCuJrfAupRIEqTh2t76tt7MgUcX9P3gR9rglDhJcsZcxriRSn8D3szC%2BO7Nf8e1R4eyAxv9nocERWhEyQPwgoYnIongHEzJcCJc%3D\"}]}\r\ncf-ray: a323ef503faf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 539\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":539,"size_decoded":1323,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7891a0219f54f843fd5d8d8a33426825","sha1":"fcd8d245752e3c7c9ce5ab8cf1deb5e1aef29682","sha256":"660da6387b18b407a644cc8586b438d93d5843a3463442cb489c67543cd297b4","sha512":"818d564fe544d35dab7e644dbf67395690fbbb800b480935c20a3582e19b71fea357de54dc5bd4c724e6fc96485b1626b1ece0388e584c9c2aa748d5f9e1ae89","ssdeep":"","tlshash":"d9f075432548513697afa07feae336a1bf26373a7f01c4aabd44c1042f6f1664cd0b29","first_seen":"2025-02-26T18:00:22.730452Z","last_seen":"2026-08-28T14:17:30.893943Z","times_seen":49,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-2.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.162Z","timestamp":1787926597162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-2.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-17be\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjW8Xstr3SjqKEtVRL9tVe3oVqn8ns0Yy2nypNUw%2FG2XRIzHwELWpwJOp%2FC4SFIXqAytALukpWLfHp0UgTFL7IVcVUcJ0So%2B1cNeS4NZyam5gsQbqiClgQFuXzwVuolmWKQE0%2Fo%3D\"}]}\r\ncf-ray: a323ef504fb3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6078,"size_decoded":6868,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"8edb61a43ebbac5b1c00c183530722fe","sha1":"602712cb46dbce14c871f2ca1ebd29acf6136368","sha256":"b53157f804ec5e41faf0213dfcf9f05a00d55ec3390266848735d3e62275829c","sha512":"2edb5e4f1ac0068c4225b411d622a9c06162cfa2db87e6658df5b4cb14bc4670a6f64537d25471c27295a05549b89f9c3d5d688738591fd26989506019e6fb78","ssdeep":"96:MknmWIHF/KENGWGMHOzH5ogs4rpHggsBRC70n4wj7isQwtJDvv1Wm1VKUi8s528l:MknEj4+X2bsBsANjmsTDVnbfM5Gy3","tlshash":"cfc15c56d8b059751215e6592add30227f3603c08751ea84ecfedc7ab6600bd9dbcdc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.842024Z","times_seen":259,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/guanyu.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.167Z","timestamp":1787926597167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/guanyu.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-cd2\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1beCgP4PCIVLYtAXPOiqXenyvo%2BLmrK9cqIZRwe9WPCk3pJR2WFdpRcTAcLyV69QYgIIhaM0nE0oObBmEXX8FxBkc4o0vi3m7T5BMnrK0FrbI9fDw4SeOM9dd6gA0rG6QV%2FtFA%3D\"}]}\r\ncf-ray: a323ef504fb8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282,"size_decoded":4067,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"dd80f60b6da54d9b573e9c6101908ec2","sha1":"fa68479c6120b767c2cd9d2b7bd25bbae9161284","sha256":"64a9e32b694ae63e9133c8236965cbd93c1636ae39da24fc7c06c9e05503db2a","sha512":"975086f3f6ecc0f87b036e1ea9ad3a9d32de56302491668d1393a1c2de536af73233c00f2f330ab20a1950b5a3594965e9fc8e962bbaf24576713c26fdf91ad3","ssdeep":"","tlshash":"2b614bc8ec30a4618688ad81aded435b5d1f0184abc0ac51bcebda121d30af7818c5d6","first_seen":"2023-07-02T09:39:23Z","last_seen":"2026-08-28T14:17:30.843818Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-14.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.171Z","timestamp":1787926597171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-14.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-b32\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWPlY%2F1GoHEdKBT%2BC7CY%2BswR%2BtlTvRkv4uDKmH8TGqqTk7WiPxhmndzHcAfgv4adpuLNoetyAVRR30lOcFVmCRyHwixgUr9M%2BWQYIku%2FF3swAj9Ljn3xnbGkoIiX4KsqJEUm1wc%3D\"}]}\r\ncf-ray: a323ef504fbc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2866,"size_decoded":3659,"mime_type":"image/png","magic":"PNG image data, 73 x 68, 8-bit/color RGBA, non-interlaced","md5":"4995ca21a0ade71688096c4fa4a63950","sha1":"9d19ed16847bbfcbe9072c9c1976e50e563f6250","sha256":"626c8f05fbac681a11b10bb17af81a041010c906bbb6dfefe995a040e67d63a5","sha512":"0359bdc6189af8993a908b48a12488833517af660514bd30984b9d5381e388ce1e68d3957badc5534d1977a61adb54814be72158fffc48a641fb850bb47715ff","ssdeep":"","tlshash":"4b513b3eb7ea845ebb48cc31224a93c9fce01e552e06b50e2117ae133751916d0b6503","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.915336Z","times_seen":68,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/nav-4.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.183Z","timestamp":1787926597183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/nav-4.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-49b\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIXOx%2BCmwHadVhsB%2FxfIPRH9ff3v%2BV14GmyK2FZB3IhZVcSlCcT%2Fru3DIpxFZNeKp5vQIhDuhhBtv8xq0r%2F4sUz2A22B41HF1JCAIuB1M1hxDRfn6kDUOKwrB8xsLgjmgDb%2F18I%3D\"}]}\r\ncf-ray: a323ef506fc9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1179\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1179,"size_decoded":1972,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"3b9bd6a518d868bfdf6bc671def3327d","sha1":"0002af2d238c42d44f95ffdecc0ee1957ead1e8e","sha256":"ba5a50079d685b02f29d59f5f4d16331b8c29fa2aff5eed2ffb116d1dfe572b4","sha512":"a17dc0cecdae39b67412c192887ed80d8295ed87c71d29227b916b4f7a0aa9f382677d226091e185b3a503cc5f57140c38277191a84ac2135efd6eaa085c2ab8","ssdeep":"","tlshash":"f021d7efb1c21012c729e2be1c0e9779b62da302a7b8444225c5f892fd890c33354f4e","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.838266Z","times_seen":220,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.125Z","timestamp":1787926597125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-15851\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIFrg0aIURmpyy0fbQ7c2OVv5TBE%2B02BxuUuwUQlmcjrmbn7M%2FI%2B84r1krWATEzgOB8lkhphEGS3DOSRiRtlHZBybaGbq9u5ogb1soeG63LqvjUIxcyOBRhmttdGRLJZBy20WHQ%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f99712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":35288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-29T19:16:23.344499Z","times_seen":140026,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-3.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.169Z","timestamp":1787926597169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-3.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-f02\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbROzX66FPKPmwNQxuRQZjmKfjGiuBJ0%2FN%2FC4sI34pbrBwF1JbS8iBIYjHFCYvxND6jET51%2BgM1OrExCv0T5oB49x2WUGuSiPps%2BgkZJ4jB0gXVWjsDstZFuvwZXgRNoSit69gw%3D\"}]}\r\ncf-ray: a323ef504fbb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3842,"size_decoded":4631,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"af1e80bff113a7687e542d4fca416239","sha1":"83ce6e6d1881f6fa0d2a64873cde529d2fc14055","sha256":"dc41ff7881c27712a7a16d402346b6af5d3de0eda8b78b07a5a537df095393a0","sha512":"cce7ce1bf1894630112a56ba27699ea9a63c436e552cd4b5f052b7d8f40370a6833a37a4ac2ac34e776cf941d3337c831929b7c41be9fa436a1329e2858b57e2","ssdeep":"","tlshash":"29814c89f1c2a81121469c84eae6d1b72b3757e086e0e4a5dcdbc42bd8745fcc8de9d3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.945659Z","times_seen":207,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.232Z","timestamp":1787926598232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-3859\"\r\nexpires: Sat, 29 Aug 2026 02:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEHiiZgyTF4LZvpFk6z2j1oiaYo8FSP0wqiGSntnBYWMvVMem4HbPK92u%2FnrcKQYLzifsmkUkIf0tlSbDWn1aPy2OZtD54oLtb18qTh24BuSBfrhjtMDiyV3zIad7Rmp9qhuWfc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef56f829712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14425,"size_decoded":4058,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368)","md5":"cdf467c11d77287b09cec22297aa06b2","sha1":"57e147ee3cf8a1ea2194bdfbad5e69083fa578bd","sha256":"ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b","sha512":"9c24a7c4d5d151652e246375c42f4ef2eb29a33dd9b4bad8c19ac2dd52086db91988d0f87c5d547f377499649f02e6ac4dbe4ee7a06d8a65cb2b445482104ab5","ssdeep":"96:Jp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:KWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"f55231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6647","first_seen":"2023-04-16T09:58:27Z","last_seen":"2026-08-28T14:17:30.854817Z","times_seen":630,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.234Z","timestamp":1787926598234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/element.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1c60\"\r\nexpires: Sat, 29 Aug 2026 02:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLIM5a83ui7k9jmCScp%2B8dbbqbdGMfyjInw%2FytHO02wrbYzIvbh1RwAtPIwW8DihHdR7avuItCbzHYga%2B4nwXkyKV2E5XNbZMo5H3TIaZ51gKYEpg3lxhiPDfXllyqkCk%2FUBK%2BY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef56f82a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7264,"size_decoded":3563,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7203)","md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-28T14:17:30.831602Z","times_seen":300,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/nav-5.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.184Z","timestamp":1787926597184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/nav-5.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-2fa\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FISH4t18sA6eMvYfvwGfjs%2FiPpXoyR6gC0GOrm%2BFwIty1oCuK61DYliQ4oZSlG9oed17vcIPx18MQWCY5HJw9swqqolTIOyDw2ncijkXVlp9mkRRBh%2FIBPygdBTtKPJGTYsqTVY%3D\"}]}\r\ncf-ray: a323ef506fca712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762,"size_decoded":1550,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"214aee318b1921c9d0a518e7236f6798","sha1":"80344471faf6fbd958fa82f20128e004b71845f3","sha256":"f4d884cc4ffdaeed56d30b53ce28453c401a187591cc6ed20700b98e5e9fcbd9","sha512":"f8316fa75057752ff636710dd30eca9b9c360bcfa1a28e1fd0659b4da48d530f13e81afb14f28a38f941f0aaca142b04afdbad0052a7621835c7904c3a10af5a","ssdeep":"","tlshash":"6601b54d4520e4699a3612a3b87ac2f10c1eb01462b79dde8532e31f3432704f0842c3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.839281Z","times_seen":275,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/websocket.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.144Z","timestamp":1787926597144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/websocket.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Mar 2025 17:28:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c5e6d2-4029\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lPg2vt60QgMb4V%2FMsu1O7z39kdGlQCxQlMojtYUrIAC03ZKniLxru2oFc3pK350Y74auhfeGc8TsxKK5TVFJQ4ZhbUmBjD6RncoR2cAz5eeZbDz6M0rfA7V5uLDh55n6MxEa0U%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef502fa6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16425,"size_decoded":5378,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bd143f09d154c1c9ca348c559d53ee80","sha1":"34860721cf753765b16fe526cd7a5618326a3b1a","sha256":"83938f0bdc966fd9a7b7ec3d757eccd7d990a7ae12bef7406e528e9c22a9015b","sha512":"5733bbd345d8fafe9cd76e218d9adba741106fd630aa8be303f0e2d0091f3ab83cf1a63eecbcfc6b92c09d7a94eec161bdb2e4f5dcb53068d30b818598737735","ssdeep":"192:EHjrXg7hWXwiQRdUFUMeajJiMF0Cl3Loa5fFwy4HrwIIgUdjAN:EDrQ0XRQLM1iMF0Cl3LoaILEWNN","tlshash":"167252a0fbac151f50f6102d84ac55c86bdc8571c7a849e7babca6d00748f1e146bdbf","first_seen":"2025-10-15T23:11:00.714426Z","last_seen":"2026-08-28T14:17:30.883186Z","times_seen":5,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/css/mobile.css?v=178792659621","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.121Z","timestamp":1787926597121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/css/mobile.css?v=178792659621 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Dec 2025 13:30:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6947f663-109d7\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cbsIz24%2B7rVSCvi%2B1iQrqnwCcLyqWgyEBAC0IBhGCSZ%2FmiUHPXRYK3wLVQbailKi47DlgHHLAaozZkuGjFl7Ol0Xj%2BIZ9QxbflAQkaFNcgisgFq7ffMl0vi0%2B4HSqdPCE0zisA%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f95712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68055,"size_decoded":18918,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (2654)","md5":"4aa9e500fa8a7b0299986407d3b3418c","sha1":"8055cd48c91b0dfae22407f93d6e798ac0ce4612","sha256":"fea9628dfd9a77299ed7115e4c9f078022fbdf46ed3ee48a2b23fa0edaa11a95","sha512":"3e1cab8920d1b4a877ec28a6e884fc8deaf5af0fdc2c8c96cfcdcad4c2765bc569f2ecefdaee7b3a2913d42ffa64c1628e3a841afb82a4544cdb448e7dbf9664","ssdeep":"1536:mTCAWq81brdQdGtGDdRkBWAnSvyHQrYH++t90am+FOP:GCAY1XdrtG/Hywr2++t90Ak","tlshash":"f5639827a7631c06b01bd4546f6d7ba6632c8413910fdaf97ac5726c8fc29d184f2b4e","first_seen":"2026-08-28T14:01:08.250766Z","last_seen":"2026-08-28T14:17:30.9619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/lang/id-id.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.127Z","timestamp":1787926597127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/lang/id-id.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMZ5jY0OpRlfJNTeLg0wXgzncZS%2FnEV%2F%2FVRsOo6%2BzuSyw9RBykRXAk6X%2BLuBpGTzswFzBz3x6Nva1o8Tkm4cwl3Q2RFyKVjENqo4NMhdixgwj4%2FRrE0ABD61Vvz1dwvIkuMkVJc%3D\"}]}\r\nlast-modified: Sun, 02 Mar 2025 13:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"67c458c5-359\"\r\ncf-ray: a323ef500f9b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":857,"size_decoded":1315,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"b0830794652be840903e66f12655f586","sha1":"be262a53a29ed6bbc60caf662a5c4a320bdcae1b","sha256":"27829e29d238cd1570fa53dfa3ee87f38d820b7d2263dc77e9db659aa5b6cceb","sha512":"1afafc034d6c4c03ba9b1dc23f630ca44d571f16348d5d47a7b31382bddac2ad5aa266bff9ffd43fd263555a4a53e7aa69d66103957b82a41af07bc1ee16eb96","ssdeep":"","tlshash":"1411f6545b09a40da51126af17e401c9e5ed40770627760c77b7a981df3fd1f40ed60f","first_seen":"2026-08-28T14:01:08.267489Z","last_seen":"2026-08-28T14:17:30.840183Z","times_seen":4,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:36.008Z","timestamp":1787926596008,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /mobile HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:36 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7KHveiYWUdxfQ%2F4LfEdip7l3e%2BPuxzZWCnECoz%2FJ0Z%2FeFP3oB6wocwiWuOEkbs2Kt2b7MTJ%2Bm9P54cZdhXn9wRuXRhpuXqAXy9z%2Bg%2BcExuCbYlxovfDuMIUT2C%2F6SoQ2khgRpY%3D\"}]}\r\nlocation: https://bigebindonesia.com/mobile/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a323ef490f0e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/layer_mobile/need/layer.css","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.130Z","timestamp":1787926597130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/need/layer.css HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Aug 2016 09:35:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57c00d68-148c\"\r\nexpires: Sat, 29 Aug 2026 02:03:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 768\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia%2BfNHzndmV7mxdwt1w%2FTR3hGuEWKNzIHqwemTD5EUY2TrICRq9EhM%2FJzKAuS1dzt%2F0JtmVhrObamZ%2Blg%2FMmjBfV2k3eGUEf68P9UAEz34KOfrR8jXRoBmJtlL4EqajQKveForo%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f9d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5260,"size_decoded":2227,"mime_type":"text/css","magic":"ASCII text, with very long lines (5260), with no line terminators","md5":"633915e62d14a714594b95b974ee0836","sha1":"e11ebb64a70272c4f35b92fea064f27c4b87efad","sha256":"eecc7effcae5f246e6212c30c525cee9e11cadedc7d32aa6def213f1a90d98f6","sha512":"3a0f469c32521c0fe51838b099650f055410cbdabf64659856e009c8d5e1f3a32fed568832282a92892f1398c8557fe1f64a6a34881f711ecd55b41b054d243a","ssdeep":"96:tJA7fs72Cyf26B6ZtbXBh+Bcw0iZRfcSNHIFSf:J72b5YZtbXucwlrESNoa","tlshash":"9cb1c796989303e8b027c51796dc5efe70388d43915209aef157382fc74bdd9b1b260b","first_seen":"2023-04-07T00:16:00Z","last_seen":"2026-08-28T14:17:30.950185Z","times_seen":5136,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/iosapp.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.139Z","timestamp":1787926597139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/iosapp.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Nov 2021 13:32:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61950462-806\"\r\nexpires: Sat, 29 Aug 2026 02:03:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 768\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh63ulyC7Y78lhVBnP7MCFANrGIekXvGTvkYqETa%2FJTkwrDJVR%2BCA8Sry19xfHvYI8axyvVdYh6O%2Fa%2B%2FXGBhdLuEA0cZjn9l%2FlRg5ksR7t%2FPfDEJvNpNqTpLCTCK4zY3H3VGiUw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef501fa2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2054,"size_decoded":1704,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CR line terminators","md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.925679Z","times_seen":62,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/index/images/id.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.156Z","timestamp":1787926597156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/index/images/id.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 02 Mar 2025 09:39:08 GMT\r\netag: \"67c4273c-102\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1486e3HKo78EuEieatFWLItex7dKNqZ6xJUhK5%2F%2FyZutwyP%2FRInYyx4RgfaOKcf9RTjqCgKfDxiIDATtWbwDzR7hmjUEHrKYNkjh09gqkqPd3mZ8LyB3%2BbAAqt2j5wuHw4YtH0A%3D\"}]}\r\ncf-ray: a323ef503fac712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":1046,"mime_type":"image/png","magic":"PNG image data, 260 x 173, 8-bit colormap, non-interlaced","md5":"4976b5b7690d619b3d346985732df90d","sha1":"25cbc137b24cf53b466c2d7a3f30c7bc67ac292d","sha256":"6e12dc6a059c2fa1946743f8b9cd9d163c375d9f9c4ade85c13bf81d5a332e49","sha512":"6bd8cb9c8698c4fa0dfdf53116682c4a4877a448bc83d3bca5df8344e525808f1d135ee010fb1736f1483794835aa3681c16f80273b72feadc995f0a3905b1b1","ssdeep":"","tlshash":"f5d09bf5775d5cb4cb570473c29501d0ab1951540755dd3b404df479b15616270865d1","first_seen":"2025-03-17T02:34:15.662028Z","last_seen":"2026-08-28T14:17:30.869987Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-9.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.159Z","timestamp":1787926597159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-9.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-1016\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Evvfo2O8rdukeycw6Ubcz94hFf1ji2ysUrLZUdLH6IEICFRDtrZif4%2BJUcoMs0uoPk3UlHMhQxyh5dkBfR5gA%2FSATRhUH4EEke9U34xXG65K88Hwmy8Gb0nU5Pl%2FNSJxryLBog%3D\"}]}\r\ncf-ray: a323ef503fb1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4118,"size_decoded":4906,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"96c006351f3bb1ed5a7236df6973d412","sha1":"21e63fd42a6940bbdf4caa8c84080df20716e4dd","sha256":"964df4170b2a82ff0a89d2f8cbd51da5c5ec91058609cf4b067413e182a90ee7","sha512":"fbff1d8e41b9d90a5de270acc44574c0f71acebd75991fc227c10082f4aec543e9c6206d36f9083f0f07405d287685e0448b0e378a37c3601f9dd7c5fca9e3f2","ssdeep":"96:PSTknmWIrD/+NGdGDHCnH5o+U3PfNdIhD1xHQbJDY0bIIzFiEtNg:PSTkn5HinO+UffuDHQBY0bfzUMg","tlshash":"5a815ecee4722e0b4ad9e3865ad562b7a7128b419f949402fccc8c473820479cdcd6e3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.848351Z","times_seen":101,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/card.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.165Z","timestamp":1787926597165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/card.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-cda\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Utf8SuBVjvJMlV%2Bkq8jaasJc5iN4Ca31tvMCbZ7GWrqtocp%2B%2B%2B469xE%2BK7KmtaN5D0gOH5aeb4s%2FY4j%2BIcQNyScJSJx8Idn89wd%2FgqeY9Ysiw11fd10mI4ghjNlLI2iM4UbuusM%3D\"}]}\r\ncf-ray: a323ef504fb6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":4087,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9a54e187f7e754c5ec818ef7617de1b7","sha1":"a7c6322cc6da0b08ef31fad2a910374b6b48513e","sha256":"c04b8e8d9075edb320d501396bf4987585144b9ec6ffa239a5bc9ee78d27e127","sha512":"00112f8689e5d203b695b1c0206a482a1e4ab07faa2bde82a065a41e8ae71fc91f662cba0fd6bb8d073f848c44b856d0c48d1a3baac315b1183b13b47af6b0d3","ssdeep":"","tlshash":"d861b74aed626d025706ee46edca90130b2f06d0d6829581fcdadd036d615b8cc9eec3","first_seen":"2025-10-15T23:11:01.373313Z","last_seen":"2026-08-28T14:17:30.842929Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-icon-6.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.176Z","timestamp":1787926597176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-icon-6.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:23:05 GMT\r\netag: \"6777d6a9-aba\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcII3pf1GfeyjoaE1%2FsqY9Lz85inotEJ4x0qNlf75fJsNr5nJWcCzoCd7ItK0NdZiLWFIxjvk5ALBnrWz8mbDf%2FzWHlNF4C5ep%2B%2FLZn2tATEQ8%2BuQp5k46NrCmEClf2ypII1UYw%3D\"}]}\r\ncf-ray: a323ef505fc1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":3537,"mime_type":"image/png","magic":"PNG image data, 81 x 59, 8-bit/color RGBA, non-interlaced","md5":"425470dd8a1e29c0f15eff66021ddb09","sha1":"6b6d04f134dbe6802d250058a232e7411b306916","sha256":"059f4c1b20b74cef836207419e99301aeedc4784a90aca388a0ee21ab5bc2a87","sha512":"31faab5ead30a5b61f9767379916f61b28ff3ad796840ec1f58894b1cad851e1121ab1b8474342b48c7ce8bfcb04fba47f84e892a4ef92709ab6252755fbcb0f","ssdeep":"","tlshash":"d2512aae32e6eb0ef2994103e4bf3143d2a34a441125ba8c84e43cee07842b3a995131","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.849215Z","times_seen":177,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home.jpg","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.177Z","timestamp":1787926597177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home.jpg HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 15:20:43 GMT\r\netag: \"6a6cbd4b-9920\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POYXnKVsmv4rprW7L4HdhD2A6HX5RgiCjwIQRUoAPcG4JYPBMnvnBRYqA%2F79Yh8%2FBwEU2scmSFwtg4eEzXQueqHN%2FIGyU%2Bo456ER8p9fN%2BTv1FSN%2FzvXYIXOsgxszZ5%2F9z9Zvxo%3D\"}]}\r\ncf-ray: a323ef505fc3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39200,"size_decoded":39998,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 666x407, components 3","md5":"ee30e7d4b1890c30c38a89772ddb4754","sha1":"ce165489e44c42fa179fbe6525c95c194c0abd83","sha256":"1b3e9ae2a850cbd88e2fb5896aeb4116c706937a8712d6c3f77868e9e11c4af6","sha512":"e5e4b7d065c96833c11497bbe7b9f390440f19e96ed363440121ceb640e07b289991c830fda61a4dddb47c3f226986272394d7a0d94f1e359e1018615d5648e4","ssdeep":"768:CaEIYV2y+60njWbhy9J7OQq/QvpDcEHXvpjKYjcRPHGtPkr003E:LE/V2yTcUe7OZ/w17uYjcRPHCg0OE","tlshash":"0103f1862f751633cf96b33490eb86a7c543627ba2d52279750d8fc99ace702863930c","first_seen":"2026-08-28T14:01:08.25246Z","last_seen":"2026-08-28T14:17:30.87191Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/nav-1-active.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.180Z","timestamp":1787926597180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/nav-1-active.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-700\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxxuwF%2FObSvToKkgbOfDj0MslRARg6v2YX9xLGGYbpzJq0yBazJaDXFKi3WpOsJ6tdxcYiIP4jMB58yP%2BmWEooiUc1vUKVF8C9e5bDFy58SFwvD62vRxk%2BTmhy7H6WSeePB4A3E%3D\"}]}\r\ncf-ray: a323ef505fc6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1792,"size_decoded":2579,"mime_type":"image/png","magic":"PNG image data, 39 x 43, 8-bit/color RGBA, non-interlaced","md5":"6e2baf8ad92bb13eccce1b784be6f4de","sha1":"56195bc729f562359e7a5de5d0db813017971b68","sha256":"155295d2342170ff1b32d8bf029e9b1cd79ab884b6014fef2bc2990bf57cb44d","sha512":"ec2ecc8a420b474996700a8f7177985e1d512ede1d5fda6285ac995175c51899c90014654e5b440cfe83006d87d087f4783a729bf462be683b2936ec3ee504a5","ssdeep":"","tlshash":"39312bdb974664088db27c5113441d4c1f290b666ef7ae0c14c4f8cf31be0ca5624a38","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.91962Z","times_seen":268,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.123Z","timestamp":1787926597123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Aug 2021 08:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbe-7918\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpwtNyKYUG%2BMhuFDBBBuplT7BIEe4CxAdjuTplHZ4GAZYBBwUPJfcB4DcoHW07m9GyHu3ipEZpX%2B8tfEbahWgx8a8YYeX5P18LwknoWwCgnVIyU9sOefqomz2ykpwxDoOpp4pv0%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef500f97712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":8589,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-29T19:22:29.036212Z","times_seen":312512,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/i5scroll.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.145Z","timestamp":1787926597145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/i5scroll.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 06:40:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125e5d2-6f3\"\r\nexpires: Sat, 29 Aug 2026 02:03:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 768\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9LRL%2F09GDNYxdUdC3hRQ4DrMZIt7taO9RZmBriopwR9xhemKvIzsCeWJb61Q1PxKmyD2t%2FS%2BPLjue62EPBo%2Fy6%2BtmWkIs8QaIlnEBM%2FiRuEb%2FLmWDIaju1HGQwcu4A3lK6Marc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef502fa7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1779,"size_decoded":1758,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (762)","md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-28T14:17:30.853136Z","times_seen":56,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/imgn/Dark/topuser.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.149Z","timestamp":1787926597149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/topuser.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Mar 2023 06:21:50 GMT\r\netag: \"64097afe-54e\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FauHHdUEHqkfCKQJL3D7D3LYCe6D08H68mkVTNbyaMqAaQbwAtGeIPGcXvThENpDZhYNoKnb%2BC%2FsmKCdLpFRji98gH6X7dmWPMu0cE8tXmyRYpn%2BVflAPlH6fwIp1QVU1%2BSXcg%3D\"}]}\r\ncf-ray: a323ef502fa9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1358,"size_decoded":2147,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced","md5":"798ee5b7c48089f973d2334698f394c3","sha1":"e33c49825cb86f1454b47790559731f1a4dacc5f","sha256":"76a3cebb81c441ab872f0649c21e064e0ceb32dad5a6500b9ec8342b5fdf3bbf","sha512":"adcf452d696b6ee76422020052a7c1ffd7b15914e292afc32c2fee0cbee6c438ec69936cd990bc7efabba6f5e5d8997e9dab66ed9faf894c0e5c71dd2be40546","ssdeep":"","tlshash":"5621834ce9c1a981446a658778e76023991a4c40a6e0e09b6cfbc0af08914f4d56b89f","first_seen":"2025-02-26T18:00:22.732774Z","last_seen":"2026-08-28T14:17:30.837428Z","times_seen":49,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/index/images/en.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.155Z","timestamp":1787926597155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/index/images/en.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-740\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaGapySLip3kJSvs8JkiGKFabyBMcwxBGv9RtpXE8NoJkcIDeT30mUuaqwlP3zEqM1kwch%2B1L74ipFib97e%2BNUFeuZR1Ff4sfMGYRB9uDuE%2FwIOSSf4HZ%2FxctIGtukYPxm5IIK4%3D\"}]}\r\ncf-ray: a323ef503fab712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1856,"size_decoded":2647,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e8aa640b1d129c94e299dfd580f210","sha1":"ccfa030c16120a11d224fa1ba72afd55f0776523","sha256":"7385aee2de7d89a525b33e6ff1e8c1246de9234fcc7346f5877ee7d3301f8ca1","sha512":"6ca9e3f44d4ce8a0f7734c8f814138fe54c3224f08905a6e0634f36f1c4de6ecef43281df8a7b29f473300a1096565b148ced5e51fb23b050457c63714af11c3","ssdeep":"","tlshash":"e4311bb469a26052fa5e2ad4be1045df4ef89c0605d89251e60645e13c9eef19f0c437","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-28T14:17:30.936125Z","times_seen":473,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-bg.png?t=46","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.116Z","timestamp":1787926598116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-bg.png?t=46 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/static/mobile/css/mobile.css?v=178792659621\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 21 Dec 2025 13:29:43 GMT\r\netag: \"6947f647-118af\"\r\nexpires: Sun, 27 Sep 2026 14:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJnGTqp0iGGC0Fz41UqQ2%2Fpr8E%2FedCXH%2FCDkFBemrAydu2pFQw8vEzkfpu1Yqh24I3mNZqAMi%2BDGYMvxMJrWsKGdr6%2F6jXlIpzBmkJBcpctVFBfmd10x3PST8Yykmrhw72%2BLSWQ%3D\"}]}\r\ncf-ray: a323ef563819712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71855\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71855,"size_decoded":72651,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 750x400, components 3","md5":"a0a85ce08ea4727b4b2041eee846993f","sha1":"899c76ae54968c4e219be51ffca0b7d4cd308556","sha256":"49ca173a012d4aba099242cfdc0e8c69099c1b22d7ed5ccf38dc8c451df75344","sha512":"8133e73b1d4eeed47e6825be59dc3a57d2f9efa0f81ea81e00600ee1c9c044906dea457a745d598e05721c7666a1c7c8d4e09386ab98428a71890182afcaf229","ssdeep":"1536:NpNauITNH78MT2dxLWy360MejR4IAaakZWxyc8z1amdAb+y75:TNauwo5dxi50MlIAlkOycu1AbD","tlshash":"bc63128373b7d4bbc4e6483c34ed9a97870c770b51a2fab93a71d0e96927256dd88081","first_seen":"2026-08-28T14:01:08.294931Z","last_seen":"2026-08-28T14:17:30.847389Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/layui/font/iconfont.woff2?v=256","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.139Z","timestamp":1787926598139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/layui/font/iconfont.woff2?v=256 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/static/mobile/layui/css/layui.css?v=1787926596\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\netag: \"611b6cbc-656c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FpUY3ge%2BCkg7y5G4zYkkaTUT%2Fx5yOp3yjNwnKV4Za7%2B3RM9T67xF7N9Fcr%2BpQvy0yFSjJCbGe4mvdDN%2BF2yIW3M76XvcFNs1%2FNHR%2B1w970S4qTjSwxzEEeScY9miDl5MGb3VcU%3D\"}]}\r\ncf-ray: a323ef565820712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25964,"size_decoded":26725,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 1.0","md5":"d8c214c89e33a7bea93d656bd865e869","sha1":"c188dbfc6951b7c305940ac3a279227aeb5617f4","sha256":"bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09","sha512":"0e5897c1b874a714fbab221e97717c5bd8b6c525b539a24eca76391206f931abf5cad2441743c441239ca2830f3fb33c34d207e13ee4d1eb3eeba806763f8405","ssdeep":"768:4kZIXl8feK5HavVh7VQB+l9yDbzKu1eNxECo:4kZIV8fqxQB+l03zdeNq3","tlshash":"fbc2e1c340bb8ab8b077783c6a9e96b9d51134261dde919427cc096043feb49eace701","first_seen":"2023-04-14T13:17:16Z","last_seen":"2026-08-28T23:24:10.959065Z","times_seen":1068,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/index/d3.v4.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.140Z","timestamp":1787926597140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/index/d3.v4.min.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-36305\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6NVc4Csk%2F%2BVlxbwWsmPTm75Dff6crfI%2FJilpfTVkyN%2B3FHSWSaoyZmANnPJRY%2BeHBMFXfQ8RxHc%2FAwBGvUPka%2FkcfG%2FSoF2GKw4gi8Tphhf%2Bkzoq8MAZPiMdlIK7awa18ICRvU%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef502fa3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221957,"size_decoded":83277,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-29T08:53:34.638441Z","times_seen":467,"resource_available":true,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/share.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.163Z","timestamp":1787926597163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/share.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-e53\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 769\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jM5cDJa%2B%2BinhQjGqcs0pegqUv0Kryb%2BY%2BuPol3uoMmwOqUTsTrdaIyPR%2FGgQdhI9z6tqK2SBvTwt4RAFSKigNBtS%2FMg%2BaEbm%2FLGdIuSiNGYOMMXp%2Bjdhm45%2F5qkh7Jg1B%2BlVMsk%3D\"}]}\r\ncf-ray: a323ef504fb4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3667,"size_decoded":4470,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"965ff25db2eeb355ac574f9f405398c1","sha1":"ca3d541851b92522f57d9f5779fafedb1e4a0fbb","sha256":"346419f3706f3a5a8e203d257c798d41e5ae13803fddc740fc1f9482a47babcd","sha512":"95a60dcca0181286ba95c5aac9f3d2a0753a5911617e4f35105f2da7c4a6e5e1d587cff98e8a44b93e7767881e986f6ac38a0d98917355a1df599d3a25c7a330","ssdeep":"","tlshash":"65711a44ea85bc032ed6fe8857fe61020a3b89809680c551dccad8179d715eddd5d8c7","first_seen":"2023-07-02T09:39:23Z","last_seen":"2026-08-28T14:17:30.833582Z","times_seen":7,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/nav-3.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.182Z","timestamp":1787926597182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/nav-3.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-4d0\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPQMoYcUGfbd%2B2TeGjeu2eN%2FMkD3jlDkfZ2jgXiYCkPVbjAmhJnM6GKczCA8RjQf3kg3Gid%2B0cCDkf%2BacTKsIusuIvVIV00cYdgJskRTVADuZtdVmDnXlYEU4VD9bxaZWEeOG9I%3D\"}]}\r\ncf-ray: a323ef506fc8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":2021,"mime_type":"image/png","magic":"PNG image data, 44 x 45, 8-bit/color RGBA, non-interlaced","md5":"fd57dd6dbb1f72619420449aafe1d852","sha1":"bb99e3ba6404a1c00482576775530a0bcbf1d254","sha256":"67989dd943d26961cb26b505d15c64cb24c3ed0aacb607d32ef5d864ec1af3ef","sha512":"dbf4768c4a3c8eb9b84cf98a6086eb518d4c6cd56b57848466b8eb600191eb08c4086f19de41e62d9566ea7ba0fdf857b405108649fce438320f6f8371539181","ssdeep":"","tlshash":"f821b4d98b6c15e3c8e40c8fc53cac1b822ab45a189e2f0a46b999a70453319cf5d280","first_seen":"2023-05-20T12:09:28Z","last_seen":"2026-08-28T14:17:30.850089Z","times_seen":270,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/imgn/table-bg.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.114Z","timestamp":1787926598114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/imgn/table-bg.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/static/mobile/css/mobile.css?v=178792659621\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsPK3iS4RglfE4AqkJAJ7zlvCp5fpSOwkvp28xwXQ2KZadGtbq7s2FbY6aQOl5tUUkjkg9cilI%2FYFFKlTJdu6J0ugnKO5%2FV9UWihlVD0KAmQgJYZayIJxY13Py3b%2BgeE291IAJI%3D\"}]}\r\ncf-ray: a323ef563816712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":710,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-29T19:09:06.068057Z","times_seen":555088,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/fonts/DIN-Regular.ttf","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.138Z","timestamp":1787926598138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/fonts/DIN-Regular.ttf HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/static/mobile/css/mobile.css?v=178792659621\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 13:25:31 GMT\r\netag: \"6777e54b-6064\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ac6aHElcdb7gkE5N%2Bk%2FHJS8PW7GRsLoip41Ufc2he3hskm8VesnkkYTzDS1BVC6umEaMCHNQ%2Fl4dIqa0DR7HQM7L%2FwNYJHdkFn15s329vTaawjJiHoJhsnj%2FK%2FSE4orfE0AcomE%3D\"}]}\r\ncf-ray: a323ef56581f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24676,"size_decoded":25447,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-08-28T14:17:30.83657Z","times_seen":561,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.512Z","timestamp":1787926598512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/carousel.js HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-f16\"\r\nexpires: Sat, 29 Aug 2026 02:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuxaFeaXry9asMS9GLYknECjKC3B%2BEV1VoZ3iin443tkvUKc5umt%2BXOLH8XLDG7yd4ma2joaoEnbFqmASNrk7IOVpLIsD8GZR%2BLveC05u%2Fl84l4ge6AF%2BqRXCh%2Fk2TSKIoDlV2s%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef58b851712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3862,"size_decoded":2294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3805)","md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-28T14:17:30.953888Z","times_seen":98,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:35.316Z","timestamp":1787926595316,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: /mobile\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHh4zKF%2FnsdtNNrV6WM0ZtJtC%2BISdE7HHz6cXbBIGaDxUwRoALqNb9RZHrpP%2Bf%2F1k%2BlBZHb%2FAlILrEd4N1hrOY9d32aCWS%2BJA6z1f73IlBlblZ293DTrpnnlYe8W7f9CioZ0tZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a323ef44feee712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home.gif","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.178Z","timestamp":1787926597178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home.gif HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 15:27:10 GMT\r\netag: \"6a6cbece-870be0\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BX10KgygB%2Fq3cew8BF01XBvlWFqcU27l5Z3CGO71Qy60I9s7CJQtg%2BpqPNkMkkulc2cpZhfv5T3AoKP%2BIUfS2XtyJm5ZSLzTPuEGTN1l9aFhnY97ZF0CysxBEA1w8qMKEj4eSfw%3D\"}]}\r\ncf-ray: a323ef505fc4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8850400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8850400,"size_decoded":8851195,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 540","md5":"5ae90424f39f247b122233748bfd5e4b","sha1":"8304eb26eef8d434fb140094d3f809b87dff2386","sha256":"7f10d3a9acab6f1dc65184eb6b624f888c970c040bd25057b140cdd0ed947dfb","sha512":"4abc6b3bb4313c3d6736155424a8f195aaa1b202bdf56d6130066b4e21f11951c09bcbf683d5af65ae8256635942391b67cbedfe2142f83bad515a71aa8d7a61","ssdeep":"24576:r7OsVIfadntgSPu5i4T74B46oqAk8Vd+Dg8nUF18CiKCzlSxggR0:rjVISdPutnyDg8nwf/CzwSgm","tlshash":"0c25233bd7a4d1914e3317ac8efc49236f533cb93a091a307832195774bc9a598b1eb9","first_seen":"2026-08-28T14:01:08.25561Z","last_seen":"2026-08-28T14:17:30.845083Z","times_seen":4,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-08-28","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"bigebindonesia.com/static/mobile/img/home.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/clipboard.min.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.138Z","timestamp":1787926597138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/clipboard.min.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-2780\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQY3lTK9iaUsK%2FPWz%2Bp7mtl40nKtAFWT0AFj5Ru8k4n1JgxFEwZ9TJahzWFJbGK6bk7v%2F%2BhFCYKBvjV3bHO%2BuipZvuxxIpPJ59wHqa9sy3w%2F2%2BfibSgRG1QT5EwhMm%2B%2BrD6wKWU%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef501fa1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10112,"size_decoded":4416,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10002)","md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-28T14:17:30.86776Z","times_seen":2278,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/jquery.cookies.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.143Z","timestamp":1787926597143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/jquery.cookies.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jun 2021 06:32:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c1b1ea-c43\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WgeD2E0UjnjiM12PYhKioT10bL5NG2NQdeiwbS%2FaZHO0g0dcvCM5lGrazP1oSwtrLS%2FQ%2FSmZXiuvL%2FyowZZ5jXNHXDZZs%2FggKXUD5kBW1U6RFtypzRfHJ6Dhlphi5xmlYwxRNQ%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef502fa4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3139,"size_decoded":2241,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-28T23:33:57.579786Z","times_seen":3124,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/hb.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.168Z","timestamp":1787926597168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/hb.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:51:51 GMT\r\netag: \"6776b617-eb3\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3whZhHik9dkn1HLEBRPPjad8rLeVvACmuyWcPQvutR6gq6Qyb4EnNgFRTzrzmRv95fSrUxO4SUj3Q6fFK%2BTmSinDbkqeR8DX88MrwUDK0%2F%2FJxk1y4KsEARGsjGPu6LxBVcBkVg%3D\"}]}\r\ncf-ray: a323ef504fb9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3763,"size_decoded":4550,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c454aba9549cb9f2b9ca007d8f53c3a2","sha1":"bf7862ca79ea29f19716654bbd25f2a8841d8543","sha256":"3e7461ff49d213eb87b1d1fa77c80cb563381c6b3917982ec41dfacd3e9807de","sha512":"8cc2a5a62cd2ba734c432d0952a5fcf7c1dc4d401d8b82b89c749a2ba28563f75cb7c44667865bbc5a72d13e8240995aa55bdb6722e923ff904d2be295020bb5","ssdeep":"","tlshash":"00714b08ec86ec02da66f78057eef0974b27494086d084f2bedbd80749304b95d5fad3","first_seen":"2026-08-28T14:01:08.257868Z","last_seen":"2026-08-28T14:17:30.870727Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/layer_mobile/need/layer_mobile.css?2.0","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.076Z","timestamp":1787926598076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/need/layer_mobile.css?2.0 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKHrXTKA%2ByKNHFhWs5mDRajLF4NKrj84zGtUncP6zti%2FL6wK%2FbtpFDMu6KYqkDGZy5Phh3y9Zn4OD7nE8Wt1wGo0JciXIedQENic9bbaecvMRwmlI%2B2jHpS8WK7%2BA8Jj1rgfXio%3D\"}]}\r\ncf-ray: a323ef55f813712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":717,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-29T19:09:06.068057Z","times_seen":555088,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:36.245Z","timestamp":1787926596245,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /mobile/ HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:36 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 11 Mar 2023 15:55:44 GMT\r\npriority: u=0,i\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85go7rXskYzhtRCpuHmfd%2FAB%2FjVG81oxr2Ck23j%2FlP2OcNEM4cem5HArVblKUjx3kYeduets%2FceevAHYk4kMfhAb2W6DyAX%2Bo0CXynrIsz7eimC0H8JdM2L2oBH0nH3xxOOCtwE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a323ef4a8f30712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/index/images/ru.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.156Z","timestamp":1787926597156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/index/images/ru.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-b07\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZO0GOhMQ0YuQL%2BHeCnHSaFlkLw%2F4XqI5A0HmxwYn5oqIDV5N9vZgn7BB1y2l%2Bon6QaSitxeLNLuQRYhll4u%2BQ4dVU9%2FURUpkfZBOb4a91XcG5B8PVXwQFZ%2Bvy16HEoF5NSdoVM%3D\"}]}\r\ncf-ray: a323ef503fad712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2823\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2823,"size_decoded":3616,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"bf6ba80ad73b1536ca1eaadcf1e6d7ee","sha1":"3655aa6557d155cb171cf75181ff885d7024561e","sha256":"1ba143597a6f749bd4bd2234bf37a6290df1adff1efe8cee9907b7233c6a8b26","sha512":"fb74f5dc8d38d00af7e869a264279a5137b482a65b011f9cdd9d3d3a59acd46fc9913cb9194feff203b147e6ff536af8eab15a16c88c78809df5bf123ef7f1d9","ssdeep":"","tlshash":"be51256eddc17f89db60ae382079a402b2c745ef8d53679c70466e04ee17ab7140ef82","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-28T14:17:30.912615Z","times_seen":77,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/index/images/de.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.157Z","timestamp":1787926597157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/index/images/de.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 04 Dec 2022 20:43:40 GMT\r\netag: \"638d067c-9a\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZOcR0KWt4FOjOTqqaJkcEpPmZq7BODXB6pRxdjQpHogSesVunGuclmtUBvBWpRXFdmO7m8MdGZf9s8GW19LiHY9XctcP07oN9UfNVvvIGL1%2BzeE4F8Zeel%2FHl1K4XAbdCVnRqs%3D\"}]}\r\ncf-ray: a323ef503fae712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":937,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit colormap, non-interlaced","md5":"72a365a37b672f5a20da4f8f0880e857","sha1":"1d395668bd5404aa8b26e4d9586d1129798e5f21","sha256":"3da97ff56eb98940e046126ce7c727856df8722c833128141d15c640013675e6","sha512":"7b828444c21dcb95b151bca6b8d30a8466dee73019ec8096d04f85ebcacd6131480c2cf83885559d251be96da019f74a84260109760d3dc57643624281eea934","ssdeep":"","tlshash":"f1c08caeea8928a4c34aa1b21b781c349907a17ac1a49222a085981c1d1a1281486aa3","first_seen":"2024-08-20T10:15:14.338399Z","last_seen":"2026-08-28T14:17:30.828772Z","times_seen":73,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-1.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.160Z","timestamp":1787926597160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-1.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-1b25\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BtoOozZAA1jgPJB2GTtvdhwqgZycXjj3GtaTEkYQYrn%2F5kVjspJ4gpoBZw1gwUVVw%2Fv4CyCBc7IBzXxUDw%2BaA%2B6NM4X7tbPM6ty8Lne4wQtA9HsaLuO3Gz8C64WpU9UVwMy2H0%3D\"}]}\r\ncf-ray: a323ef503fb2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6949\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6949,"size_decoded":7741,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"e42448179a7e4cfd76149fc4e340c190","sha1":"8c9bf373b329b7cbabb770586167fadc13c34fb6","sha256":"aad8f325c9108c1b4b9a5f5fd40bc6ad910e12a81b6014d4586f6f8e8131da19","sha512":"265b4ef947931ddd88d013c03c50a6546989ef54312ed83bff4dffcbf03588ac5a37ec62e2dfd38760fe8c34a911f5b14973249c06f7a1e2d06522e92b4b4e17","ssdeep":"192:MknihKLD6GjZm0AqoXmXXTEHuh3O4nG5rg2c1sQgl:fnihKtjZm0AqoX05h3O2Wg2ADgl","tlshash":"d5e18e0d78d15ca04e635781ffcd90a30b535581fee0b8427ca6ae5bae702b1ca2d9d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.826459Z","times_seen":256,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/server_ico.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.166Z","timestamp":1787926597166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/server_ico.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:42:42 GMT\r\netag: \"6776b3f2-592\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOofvm52P0fabiynXC8OrPoPpdTqfGjtn2vG3d9wDdS3MxPxZ5Pxj7nx7tfey61F0MYSRhoWRREVAVAuXGJXXwyV9WxSiu2mWCAINRrdyXzjhnviTjnyiGIkO%2Bf3N6rx1zjGKp4%3D\"}]}\r\ncf-ray: a323ef504fb7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1426,"size_decoded":2209,"mime_type":"image/png","magic":"PNG image data, 36 x 41, 8-bit/color RGBA, non-interlaced","md5":"4680a234754b2c0f6d9eaa22acebe5fb","sha1":"0a53ea350b4c48b6e0824f3093f653b5dac76b3f","sha256":"5aea45e956feaa3442b14b1edf550ecc2f825179428c3d55d031803a0d9077a4","sha512":"2cb9b22e32fe8d3d4bf9380d77a8ab8c489a280df1867b2d88dd90b2c6d64a5579d61f41a8d0c3bf6364091a2afa3f550ba333a8579fd3722365c7e66f10a027","ssdeep":"","tlshash":"a021e992120fcb4eab2b83b055199a35ad700500ac8472b4cf4454290dc586b86f054f","first_seen":"2023-06-06T10:11:01Z","last_seen":"2026-08-28T14:17:30.861219Z","times_seen":19,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-6.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.173Z","timestamp":1787926597173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-6.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-f69\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiwsCug%2Ff9cG1YsBqt69bZO67Lc3pLuhDJ7eFeH4nhorfl4q85Dehs7k8Uo1NsSfjXxqhB0XXp917U8P3rhtqZBp05CJr34mHtomqRA4Hc26sYYvloy4aytLmuIu5FhBMNBdZHQ%3D\"}]}\r\ncf-ray: a323ef505fbe712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3945\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3945,"size_decoded":4728,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"2d5b9a317f20174f750d5524ab61536b","sha1":"a17ac4797bb6584005694177000915727f98540b","sha256":"4fdd7d0112cc4d7c828747212b0eff8b681d07da84d3209a377ed54b67a37c1e","sha512":"9bfc4bc468a804a3bac5a9263161ee81036e7a41d11cdfab57911b8f3459d884e5591c5025146a5e1407d99584e6a53a3016085da7bac065825b709edfcb51d4","ssdeep":"","tlshash":"d0813a06fec178916a89d6c02fe911a64723a7c0ded0a1599ddec01b69b00b8c5df8cb","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.829899Z","times_seen":207,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home_ai.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.174Z","timestamp":1787926597174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home_ai.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Aug 2023 14:14:27 GMT\r\netag: \"64d0fc43-11822\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wW7mj55aordO2SvdK%2B%2FUKCQPigs9r0NpHhw6%2FOuj6Y5MV1YcGV0TY8luiA8J1hdSNMC4lpts6KZflTeCpkaAw3Cgs2uS04%2BI8SNDAJYWr9LjuF4MlqY0yGNVCDC9KBu1MVhIXNM%3D\"}]}\r\ncf-ray: a323ef505fc0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71714,"size_decoded":72506,"mime_type":"image/png","magic":"PNG image data, 1812 x 1416, 8-bit colormap, non-interlaced","md5":"28bce220642938bda0b1f1ceeed917b6","sha1":"f410cb905315be47ccf2a253a33a06364baf61bf","sha256":"36cdf7bfdc67ddbad9fc935951170c25f8ed46af03abea5165680fecfc45f84e","sha512":"7de3aa48b67b4dd1b02dc05fa43ceac4eefac3fe791d0cd3feb952312a4e94cb4cbe0f880e98190b7130fae81eb63fdde6202813651dd11626fc361fe04f0c9e","ssdeep":"1536:GsAF8yM/DHE2T/MQp5lwOKCAhlbWbbX4HROUnAaeMGZMake:GbF8fVoSabWYYaAGGhke","tlshash":"5663f17a80196dd0f64227b10cf85405f5aa4683b6838fdd0bba1693df276cc872394b","first_seen":"2025-03-15T23:28:02.074885Z","last_seen":"2026-08-28T14:17:30.917726Z","times_seen":27,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/layer_mobile/layer.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.132Z","timestamp":1787926597132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/layer.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Apr 2023 07:22:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644239a0-d02\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLVLFmPQN6fqPekq%2F2I6N5EJqgBkZiZPpID4r%2BTX%2FDWGqNXV0AxJWP1VxOrdiER5HoZJX662ErLqqPMfcjpko3Q5WPz3reO9zl9mSbueEtqxqzdaiAhe56L1RDJReXygqywGvUg%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323ef501f9f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3330,"size_decoded":2376,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3267)","md5":"b779281d1bc48453207fe2cfe0fc269f","sha1":"9d7a4f3faaa85d8abf62bb8f450146a5920144eb","sha256":"27751e247667cc06cc4985515759153864421aab1f2f5a660a79ea82548c7ed4","sha512":"92553de96e3388f4ac94924f577f72cd1cb4b2c3ecef7dbc8a86eac66d4b51ee24292d8d39d0d22c495842a30b99a622d08dafb9fbec890e4f7f24bc417e5bc9","ssdeep":"","tlshash":"8361b876f1013677662321c4e06f590f7a736591b100c802e0e4d1ada9fec4ca8bbf6d","first_seen":"2025-03-15T23:28:02.133651Z","last_seen":"2026-08-28T14:17:30.932174Z","times_seen":27,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/js/script.js?v=1787926596","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.137Z","timestamp":1787926597137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/js/script.js?v=1787926596 HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Sep 2021 08:35:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6131de5a-10bd\"\r\nexpires: Sat, 29 Aug 2026 02:16:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCM%2FyKXx7f1AGnotdAkdMgnqIolEw%2FZrSqsh9c%2BKDO1fjQDOAVNM1kW38TRVBikrDpJlbWGoTRi8rT7XbGPoitw0Ay9LvDnWE3YZE6EVow9iDOmU%2Br%2FtiX6JaC2D410Bn2qFPKg%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323ef501fa0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4285,"size_decoded":2446,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7bd8dbda74fc465ae66adcc739addd22","sha1":"9a7cdadeeec394ca68f30ceeb4cd0a5a807008eb","sha256":"816e4ac149a00e91f7dcab8e6494abac7ea31f15d0ac667e117e48308eda79a8","sha512":"37a2fcb6dca3612a35d314448726fe71334d342fa9b9cf491e90ab13920b8cdfae8db3d5d333320e13c277e3e958b94f6367711132f2ba544926f5d981b7e47c","ssdeep":"96:z9+ApqIu5jK5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejqj6Ev1js23vh831GhECX/H","tlshash":"cc9163a87156362d83f233744cfe4425dc3ed665460b8960f0a1b9942d7463e4eebecd","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.832665Z","times_seen":33,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/static/mobile/img/home-nav-4.png","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:37.172Z","timestamp":1787926597172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"GET /static/mobile/img/home-nav-4.png HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-1c9e\"\r\nexpires: Sun, 27 Sep 2026 14:03:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 768\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buDZ01VbtMJjy2l0vXDWjvCly72eRSoa9cwFqIpeVdOrFNshtaVLcfyeqTKLnu2dj2maAXw6VQGBfpzDY90TGha5YMzTlRto5Q09YXHI9FjxrF%2FL2cdPzjandkevzeW7TQ7pTu8%3D\"}]}\r\ncf-ray: a323ef505fbd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7326,"size_decoded":8110,"mime_type":"image/png","magic":"PNG image data, 85 x 91, 8-bit/color RGBA, non-interlaced","md5":"51931449f7f1add2f1b23c1d3fb0c50d","sha1":"2472606e33ee28b6d1b24adaa15c2cc2e3f2e3a5","sha256":"115a31c73bb313b73626ce78e057499e508d55d8208315a1590c473dd47030a4","sha512":"2ee2fa2fdd8c200b57884f31fc1ef92115683646bec270d2736fde25ab5f1e5c952a66018efde827acffe759ae84198ccb39fb52a6b85047eecbd0947a7d30e2","ssdeep":"192:MknvFTRsSsJfpk4hEfHtdgcV73LJ6vRrhPnD:fnvFTRsSsBpfEfDlJe7nD","tlshash":"dee18e01ec61bc50a6258a85a4edd14b8f17d3d0ad9858ebbde5d55280d34f8576ccc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.859214Z","times_seen":206,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebindonesia.com/mobile/ajax/findcpm.html","fqdn":"bigebindonesia.com","domain":"bigebindonesia.com","tld":"com"},"ip":{"addr":"172.67.169.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.250Z","timestamp":1787926598250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebindonesia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:58:28 GMT","end":"Tue, 24 Nov 2026 12:57:07 GMT"},"fingerprint":{"sha1":"D6:4A:3D:F0:3C:D8:4D:37:0C:BD:98:5F:84:B0:11:FC:2B:03:1B:CC","sha256":"A1:73:32:D2:82:89:82:48:C1:75:C4:E7:BC:B4:F7:6F:BB:DD:5F:8A:4A:32:C4:44:26:F1:BB:4D:27:09:11:14"}}},"request":{"raw":"POST /mobile/ajax/findcpm.html HTTP/1.1\r\nHost: bigebindonesia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 16\r\nOrigin: https://bigebindonesia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebindonesia.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=91548055db211b22001d3f7e125ad852\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"type=2\u0026site=home"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: lang=id-id; path=/\nPHPSESSID=91548055db211b22001d3f7e125ad852; path=/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOweP8s4XPAKlNelJFt2P%2BZ%2Fqd0My8OI8XWo0Hc6%2B99lhQpxmErMmnAz%2Bxh4TNLNiG38QkXN3mVJYNIqfp0BcMeeeJEcv8Iu7qAa8G3I8EQM3DjS5VcfFYdD154fKuAngI%2FSRK4%3D\"}]}\r\ncf-ray: a323ef57182e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"id-id","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=id-id; path=/"},{"name":"PHPSESSID","value":"91548055db211b22001d3f7e125ad852","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=91548055db211b22001d3f7e125ad852; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":753,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df6c9a371eba46d75c2d23716da14f68","sha1":"7f1f8085bf1dde2c9bb145d781ba10d0d7562120","sha256":"8d7ceda7cfa31d9ab87b8670866615c34bd4d40b8219d30a82700fa122e6f39d","sha512":"94bab95251edfb282ab0cbca1c5fc5f57633b3eadc79ae32fdfc1dd058034db5e7dfbd3d39f162aa8352ee68abc6e8d1148bc2c109b4944ab67e971e82bd8832","ssdeep":"","tlshash":"ba500030303c000300030000000c0000c33f00000f0300000c0c033000000000000030","first_seen":"2025-02-07T16:57:45.843996Z","last_seen":"2026-08-28T14:17:30.921608Z","times_seen":16,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebindonesia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mg.rp989.com/wss","fqdn":"mg.rp989.com","domain":"rp989.com","tld":"com"},"ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bigebindonesia.com/mobile/index/index","date":"2026-08-28T14:16:38.494Z","timestamp":1787926598494,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /wss HTTP/1.1\r\nHost: mg.rp989.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bigebindonesia.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +PcDCMLGq/SbcqKljylLwg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 28 Aug 2026 14:16:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6387\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a323ef58cdef5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}