{"report_id":"ede79798-10ec-4f67-a5dc-015c768eba53","version":0,"status":"done","tags":[],"date":"2026-10-11T00:47:47Z","url":{"schema":"http","addr":"jejakdesa.com/","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"104.21.13.130","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jejakdesa.com/","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"title":"\"Jejak Desa, Cinta untuk Indonesia\" - Mari Bergerak, Mari Berdampak","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jejakdesa.com/","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"104.21.13.130","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:47:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"jejakdesa.com","ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-10","domain_rank":0,"first_seen":"2019-02-11T02:00:17Z","last_seen":"2023-03-30T11:34:34Z","alert_count":52,"request_count":26,"received_data":3032493,"sent_data":13843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":5,"received_data":73149,"sent_data":2796,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":22872,"sent_data":659,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T02:40:27.507214Z","times_seen":1003525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/plugins/everest-toolkit/public/js/everest-toolkit-public.js?ver=1.2.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","size":838,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T02:12:36.502927Z","times_seen":23594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","size":2967,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T02:54:31.13664Z","times_seen":9764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d421fd7576b0ca9c359ffe2fa16113","sha1":"eacce35258f14fcd79bea2bc23f4140d25874322","sha256":"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2","sha512":"c064c5bbaf7a5a82b047215083a842bfed1dbabcd71e313da319b2315a2a91e0f20f83795c806732c2f50b57b242ed49a7c86098870a56a66be07eb13c15db4c","ssdeep":"","tlshash":"d201c0b2b30d44b6045a3157cd5f61cd297d91e2b819649b8cc908501824d6d13bffb8","size":685,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T01:08:05.381955Z","times_seen":16632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T02:42:55.32795Z","times_seen":1099203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/gucherry-blog-ajax-script-js-extra","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f111bb31bbce62b0992d0f6be5e53c5e","sha1":"2fde27e54b19abf5ac2513a152c91a7462fbb11e","sha256":"a9b733d0e8244d9430a04d4656ca82b5e2c0c8cfbade3e2d15183bdf146c9c30","sha512":"1a01ae9257420e1b284e05372d6371baa3abb642b625318086811fb6ab38f69e054522082d2b9b85ed7a01d65b01ba10b8c8f70e1bdbf033863857b9c5c03e29","ssdeep":"","tlshash":"e85189dce62cc8eacb505e7c19bc9e7354c84d3fd57328044668c88c436d0729b9c841","size":2791,"data":"","first_seen":"2026-10-11T00:48:11.082318Z","last_seen":"2026-10-11T00:48:11.082318Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/ajax-script.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2515eef8c4601f2b672b7660bd8e6b","sha1":"c92fb7e39ecc5ed13787565e5cc7c523d9cbd2ba","sha256":"1a31e9410f320202fe5b784bd35072372194dc263c79b95290062017a67209be","sha512":"e4998148027227214f0be5e1bedee23a68f1dd0b823a1dbb21802bfde339ac08328f27599ee7f3de9ef85b506a0a94e22e9e24bce76dcf1f4aca79f2c13eecd5","ssdeep":"","tlshash":"c001ce84f38cb9ac41b7a6ec5c3d788b62ed182379394c89e58a3518458f0ec95c6c97","size":845,"data":"","first_seen":"2023-03-12T22:34:58Z","last_seen":"2026-10-11T00:48:10.543553Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b8440c5547bfec143d1d6828fa11c49","sha1":"ebf61d167329dd167d26ab05236b04e8f090939a","sha256":"7ebc13064f88425d072ed2d28354e0f5a84247ea0caa23c48b5d0af38e53addf","sha512":"61fad6dea58fa3fb682635936a990c9e7d42b9691a112e14908eb832d8365c8b0bb88acab00106feb7c785a9d488326bd341366d5e5951a6f487cc09d5bb3f0f","ssdeep":"1536:6hgaiiOcWnnIRYNlHkWUNVCiJNZDVKQTFw4FyACnX91UzjQXPfcKWiBaFz8r1YgM:riO5IRYNGiUHpwOpHEffcAPBkN","tlshash":"f004e889b210787602df5262916f460bb23b6459a60780acb53cdcee1d7ce98717bf7c","size":188749,"data":"","first_seen":"2023-03-12T22:34:58Z","last_seen":"2026-10-11T00:48:10.934967Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38bbe35b3c6efe4cfc6e8c72821a3c7e","sha1":"40558f852ffc42415b1807259971917979f5bd81","sha256":"955251f8919ab778fab02a1145aa4a2a96712438f6bca89705f59344739051ae","sha512":"001583f2140e01da372a84e8825709346515b6cd3c7985b7e8e7ba9188847c6e487f0cf474b1d822994b16f8f791c06952190ffe5d5cb3ea7cc85facbbf0fe18","ssdeep":"96:YrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJC:ss7NAME0+eWjQvJB1","tlshash":"86919599eb7938db33fa01f3653a4d47eb614436e784d038c9ae631428b1893c375a1a","size":4411,"data":"","first_seen":"2026-10-11T00:48:11.105872Z","last_seen":"2026-10-11T00:48:11.105872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T02:42:58.551013Z","times_seen":80380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://jejakdesa.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.098Z","timestamp":1791679254098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 10:14:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ec7380-15601\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dI5TjMAhS5fdGoocsTo4hqtumSeAaN%2B3b7N014ZXYtiK2EEfKt0hmbOVz%2BqayG%2BnPLci%2B1GfKugDbIJdK4wo7rrsq8qmFix1bKctVQFT%2F6T%2Frwmn1QVPe8x%2BYdhhJhT\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a489d0ea1cf156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":35047,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T02:42:55.32795Z","times_seen":1099203,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.196Z","timestamp":1791679255196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jejakdesa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 04:27:22 GMT\r\nexpires: Sat, 09 Oct 2027 04:27:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 159213\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-10-11T02:32:27.108893Z","times_seen":315665,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/09/IMG-20260917-WA0161-scaled.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.334Z","timestamp":1791679255334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/IMG-20260917-WA0161-scaled.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Sep 2026 12:22:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aabdb91-52f89\"\r\nexpires: Tue, 10 Nov 2026 00:40:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3tDf6Ii0i2pIlBV2LwPuwbXSNJYMkQ1vsdQTh0EqmNHDYRchw037tbyqP2cQhyIvnfVU2zNB5N2outEBTFR%2B8qLibl1g4Dv%2BSm13A2LDBb%2FxWzoxbYVo6239iBnN1t4\"}]}\r\npriority: u=4,i\r\ncf-ray: a489d0f1dd5c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":339849,"size_decoded":340223,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 2560x1152, components 3","md5":"82850f18e4765520b864dc1ff448ca4e","sha1":"290f413c2a07e0e993aa0af330866f80b66a65f8","sha256":"46eeabffee0e3d769313b4ff834ba07710d8d50fb5869df391efc19cee0b13d6","sha512":"e7b52a992fbbcc0a37afc06b82429670b6d326636da7fa25c437ff72ce75641bc1d24d6c3f6d2649ab153a5afa2db96d8ba9de0a76fa2e1b79e02457d9b374d7","ssdeep":"6144:Z4OiM8ZAQoa3pDEJY73tbHbEfCxtByGqGZSa2zUREACYGx5DsmuPkRZds9j+px:q3ZABwpDRJnxtJM3gRTpG7uAG0","tlshash":"f97423d807b2548c8e975b33a0cd34467a32fd3bd5b36889c1119ae8c4ed696da223dd","first_seen":"2026-10-11T00:48:10.468149Z","last_seen":"2026-10-11T00:48:10.468149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1436,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":845,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.201Z","timestamp":1791679255201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jejakdesa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:39 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463696\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-11T02:32:27.020456Z","times_seen":321606,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/09/IMG-20260925-WA0221-1.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.331Z","timestamp":1791679255331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/IMG-20260925-WA0221-1.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 25 Sep 2026 04:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab5fd7b-31c0f\"\r\nexpires: Tue, 10 Nov 2026 00:40:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BkfNy734FfjUuh3M6IeHKfRbvpI7yegWuAO5qC33U9IiOTD0AsjiURuxjZzwUqOWAktzBN9XBLw0aZjTKt7TceVoOwYCWHyTk308gimJ4EmxSnn2whGam5emct4oCEK\"}]}\r\npriority: u=4,i\r\ncf-ray: a489d0f1cd5b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203791,"size_decoded":204308,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 960x720, components 3","md5":"3593e69555a12c3fd4b94a05d7413306","sha1":"80015e4d58da19b11db490d68f7f10246e5a9488","sha256":"c0ac485fd2aca4789345394b2c3970ff893303e7aeecbc248670c5f0033f4e75","sha512":"bf4630f52408e0456914049a454df1ae966bbd328cdae7e49ff9eca632d4119558f0707650b8e5db626f192fbea3e4ac1b1edf1949a12da3cc66b74e4bd6856a","ssdeep":"3072:qoGhn5tmsrVWpcLMejwe5++EQDr3pIZ32oRjdVaxyKmDOCO7VIUaz4Edd0Oi/bb:qoGJmsOJsIZp1y2DMIhz4Ej0Zn","tlshash":"5614233c86ce55f9d0fd89768f901b650c7eb13bb1624aaa78807e38357d50e079886f","first_seen":"2026-10-11T00:48:10.494872Z","last_seen":"2026-10-11T00:48:10.494872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":830,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cormorant+Garamond%3A400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%26display%3Dswap%7CPoppins%3A400%2C400i%2C500%2C600%2C700%2C700i\u0026subset=latin%2Clatin-ext\u0026ver=7.1.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.093Z","timestamp":1791679254093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Cormorant+Garamond%3A400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%26display%3Dswap%7CPoppins%3A400%2C400i%2C500%2C600%2C700%2C700i\u0026subset=latin%2Clatin-ext\u0026ver=7.1.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 11 Oct 2026 00:40:54 GMT\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22188,"size_decoded":1773,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"752dbcfbd96838821ee6cd192c94c44c","sha1":"53ba71caa0254ba167489ac72334d8fee9901ff6","sha256":"d16a4374b3b0a396ab251460a8f4c093972a6a567b43398085a3fab7be73151d","sha512":"eb6cace5d22aa7c07f618a775f44c8a46bd8aa3a628899fa2e2d2f147b79ed07d8275ab2ae7e406b97fba1e50564637dfb055e0c311005e60b64cd04a5b45ce1","ssdeep":"384:NydYkxmTRd1kapMYdSkrE9ndXksvMIe7UaqluqMsK+6:v","tlshash":"07a2dda2042be40497470dd177cf3c35cf8e565a71409875abfe1c8cedaad2613a4b6d","first_seen":"2026-10-11T00:48:10.513972Z","last_seen":"2026-10-11T00:48:10.513972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2020/02/panjang_kecil-1.png","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.103Z","timestamp":1791679254103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2020/02/panjang_kecil-1.png HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Apr 2025 06:30:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68049495-ba91\"\r\nexpires: Tue, 10 Nov 2026 00:40:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggvwptN%2FBDn5E62Hq5ubepxJuoKsT5q3MHLr0HhUD01Uvc9Z66XD2RrJvW1fZNUNO4NtELcjCWA23MZg3zj98BTWChXnnSCevH2xWoecg590%2F18FINLzU%2Ft7kZRymOCh\"}]}\r\npriority: u=3,i\r\ncf-ray: a489d0ea1cf556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47761,"size_decoded":47309,"mime_type":"image/png","magic":"PNG image data, 1012 x 274, 8-bit/color RGBA, non-interlaced","md5":"75428df1175e28f1051f10adcfcba674","sha1":"0c74a04f1e6f3fd72f3e2f821f6f14eb55287fbb","sha256":"6073458bcb9de1cb2ff2f283e070a6b16a7ea0d240823d4274afce7b9f45a40b","sha512":"ab6730ab93c53e632983c8bec279f46c1dc94088e6a7f8e6ead2709e748f1c645d05a99c7ae845b5eaec7793e75aa3195af92bdf6f3c0f279823e40e117f01e8","ssdeep":"768:S/NO31eP/gNBMxe9ebWbnrs5JCyTF4JmXiZF9gb8s6OBXRnZLTF+tpLcvFd:Sole8MoSJCyTmYyZDC8uvLTB","tlshash":"4123f153bdf2eceac18b2d719dbd1b9175628281c6e3d94ec3b794bc722ef040564502","first_seen":"2026-10-11T00:48:10.520691Z","last_seen":"2026-10-11T00:48:10.520691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/ajax-script.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.105Z","timestamp":1791679254105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/ajax-script.js?ver=1.1.8 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\npriority: u=3,i=?0\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"680490f2-34d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1atCp9HmXfRTa54RitxZzWYN6flNJ39JezuEzDT6aTHzgzRMfNzSMdflsi3yrt0CSyM2HWPuuCETs2lrKyxFk%2BLpF%2BbAe6Ql0eCHki%2B82I2a%2FC6GRqTHKSvSsfws5x5p\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489d0ea2cf656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":845,"size_decoded":1224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0f2515eef8c4601f2b672b7660bd8e6b","sha1":"c92fb7e39ecc5ed13787565e5cc7c523d9cbd2ba","sha256":"1a31e9410f320202fe5b784bd35072372194dc263c79b95290062017a67209be","sha512":"e4998148027227214f0be5e1bedee23a68f1dd0b823a1dbb21802bfde339ac08328f27599ee7f3de9ef85b506a0a94e22e9e24bce76dcf1f4aca79f2c13eecd5","ssdeep":"","tlshash":"c001ce84f38cb9ac41b7a6ec5c3d788b62ed182379394c89e58a3518458f0ec95c6c97","first_seen":"2023-03-12T22:34:58Z","last_seen":"2026-10-11T00:48:10.543553Z","times_seen":42,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2019/08/langkah-1.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.119Z","timestamp":1791679254119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2019/08/langkah-1.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Apr 2025 06:30:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68049492-1d00a\"\r\nexpires: Tue, 10 Nov 2026 00:40:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKz4FBxP8m3r14XMZIEDbDMgxXXcql59xUOW9wjRP2RQ%2B05uxdVweBtbaJ99idGxJljvCwA441VdT%2FOof159vZf2QKNaCS3iDdKlN1Mym4%2FDtK5jReoDoR6T5mpiX8Xh\"}]}\r\npriority: u=5,i\r\ncf-ray: a489d0ea3cfb56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118794,"size_decoded":119454,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x960, components 3","md5":"bbd885fe75d1ba2e3610ced2f2610b42","sha1":"08316b182132b807ddf4c8e09927649463d41ccd","sha256":"1e0816a29870bfdfa12f8d55635f40674fef02a487a3f946177ecd736ed5f4ed","sha512":"65053398329a8233054160a9af9c05c34a13eab47a852924f68c878483ec7f5d9721fb9164f867b63012412acea7cc19937d251f9285bd8caea38e6a273852e3","ssdeep":"3072:Pl2otJ5Vd0DvGY9TcdHg9mjsanahPMT3NhJdA/MD7:PZtJ5Vy7FMyYDaidXCUD7","tlshash":"f4c31288cb280bbc0410c16b99b34b07e5ac34ad75c9ab59f757d985c6ace78064fbd2","first_seen":"2026-10-11T00:48:10.545295Z","last_seen":"2026-10-11T00:48:10.545295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2019/05/cropped-kotak_jejak_desa-1024x1024-1-2-32x32.png","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:56.878Z","timestamp":1791679256878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2019/05/cropped-kotak_jejak_desa-1024x1024-1-2-32x32.png HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:58 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chgtBxIWgTVxqXOmzkSQ1m0s9RlcdvD93S9lJkow1DVLypCtZ1P38zPqrmtJ6%2BcbAMDFWjiWF9RuwQgGFr7dw0aZm3XH6z12P7vNg7bz9Gb4VxcgA8FWIJs%2FZM%2FBCC%2F1\"}]}\r\ncf-ray: a489d0fb7dfb56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":702,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T02:34:43.159639Z","times_seen":567018,"resource_available":true,"data":null}},"time_used":1329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/plugins/everest-toolkit/public/js/everest-toolkit-public.js?ver=1.2.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.102Z","timestamp":1791679254102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/plugins/everest-toolkit/public/js/everest-toolkit-public.js?ver=1.2.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Apr 2025 06:16:51 GMT\r\npriority: u=2,i=?0\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"68049153-346\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFzum2y49Pz%2FtjjC3K1f6GF2J2h2Gg8q%2BUmSyuQUxHYH0QGvahH8TOfjfTaH%2B1VbxZXO7zAv4G%2FyElfB%2FASlq9K2s0crZcwtyJeR7p3lrQDRHNtMKQodzl9X%2BY8l0ng6\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489d0ea1cf456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838,"size_decoded":1261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T02:12:36.502927Z","times_seen":23594,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.110Z","timestamp":1791679254110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js?ver=1.1.8 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680490f2-b97\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2F%2F%2BJIHAnmlB8h355%2BL3BGma96d4%2B5K2UVM0Rxn9D8A1BzXEyQaDwnjRvGGTIyf9YmB9DB1A6kitSMtf3GbXgqigaVTrYWQ3YEhFnU1i9QjIfmfo66lrd13x2bFwRB4Z\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a489d0ea2cf856af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2967,"size_decoded":1948,"mime_type":"application/javascript","magic":"ASCII text","md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T02:54:31.13664Z","times_seen":9764,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.192Z","timestamp":1791679255192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jejakdesa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:38 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463697\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-10-11T02:43:15.452719Z","times_seen":418939,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.193Z","timestamp":1791679255193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jejakdesa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 03:32:27 GMT\r\nexpires: Wed, 06 Oct 2027 03:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 421708\r\nlast-modified: Mon, 08 Sep 2025 17:59:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37640,"size_decoded":38453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37640, version 1.0","md5":"c47ff12887a36dac62f887a6fdb51066","sha1":"74db058fe06da79b5dbf5b33d12041ddd45de510","sha256":"d80df8ff5aecd299a61549f9e29ab1ed0b9b05f4ea71d50fe978e07d5240b235","sha512":"69f1a213c6e2b30be219b919c0086745889bab293f93446bbc05273116c4bef115e9a5196dd0c23d8bf23a83a50f3b457051c43bcc0db992b8616f08de84d765","ssdeep":"768:mIH/m64lGpv8WbiaJix/6J6u3sVB3L1IgtXvsu3v2GZZsWnkZGJMjQL:hH/H4lw0jRG6msf7u8/sUr5nkcJ9L","tlshash":"23f2f21bbd69581e2fe5cb36c288cc6137309761cdd6bb25e2bf95e18b512198a0337c","first_seen":"2025-09-09T06:42:41.917008Z","last_seen":"2026-10-11T02:35:58.34425Z","times_seen":13651,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":29,"dns":1,"connect":0,"send":0,"wait":27,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/09/IMG-20260903-WA0109-scaled.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.336Z","timestamp":1791679255336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/IMG-20260903-WA0109-scaled.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Sep 2026 06:32:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a991484-667bc\"\r\nexpires: Tue, 10 Nov 2026 00:40:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKuHVey9xiTa2KIaC19Y1vOeN3QDDgfAx1BtK65t2Kl8Rdsk75U3erXBsw4%2B790Z2rqvb9MxchLDlzWgnDhUR7AWqOy0duuPL64bCaULeWf9VG%2FvFKmLtadYPt%2FWGs3n\"}]}\r\npriority: u=4,i\r\ncf-ray: a489d0f1dd5d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419772,"size_decoded":416893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 2560x1441, components 3","md5":"369184f24233159187db76ccb04ccd8c","sha1":"b9db28c587284eab7fc11aa20d173455882b1613","sha256":"b49f6527e0fed8a1c670b56c7461326a6f5f9b8bb70e3bc9d208d5bd50723a08","sha512":"b369bb9c1263d5d368f5d65198a6c21b0ad9be53a24fa60f1c9e9907b8d1fddcf4a42150e0be013c1a48f12be96fd20ba24b7a3044d9f71142f1e1dd1d57759a","ssdeep":"12288:PbklJ8FUkEkrWImmQvkkrNgyWfzPgsaOGLHHvuGCQfm:POeZE6WdmykgNoPg1OGLHPuzQfm","tlshash":"c6942357f87df02c47884a248f68b37f35d723883696d9b87822b46ae3c51b775a4380","first_seen":"2026-10-11T00:48:10.691612Z","last_seen":"2026-10-11T00:48:10.691612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/style.css?ver=7.1.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:53.851Z","timestamp":1791679253851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/style.css?ver=7.1.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680490f2-6a6\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImuL%2Fwj7xpZHBxiwhjfAmGZfh%2Fhb0ZXH5xBwiqPU%2Fq1nJqFv3Dj6UFvlgalyoVlo%2BOw8FhqnAXobolHlT0QuEC1DF8MoNX8Pbb8ScwoLUeL%2BZ0Zw4XJG8FO4Vm5%2FD38Y\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a489d0e88cdd56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1702,"size_decoded":1729,"mime_type":"text/css","magic":"ASCII text, with very long lines (667)","md5":"d1863e30b2646d7dda4f649b1a6c3d6b","sha1":"636e58df3c25aa382c37ee824a5e8ef66cce4128","sha256":"d957baf7ff6fe3fcee8ff3f3bc0ae6ef674dc5ef0cfa97264d1d88587ca7fa52","sha512":"6af8bed1d0aa6085ede5a5a3535c02f1584b3c7992fcb80cd0ada94534f5eb3562ccd92197d7649bdd7cebcd7d64f7966ba066865a67a302808471a361542b23","ssdeep":"","tlshash":"32317406f92e32a725a1425359e67d516f2ea21426d400e0f45fd048168792743eabd8","first_seen":"2024-04-25T16:06:58Z","last_seen":"2026-10-11T00:48:10.700534Z","times_seen":18,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/09/IMG-20260925-WA0221-1-300x300.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.121Z","timestamp":1791679254121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/IMG-20260925-WA0221-1-300x300.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 25 Sep 2026 04:50:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab5fd7e-6454\"\r\nexpires: Tue, 10 Nov 2026 00:40:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=az4Jo1%2BlFSQh%2Fo27CuvJ6L5O4hmL19%2Fjw590doVqVdj6ooeiQDRmME%2FcfJ0swubi9qpxPcQhEkMWgvsRLp1fTYbGYFHZhgOPe7PNtS%2Bm8tdVciriYsK8LoRHgTKzd2Sm\"}]}\r\npriority: u=5,i\r\ncf-ray: a489d0ea3cfc56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25684,"size_decoded":26347,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"e860ea8f47b3e4529f6a22ee96fd6d70","sha1":"03f590c471452c3f5b62691d3451edefea831f5f","sha256":"c3644e512e3a545673690e16ecb2b034d3e88d98cf5d1f3c68de6f712d149ca7","sha512":"9a0db251324eea23424433de8d5699ae9e2ae89372c052f5a850cd5124d463d72cf1c7550065121de5f2ddddf395f6a79e2960af3d8334793bc94fe492b83b2b","ssdeep":"768:P09euMI5X6DhJttMggWaMyphj2z25CWFIQqdTN:P0si5STL3aMqj+afPqdTN","tlshash":"0db2e1aeb0b9701558ef4ca83d52201c53e8b4576325ef2b3032c576d5e9dd748cabca","first_seen":"2026-10-11T00:48:10.717061Z","last_seen":"2026-10-11T00:48:10.717061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/woocommerce/woocommerce.css?ver=7.1.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.096Z","timestamp":1791679254096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/woocommerce/woocommerce.css?ver=7.1.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680490f2-1264\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlmvU%2BjJ6UXkIn6nxcQkTos6gl2dWNYKv99Z8v2w6PiSgedheLaYWLQjrl0ma49Xd3cZZyddObuDwfN3AIDoTVnUnP1HEAsOlID3sQlezJhxO8OWVNeqjhp4TA7XEm4r\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a489d0ea1cef56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4708,"size_decoded":1791,"mime_type":"text/css","magic":"ASCII text, with very long lines (4708), with no line terminators","md5":"609a11b14e7b1313bb1cce514a7ac1df","sha1":"9439361c189e5c506b6faf2f25ca41e749ca32f9","sha256":"8bd565b30ca3ced7ef905807172500ebd3cd7845c05820a5f4269be9a76df7b7","sha512":"b0987d48e1ed250ced6f9ea2c870776e0d44e9e476f6ef6f80f6e310ca25e5b93dcec4f5e86aee3099bf0686a3427c39e411b04d26ff65ed54eae4ad4b8f3195","ssdeep":"96:XcMzR4KHHv6KvOvvuvmcvY16YeZdkK9GOPOOP7q/mmx6R8bSIiv1YiDi4UnnLa+Z:XcMzR4KHS53D6YeZdkK9GOPOOP7q/mmV","tlshash":"8fa1dfa781241c557bea76a57da079d03c220338f60457388cb05f6c97c66eb3b97b4e","first_seen":"2023-05-17T17:43:00Z","last_seen":"2026-10-11T00:48:10.837387Z","times_seen":107,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/08/FB_IMG_1786412171815.jpg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.338Z","timestamp":1791679255338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/FB_IMG_1786412171815.jpg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 11 Aug 2026 01:38:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7a7d06-3ff26\"\r\nexpires: Tue, 10 Nov 2026 00:40:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeTmZi81GDpJ0cOHsbABEajHb2BiHEfaIl4pEi1k469D6im8Q4LTJxiv1y9HPTUQlmXpJZZwjjEEvd4FRaXA7Fk2Q8e6%2Ffbnj9xiJ0bMJVJ71WmdWz9fxwH%2BgK5lIJ4%2B\"}]}\r\npriority: u=4,i\r\ncf-ray: a489d0f1dd5f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261926,"size_decoded":261188,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1122x1402, components 3","md5":"76b2475702ecd7802c52b778e71aa352","sha1":"236562335756310b73b866e370adf865e18a2b45","sha256":"3b4ffbb4cf628df89e06b3688d67204a75bdd9c9576d5afe297bd24a5c4e4ab5","sha512":"83bea97022e777baf43145e890f73464e04843a2ca5d11bbc35989995ce3f475fa8eeb2b91bef48ae42336bf28a5df15fdb6af31cb5b0bcd1da826f7397d6159","ssdeep":"6144:7vAfHQuMwcJR4iosw7Qjusdr1t+33QZ7Dgarf3JJiCTz:7mwQcJqEuSt+3g1kKh/Tz","tlshash":"054423f4b175d177e4c8fe670a1581c6a2ca08e00ef0941a97ef45e3d93322599877a6","first_seen":"2026-10-11T00:48:10.869466Z","last_seen":"2026-10-11T00:48:10.869466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":805,"receive":584,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.199Z","timestamp":1791679255199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jejakdesa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 16:10:30 GMT\r\nexpires: Fri, 08 Oct 2027 16:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203425\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-11T02:34:36.846049Z","times_seen":296933,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:40:51.462Z","timestamp":1791679251462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://jejakdesa.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWpdYuVZvA2ozNZFIIDK5EpmR0tjIkdnPhIaF03cfyzhkdKT0pWZUV7%2B0s%2Ftg6Nt7TNDzcR6KpAa8ruxBkM9B1SLVSIWmey1Gp725IloteqvBFZ8SsjTvLZ8jj7NmY%2FE\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489d0d9cbca56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":139819,"size_decoded":17528,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9291)","md5":"9daea515954824e4f43012b6ef6f91f0","sha1":"4b7a6ba35b327c14b1d4a57f9c1c91b4a9dc5b88","sha256":"364a44f3f595e586a9ed7af20b2685e3b9010cc08c887453ffbd1b002e0524bf","sha512":"f4957cb7d0c5fbb376c7054ec2a64a145aee57fed455666b98bc6c9bf68516bf0d131f5efa30251dbcfc1a8c7e2175e9d51657237acc79c47a2b88d4279aab8d","ssdeep":"1536:v3g+ypN8biHWKwESKOZVOig1BuK8gGsDHaXiBXSVL51rWHGvFJzVRa:v3gX8biHWKCj1rWmvFJzV4","tlshash":"2fd3d77219fd023b468187c914707b28b966557bdb0a2788b3be17c4bf87da35c8724e","first_seen":"2026-10-11T00:48:10.898261Z","last_seen":"2026-10-11T00:48:10.898261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2160,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":2139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/plugins/everest-toolkit/public/css/everest-toolkit-public.css?ver=1.2.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:53.846Z","timestamp":1791679253846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/plugins/everest-toolkit/public/css/everest-toolkit-public.css?ver=1.2.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Apr 2025 06:16:51 GMT\r\npriority: u=2,i=?0\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"68049153-62\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQvOPxLQzh%2Fc6lnyohzsZsEYbC782UsvZpKJbBJt8dzam8Bya7y%2B09wX8xAnSH%2B8Z2%2B34vXGDKeQUo3mabp9oDc8yO5lUBLyHgayJNjU4DYZIuOE5pC53nkXK87B8xvP\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489d0e88cda56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":843,"mime_type":"text/css","magic":"ASCII text","md5":"e6094661d8923e95b233019ebff7c8f0","sha1":"cfd836d385d475baffee45d85cfeb9bb36e70d9e","sha256":"547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a","sha512":"b5684920345ccc14419cec135d43521bdc9b77618befa0096e11e33414dba09225ffe8e19ef10f3d75a74a086cfa40be2ebf3a4310fa6395e3e2d407a7451995","ssdeep":"","tlshash":"5eb0120b56b51c0700051d30bb0b80ce213d291e43b65004284711fcfc16d781316c9f","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-10-11T03:02:44.371964Z","times_seen":28037,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.100Z","timestamp":1791679254100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 08 Jun 2023 22:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64825af4-3509\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSlRBPzz86M%2BlF1KjYz6qHBbOnadcrRf1sV5SbTvw9dFjBUgx8GjoQxNnYiVwDN15oVCgfvU73MxEoy3GiNG4sXrN%2F%2BThNbp6nhVBhuaxXpb29Ud%2Fa15FGL%2Bx5v3N2Ji\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a489d0ea1cf256af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":5998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T02:40:27.507214Z","times_seen":1003525,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.107Z","timestamp":1791679254107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js?ver=1.1.8 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680490f2-2e14d\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2F7XD4FOl7CSiVDIp5FRrghQ0XiJs61f0Nfv0jJ5JKR%2BNabrR%2BWJLspnVXnd4vnzeQppmpcpcQCxx5iP%2FADx5xgSsqS6n4aZPCGtw0s31mFZYf7mmYoRhIIH7dOZ0Art\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a489d0ea2cf756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188749,"size_decoded":61299,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b8440c5547bfec143d1d6828fa11c49","sha1":"ebf61d167329dd167d26ab05236b04e8f090939a","sha256":"7ebc13064f88425d072ed2d28354e0f5a84247ea0caa23c48b5d0af38e53addf","sha512":"61fad6dea58fa3fb682635936a990c9e7d42b9691a112e14908eb832d8365c8b0bb88acab00106feb7c785a9d488326bd341366d5e5951a6f487cc09d5bb3f0f","ssdeep":"1536:6hgaiiOcWnnIRYNlHkWUNVCiJNZDVKQTFw4FyACnX91UzjQXPfcKWiBaFz8r1YgM:riO5IRYNGiUHpwOpHEffcAPBkN","tlshash":"f004e889b210787602df5262916f460bb23b6459a60780acb53cdcee1d7ce98717bf7c","first_seen":"2023-03-12T22:34:58Z","last_seen":"2026-10-11T00:48:10.934967Z","times_seen":111,"resource_available":true,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js?ver=1.1.8","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.112Z","timestamp":1791679254112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js?ver=1.1.8 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\npriority: u=3,i=?0\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"680490f2-2ad\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rezgebXf%2BXgrTSADdxFlT2lJXMJAjmqRaEB5OKh5L7NsvgJ3C7k3i6LTBqa29cGg7%2FrXW2Y0ksVbbdf%2FzBkCkZ4H1vREs%2FI2tmebPcM7RW17oLGmbRkeJGhv0GoCnyXC\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489d0ea2cf956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":1195,"mime_type":"application/javascript","magic":"ASCII text","md5":"93d421fd7576b0ca9c359ffe2fa16113","sha1":"eacce35258f14fcd79bea2bc23f4140d25874322","sha256":"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2","sha512":"c064c5bbaf7a5a82b047215083a842bfed1dbabcd71e313da319b2315a2a91e0f20f83795c806732c2f50b57b242ed49a7c86098870a56a66be07eb13c15db4c","ssdeep":"","tlshash":"d201c0b2b30d44b6045a3157cd5f61cd297d91e2b819649b8cc908501824d6d13bffb8","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-10-11T01:08:05.381955Z","times_seen":16632,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css?ver=7.1.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.095Z","timestamp":1791679254095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css?ver=7.1.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680490f2-38872\"\r\nexpires: Sun, 11 Oct 2026 12:40:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p03Yvos4sj1TZO%2BD1vKnDyyGyqeelTjhufZSindg6GuILXSR9zOVcIR0sglsH9DJoXY1NMJnMKA0rnL%2Fzds2AXFziGZbdpjJjahUkojKDZ1PgBU8r%2BlxLj1YctNLDTAo\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a489d0ea1cee56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231538,"size_decoded":41592,"mime_type":"text/css","magic":"ASCII text, with very long lines (42065)","md5":"ae94ac1d9d8de73f0425ea993cb60e6e","sha1":"de155cefc328fd1b02b6cc7e0f5cf1c0e40358a5","sha256":"9873032b7cb5348c9edbda2189695132064da77d00d16b60cce957fd7a15589c","sha512":"1f1edaf1d86b01be04fa54e77f43a00da008907f2f66a9cb5cc06dd3f99c11d39402f5507a982887b171bb6aad2118ed2121bfb3b0570803bb72f2fef9f1361b","ssdeep":"6144:AscskZdwO12AZkaDb3ayg5JrMei0aTKS22mZ6i:mZdwO12AZkaDb3ayg5JrMei0aTKS2zZz","tlshash":"3e344fa6d44411c82323ca0bd7c87f685679e236d4a10deef14b6a0d8fc6b9903d6b5f","first_seen":"2023-05-17T17:43:00Z","last_seen":"2026-10-11T00:48:10.960987Z","times_seen":57,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.195Z","timestamp":1791679255195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css?ver=7.1.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:55 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\netag: \"680490f2-12d68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMoQPBCpHr9l6e9TY2cbfcRja17xJn1LdiLZqBORkvKDEMRvDpM2Uvu6OuG2lhWUj9KOkKlEcRYwfeG%2F%2F1LWs6t4lHJt%2FAzPSWeirLJ0xmyWBcmXaMuzycV0QJH3Pz7h\"}]}\r\ncf-ray: a489d0f0fd4d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":77893,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-10-11T02:38:56.161512Z","times_seen":551596,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/feather/feather.woff?t=1525787366991","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.197Z","timestamp":1791679255197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/feather/feather.woff?t=1525787366991 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css?ver=7.1.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:55 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 20 Apr 2025 06:15:14 GMT\r\netag: \"680490f2-733c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3K%2Fz9wwip0iCn6eX2TVo%2Fo%2Fut4mqGBdZFvMmScy1Ze9Wh%2B9aW0wYBWnHsZvfQ1jAunt5TUovXYHaL55o513atW49ye4fXXFVmEzaymABcYisZe0%2FF9yShBRQQITXpoX\"}]}\r\ncf-ray: a489d0f0fd4f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29500,"size_decoded":30235,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29500, version 1.0","md5":"3d2fa2e544004aef2ea641698b715af6","sha1":"7e6a306e6fb6178f325e6ad9a99c761ba5074044","sha256":"ef3c47cb702e040372a3a4bce66d5e0ecc46c56325ec40f8c00b91da0d1d3f46","sha512":"22fc4daa2b056c297e8ae987be44995475164743d420a63dea6df00f50cd2421a91fae0886578e5b28079d5f12e0bd62f9fefd6f10d640c085694d20cb5f0957","ssdeep":"768:NMdDrdyWXFYd6AQ+XzX1jDFGDCtg9O1GsVpZO3hc:NyDrUWXFYgtkDFnLVpgy","tlshash":"09d2f1c74ee259e893299cb3dc72f6399a030c0e2cb489577ee36463b0cbf603665409","first_seen":"2023-04-18T21:10:38Z","last_seen":"2026-10-11T00:48:10.98276Z","times_seen":1686,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.539Z","timestamp":1791679255539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 19:11:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4ff245-58e0\"\r\nexpires: Sun, 11 Oct 2026 12:40:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q53xSTs8Oye0PowlmYzovVOb7QETpqKCyg1cdOkajpXWCuAUmtO9I%2FFhYJWuJVwYylvIjjQi%2Bt%2FWAOfCgInW2qW3K%2FV47qmE9QG16zX02rzcJltsGOmBPkbFbXjd%2FFzN\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a489d0f31d7356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":6887,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T02:42:58.551013Z","times_seen":80380,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2019/05/cropped-kotak_jejak_desa-1024x1024-1-2-192x192.png","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:56.876Z","timestamp":1791679256876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2019/05/cropped-kotak_jejak_desa-1024x1024-1-2-192x192.png HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 22 Apr 2025 22:56:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68081eb8-6a94\"\r\nexpires: Tue, 10 Nov 2026 00:40:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkUtGVugFeucbSy6FvMoKHr3rOeDHAROTtmLc0zSjP5eMtlJ12OyytrGQZJnJaXpB3sW5rhcODFYIHQ4G6n%2BiFXntIc1Ro0%2BqhAnY3UYDwAo%2FH5GAJXLgjmJ9FmRqHeO\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a489d0fb7dfa56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27284,"size_decoded":27322,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"843e9c0447be658e6220fd85327863b0","sha1":"b3a94e5a4034462c06d259e96f7484160fc64ca7","sha256":"b65d34eb331abd744383d180b1d34afe57311c7fa23a1bfdeea64c9492ad7296","sha512":"c4b9329942b64ef0b591347b2850df8dbb5c90f5c39c7494e2045da9c3193c81a92d639a90677d76967244e63ba19fb1261891fcc11771130ea24f2f893209f5","ssdeep":"768:H4fROc/1P3phTNQdoyA9qg/Wlhx+m1ZF9Il25k:COc9Woy0qg/WJ+m1Gl25k","tlshash":"46c2c0866a613b69567738d8020a7e610c0761f1fb53bd1a8c81ffcc1518b4fef2da69","first_seen":"2026-10-11T00:48:11.017238Z","last_seen":"2026-10-11T00:48:11.017238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2024/05/WhatsApp-Image-2024-05-30-at-17.53.53-2.jpeg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:54.118Z","timestamp":1791679254118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/WhatsApp-Image-2024-05-30-at-17.53.53-2.jpeg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Apr 2025 06:31:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680494d0-1ca2e\"\r\nexpires: Tue, 10 Nov 2026 00:40:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kPgjO44vyZtPm1FJIOsgcL06hU114q6SqObh5zMoEBXPPekkaKlfL5p4m7X85goGLINZdLUISnmfU8YUWs0KduqI9scYdTiLZjBm9nMbx%2BvYk1nxVBVlV1ZKTx1Armb\"}]}\r\npriority: u=5,i\r\ncf-ray: a489d0ea3cfa56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117294,"size_decoded":117839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x768, components 3","md5":"ad84c0eb51eb8c99215ac665991581cc","sha1":"07b53989ed6cc0a6830a628e745c47463d2a7e19","sha256":"d082923690b5d58a130d46c2dea7a85ebdf194009b9ab40e13addc412de3a203","sha512":"cd08fb0a7e7bb75d5d056eefa2b356c8985d86f5c9fb1809c60963f1412fa724d732427efffb71acd6ec097966fddc78c5e030b1ab9aed61e86a745106425e2c","ssdeep":"1536:/8Y7X53i3tme7DiTReUf4IjOlAprX76qaqZCn+GgIyqcQ/g30Y380bpanukkZEQu:j2tET5jagL6J3gIb3DCsn1nQjhwnKqKU","tlshash":"85b312a301505f06025decfad613760f43db47bd5a32e109ed9f38ea47939660a40efa","first_seen":"2026-10-11T00:48:11.038701Z","last_seen":"2026-10-11T00:48:11.038701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jejakdesa.com/wp-content/uploads/2026/08/WhatsApp-Image-2026-08-20-at-23.12.11-1-scaled.jpeg","fqdn":"jejakdesa.com","domain":"jejakdesa.com","tld":"com"},"ip":{"addr":"172.67.200.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jejakdesa.com/","date":"2026-10-11T00:40:55.337Z","timestamp":1791679255337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jejakdesa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 11:20:19 GMT","end":"Fri, 18 Dec 2026 12:18:50 GMT"},"fingerprint":{"sha1":"05:E8:C4:86:A6:25:C8:9A:0E:4F:0D:14:8E:52:8E:7B:8E:15:3B:21","sha256":"91:7A:76:21:DD:C3:BB:43:1A:9D:E9:15:CB:13:01:EB:CD:C3:71:97:9E:CA:3A:5A:5D:6E:EB:7B:09:D1:82:BB"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/WhatsApp-Image-2026-08-20-at-23.12.11-1-scaled.jpeg HTTP/1.1\r\nHost: jejakdesa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jejakdesa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:40:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Aug 2026 16:24:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a872a33-9e28e\"\r\nexpires: Tue, 10 Nov 2026 00:40:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwpnpXoJ%2FQnNx45OgcSB0RKJLSHSOShXc3uSmfeNhZ1QCix5PqJyPCh2%2Bok%2BhtS0vd9hSGSG66Ta0Z2sc6f1IGpE9I6%2F6FFO1oy40hX9C8dL21uibst3F%2BvPVn367OrJ\"}]}\r\npriority: u=4,i\r\ncf-ray: a489d0f1dd5e56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647822,"size_decoded":648013,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 2560x1920, components 3","md5":"a9ed5afd9b51c0bf1e7ee9e7e121be81","sha1":"d4de7d81da76ff6db9de0ef949d135cbe46349f3","sha256":"918527ff3b040f3ffef38b86188bcfe6cdc88071d3fff4d86d125e2f6e1189db","sha512":"d87cf4ac99fffc348bcd4d38f912e929fbeb635f69c3cd554f89114e146ddfa3698dee3c524e43d6233ef0530a8edc856b2fa32e060d121378d04d6a23b46d1c","ssdeep":"12288:zfP1n717EGqw2thDxaJk6pItqgzu7bjPPDW5R4wZdEhw:bV17EBDEJk6H8IPSmhw","tlshash":"c1d42318b45129dfaf056f663ed35fb6a66ef5a5090468fd8412cd58fc372892fc00ac","first_seen":"2026-10-11T00:48:11.071639Z","last_seen":"2026-10-11T00:48:11.071639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":768,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jejakdesa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}