{"report_id":"fb609523-1a06-4ffb-b1d3-faec7c7d9994","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-07-07T02:51:16Z","url":{"schema":"http","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"title":"Bank Bima","dom":{"size":30821,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ae6b90386fe60d0fee80d5f7d3c5195f","sha1":"dd0d346105cf89c1f0ae2f199e30ed85ad097b93","sha256":"c5de703bdfadd70f65733f5e8f82b543e3c1a2c6c834fb6904eac18760af7cef","sha512":"6d1c5883db1d2ce5f4c3096c6135784d5c55e4d3e46ab9f9d8443d8165dbd160efe5bc5214a36dae57462dd3907bf09ac82f62492e281a07a7f451a4da1aa06c","ssdeep":"384:TNfhYJLmJt/byJqkmnrUIj6XQscEGtv0O/WWJpd5SqQh2mXQlv0uWeJJ+:RALmfzyJq9nrUIj6MEev0O/xjv8Yh8","tlshash":"d0d263672ab300616aa3d5e41bf75b0a3538d007d946d9183fac63c48fc2dd5a9e3b9c","dom_hash":"domhashdf260098672ac423a80055fce167e67c","first_seen":"2026-07-07T00:21:31.545916Z","last_seen":"2026-07-07T02:51:16.647122Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T02:51:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-07","alert":"Detects file containing Telegram Bot API","trigger":"aktivasipemuluhanbimamobile.netlify.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"i.ibb.co.com","ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"unknown","domain_rank":469940,"first_seen":"2023-08-10T14:30:45Z","last_seen":"2026-07-04T15:18:16.136874Z","alert_count":0,"request_count":5,"received_data":213183,"sent_data":2923,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aktivasipemuluhanbimamobile.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-07-07T00:21:29.111171Z","last_seen":"2026-07-07T00:21:29.111171Z","alert_count":8,"request_count":2,"received_data":35169,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"md5":"f12477a8d8b92b1e782027b7385726d2","sha1":"098ef13c065c622d351ecd30ed7792796ccfd948","sha256":"6f54ec60e08de41d08584bce6a9fab5c780ec386a0f153ddf926ae4ccbfc61ec","sha512":"e710db470826a6e02fc022e53003e1272ed98cb975a1bc52679facbd5f6b7fa690ff9aa769703c4ea9ea05021e4935a91e515a8ce938b4ab4e4507ec981f66a2","size":7383,"token":"8778729363:AAHrceu4KHUz9Ml5CCCMVUqhWhvPlp8ew7Q","is_revoked":false,"bot":{"token":"8778729363:AAHrceu4KHUz9Ml5CCCMVUqhWhvPlp8ew7Q","user_id":"8778729363","username":"Uahsgshsbot","first_name":"LINK BIMA","last_name":"","chat":{"chat_id":"6570655200","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f12477a8d8b92b1e782027b7385726d2","sha1":"098ef13c065c622d351ecd30ed7792796ccfd948","sha256":"6f54ec60e08de41d08584bce6a9fab5c780ec386a0f153ddf926ae4ccbfc61ec","sha512":"e710db470826a6e02fc022e53003e1272ed98cb975a1bc52679facbd5f6b7fa690ff9aa769703c4ea9ea05021e4935a91e515a8ce938b4ab4e4507ec981f66a2","ssdeep":"192:+fvYscEG4cv0O/WDqJiq3wq7gUanqHwGixUmXHwlAVI0uWGlJJv:+QscEGtv0O/WWJpd5SqQh2mXQlv0uWer","tlshash":"fae1fe6b37b704340bb7aaaa17eb4b89743411273c01e4997e2c52414fa0ea5f5faddc","size":7383,"data":"","first_seen":"2026-07-07T00:21:31.556381Z","last_seen":"2026-07-07T02:51:16.652474Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-07","alert":"Detects file containing Telegram Bot API","trigger":"aktivasipemuluhanbimamobile.netlify.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.ibb.co.com/wFRcCcHk/bima-logo.png","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:56.064Z","timestamp":1783392656064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /wFRcCcHk/bima-logo.png HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 07 Jul 2026 02:50:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 40042\r\nlast-modified: Tue, 30 Jun 2026 05:39:15 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40042,"size_decoded":40407,"mime_type":"image/png","magic":"PNG image data, 350 x 135, 8-bit/color RGBA, non-interlaced","md5":"fbe91bc6d4b50a74a1aee57252295c29","sha1":"9a85e92f0cb47d5a62343c012ec3ef44307ff07b","sha256":"05d02293acc3dcd418805e57b7bd16473801d3c65a79d964757160111711c4a1","sha512":"7ec17093393e3791b02b64308d2ff460cfbf6534937541fa43f4106942b57a186848518140c37fcdc863138993e0305289c63a591df880281e470a4f1d74a82c","ssdeep":"768:+ZmunYEuMV1l2RydqvqIsXi+eM80FHEgx3hDSZ19C/Rv:+hYEue1l2RyqqIsXdp80FP3huwh","tlshash":"1e0302faa5add763e91c404dec8ae543acac4ec6b5b00f0d99035449a710fc8e7d4add","first_seen":"2026-06-24T03:30:32.751039Z","last_seen":"2026-08-05T15:23:40.751317Z","times_seen":14,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/4ZFJ6VJC/IMG-20260630-WA0014.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:56.066Z","timestamp":1783392656066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /4ZFJ6VJC/IMG-20260630-WA0014.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 07 Jul 2026 02:50:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23278\r\nlast-modified: Tue, 30 Jun 2026 05:37:48 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23278,"size_decoded":23644,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 667x663, components 3","md5":"428493a21ba6650b607c27ebeb124fdb","sha1":"8db8b81d05196f8e7927e74718d01c7b8e45e620","sha256":"b7385b2e99b00f39c481b33940a37d7eb5cc095000f052d21cac8ec01b5c20c1","sha512":"553200badd0fadcd76e95353d59e515d408050599b383147fd443fd403466e2311e1b10fccf481409b046bb974c19396993d7fe49fb0cebc71fd9b0c5d20095c","ssdeep":"384:9woUNABrkJNpnmyyS+uAgTCSDIGD+9GDGkTdFk35PbrnOC+d4rA4plFnIyI:CokNJNpnLx+kjDIWbGak3pXnOC+d4s4Q","tlshash":"42a2d0189fe0a693ca6037f84133ba0c291aeb252346e57b47c9572d216efb17f2c751","first_seen":"2026-07-07T00:13:17.962931Z","last_seen":"2026-08-05T15:23:40.751876Z","times_seen":13,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/Tqc8szdR/Screenshot-20260630-123642-1.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:56.068Z","timestamp":1783392656068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /Tqc8szdR/Screenshot-20260630-123642-1.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 07 Jul 2026 02:50:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50322\r\nlast-modified: Tue, 30 Jun 2026 05:37:13 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50322,"size_decoded":50688,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 667x486, components 3","md5":"afd7f001f33184c505ee7b8ef1e3844e","sha1":"e06ea455f412f483c60e9ff7929576a3d756fe8d","sha256":"88390a39351d2cdcd02d15066166f94bee57b473589d131fc44ff7619e2e4ee6","sha512":"4a02ab7963029c2caa4047f4e6b930f7c7af236340697f8fc0ef9967424ad3786a192c72d5b15b3d33d20d18a00eb649166da0533d19b065f38c86c525d0b732","ssdeep":"1536:gZ3kKwlmeUvgj3Lw95oSkDta2B9l4pjdXn61c:43klEeUvabwjoSitamP+jxT","tlshash":"2a33be0398419f43a55ac3a8bf030ea45f1f578ca4c6b6ee55670d9fdb283324d8e4ad","first_seen":"2026-07-07T00:13:17.956567Z","last_seen":"2026-08-05T15:23:40.752437Z","times_seen":13,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aktivasipemuluhanbimamobile.netlify.app/","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:50:52.374Z","timestamp":1783392652374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aktivasipemuluhanbimamobile.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 9945\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 07 Jul 2026 02:50:52 GMT\r\netag: \"7c2bee74369d9f2b9ff4a0853ff1c8a4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KWX7RK5G7FW2DBGMXQEKNFMA\r\ncontent-length: 5845\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30806,"size_decoded":6325,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f52b8047f8de386a354186c541a8a8ff","sha1":"f6ebf0493878af985ce386cc1402c51a3ec77fec","sha256":"f23915385a18e0b9a34e32ca8e2fe9c42bceccbdc9f58315b37f23b017ab73ed","sha512":"cc749cb6b5e35526302150179645ba7ef89553eb8a6ec7bd047b461241d360883ca4b5fdf3a7cb83bca5ba3a817cb61c7dfdd425a937c075dcd3970c9b0b7a18","ssdeep":"384:NNfhYJLmJt/byJqnmnxUxnefu6XQscEGtv0O/WWJpd5SqQh2mXQlv0uWeJJW:jALmfzyJqmnxAnT6MEev0O/xjv8Yh8","tlshash":"98d263672ab300626aa3d5e41bf75b0a3538d007d946d9183f9c63c48fc2dd5a9e3b9c","first_seen":"2026-07-07T00:21:31.549951Z","last_seen":"2026-07-07T02:51:16.649918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":18,"connect":27,"send":0,"wait":215,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-07","alert":"Detects file containing Telegram Bot API","trigger":"aktivasipemuluhanbimamobile.netlify.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"i.ibb.co.com/cSxDXS0w/Logo-Bank-Jateng-Putih-Transparan.png","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:53.169Z","timestamp":1783392653169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /cSxDXS0w/Logo-Bank-Jateng-Putih-Transparan.png HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 07 Jul 2026 02:50:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 56308\r\nlast-modified: Tue, 30 Jun 2026 06:11:06 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56308,"size_decoded":56673,"mime_type":"image/png","magic":"PNG image data, 2143 x 1084, 8-bit/color RGBA, non-interlaced","md5":"5102d05f2d0be9c68409f1f67cf37fba","sha1":"2b62a4dc1b47e57e8daf08cbeff2034227797403","sha256":"6947bb303601aabc3813ca5313518897fc9a4d2c2caf75863d9944c5d058cd3d","sha512":"bd2ea9baa12722288a415a2d32bd513bacf0308ab4c34c9a8091c7e71799e69260b39a1c982bf1bbca2192bb299d57a65c6803f85a04bbec350219c1a0dec5a7","ssdeep":"768:o0xkw5sxn07t5K5zo/mLzl9KCgPNII2NDgOrvNWQjJ0yRgse6XKmcXAzGmOJOjUQ:o0Kw5t45E49u+PgxSJ0czJ6mcAqmkak8","tlshash":"1343f1f4ed479ee2d4ed80b2510d7f703b75098e6a1237235bbca6259b671402c6a8ce","first_seen":"2026-07-07T00:13:17.958815Z","last_seen":"2026-08-05T15:23:40.750093Z","times_seen":13,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":22,"receive":41,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aktivasipemuluhanbimamobile.netlify.app/favicon.ico","fqdn":"aktivasipemuluhanbimamobile.netlify.app","domain":"aktivasipemuluhanbimamobile.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:53.270Z","timestamp":1783392653270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aktivasipemuluhanbimamobile.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nage: 9945\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 07 Jul 2026 02:50:53 GMT\r\netag: 1782974428-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KWX7RKZ1X6EJ079HFP1BKKXG\r\ncontent-length: 1229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":1663,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-20T05:25:17.954076Z","times_seen":14506,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"aktivasipemuluhanbimamobile.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/3y6Y1f3C/IMG-20260702-WA0039.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aktivasipemuluhanbimamobile.netlify.app/","date":"2026-07-07T02:50:56.061Z","timestamp":1783392656061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /3y6Y1f3C/IMG-20260702-WA0039.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aktivasipemuluhanbimamobile.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 07 Jul 2026 02:50:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41405\r\nlast-modified: Thu, 02 Jul 2026 12:01:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41405,"size_decoded":41771,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x2533, components 3","md5":"44afcb074cabf3e4884e846f59010e38","sha1":"0f685e61b657ad866cb3e065f466bb225d5f4428","sha256":"0851b953f3aa02bff65cf9a138a475af45133662127cd00f86a020379bcec152","sha512":"6f787c0d2e91bb5812b0006bea516e7faa64058c8894f3e2776e33842e439f784706d34396ccac1d3757ca2bec281d4695c47fafc0f94ea276c73ad29a324cb1","ssdeep":"768:CukcN/P4iK1SdjwO67iIxMTkCOCSapI1eAynP3iB9:9P4i8Kwr0/rtyqnPiB9","tlshash":"44039d37f74acf21d6d8273898e34b143f639430f3244462eac60e3148ab7a87d5e994","first_seen":"2026-07-07T00:13:17.960962Z","last_seen":"2026-07-22T20:17:36.427889Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}