# idnnews.org CAIR65 game promotion article page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/idnnews.org/ Machine-readable companion: https://phishdestroy.io/domain/idnnews.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-29 01:18:04 UTC - Last availability or vendor check: 2026-11-01 03:23:36 UTC - Stored record updated: 2026-11-01 07:22:13 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 212.90.120.121 - Registrar in stored WHOIS data: GoDaddy.com, LLC - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2021-08-16 02:55:55 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1853b-2f78-7622-abb8-8ec8f0351f70/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/idnnews.org - Certificate Transparency search: https://crt.sh/?q=%25.idnnews.org - Web Archive lookup: https://web.archive.org/web/*/https://idnnews.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package The stored idnnews.org capture shows a CAIR65 game promotion article with a registration popup; PhishDestroy's VirusTotal result reports one flagged detection. The stored capture shows an article page promoting CAIR65 as a digital entertainment and game access recommendation, with a promotional popup offering a registration button ("DAFTAR CAIR65") and a main "LOGIN" button. The page also lists popular related articles in a sidebar. The stored VirusTotal result reports 1 of 92 engines flagged the domain, with SOCRadar labeling it "phishing". No other vendor labels were supplied, so other engines' verdicts are unknown. This result does not establish impersonation or current behavior. Package revision: 2572cd3b339dbed0c1328048473e322a11e9000e1a1fba94d171b91428073fa8 Text generated (not scan time): 2026-10-29 02:48:53 Reviewed evidence snapshot: {"domain":"idnnews.org","screenshot_available":true,"page_title":"CAIR65: Sensasi Bermain Seru, Peluang Menarik Setiap Hari!","original_meta_description":"CAIR65 adalah rekomendasi khusus akses game online resmi dan terpercaya dengan layanan modern, provider populer, akses cepat, dan pengalaman bermain senang setiap hari.","initial_ai_description":"The page content 'CAIR65: Sensasi Bermain Seru, Peluang Menarik Setiap Hari!' is generic and does not provide enough information to determine if it is malicious or clean. It could be a legitimate entertainment site or a scam, but there is no specific evidence of fraud or impersonation.","metadata_observed_on":"2026-10-29","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-10-29","analysis_date":"2026-10-27","flagging_vendors":["SOCRadar"],"vendor_labels":{"SOCRadar":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T01:19:51Z","final_host":"idnnews.org","captured_on":"2026-10-29"}} Source facts (timestamps as stored): {"record_id":1701160,"first_recorded_at":"2026-10-29 02:18:04","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"SOCRadar":"phishing"},"observed_at":"2026-10-27T03:07:26Z","checked_at":"2026-11-01 04:02:21","fetched_at":"2026-10-29T01:48:19Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Lionic","SafeToOpen","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":null,"checked_at":"2026-11-01 04:02:21","fetched_at":"2026-11-01 03:02:22","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 12:01:38"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 04:30:26"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 04:23:36"}} ## Stored page captures - Primary capture: https://i.ibb.co/vC1mkG3J/f5353ed65f9a.png Captured: 2026-10-29 01:18:04 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1853b-2f78-7622-abb8-8ec8f0351f70.png Captured: 2026-10-29 01:18:04 UTC Source report: https://urlscan.io/result/01a1853b-2f78-7622-abb8-8ec8f0351f70/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/12163fe5-d6d3-4294-ab97-854106acbf80.png Captured: 2026-10-29 01:19:51 UTC Source report: https://radar.cloudflare.com/scan/12163fe5-d6d3-4294-ab97-854106acbf80 SHA-256: e5173c5fc9ccb41d9c7d6a0b6477fc61e61cb19977e322a5cefa76356ba9f3b3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T01:21:18Z", "uuid": "01a1853b-2f78-7622-abb8-8ec8f0351f70", "scanned_at": "2026-10-29T01:16:57Z", "final_url": "https://idnnews.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://idnnews.org/", "from": "http://idnnews.org/", "status": 307 } ], "ip": "212.90.120.121", "ptr": "vmi3650956.contaboserver.net", "domains": [ "asset.kompas.com", "accounts.google.com", "securepubads.g.doubleclick.net", "traid.jixie.io", "fonts.gstatic.com", "static.cloudflareinsights.com", "connect.facebook.net", "match.adsrvr.org", "assets.kompas.com", "fundingchoicesmessages.google.com", "scripts.jixie.media", "fonts.googleapis.com", "cdn.oval.id", "prebid.jixie.io", "content.jixie.io", "apis.kompas.com", "veldrive.com" ], "ips": [ "3.33.220.150", "18.64.211.116", "142.251.20.154", "192.178.183.94", "104.16.80.73", "142.251.127.84", "18.172.112.84", "142.251.14.139", "18.66.112.125", "142.251.110.95", "108.138.7.115", "142.251.20.156", "157.240.0.6", "212.90.120.121" ], "asns": [ "16509", "15169", "13335", "32934", "51167" ], "countries": [ "US", "DE", "FR" ], "link_domains": [ "plus.kompas.com", "cair65-idnnews.pages.dev", "account.kompas.com", "activity.kompas.com", "www.kompas.com", "www.facebook.com", "www.twitter.com", "t.me", "instagram.com", "www.youtube.com", "kmp.im", "www.tiktok.com", "apps.apple.com", "play.google.com", "money.kompas.com", "ifcncodeofprinciples.poynter.org", "www.kgmedia.id", "xjslcu.short.gy" ], "social": [ "https://www.facebook.com/kompascom", "https://www.twitter.com/kompascom", "https://t.me/kompascomupdate", "https://instagram.com/kompascom", "https://www.youtube.com/c/mykompascom", "https://www.tiktok.com/@kompascom" ], "doc_hash": "91b8827eb2600a89c91d131a6bbb583b29d7de040f9c11c19dec552cb5b86f89", "globals": [ "dataLayer", "googletag", "ggeac", "google_tag_data", "google_js_reporting_queue", "google_reactive_ads_global_state", "$", "jQuery", "html5", "Modernizr", "yepnope", "jixie_o", "keyword_data", "array_keywords", "jixie_p", "keywordBrandSafety", "gptadslots", "dinv", "dfp_keywords", "fb_share", "tweet_share", "plus_share", "telegram_share", "whatsapp_share", "whatsapp_share_new", "fbq", "_fbq", "checkTheme", "setTheme", "toggleDarkSetting", "setDarkCookies", "getDarkCookies", "widgetUrls", "getRandomWidgetUrl", "_0x591ea3", "Base64", "script", "_0x5dca", "curr_url", "curr_param" ], "cookies": [ "g_state", "jxuuid", "_jxx", "_jx", "_jxxs", "_jxs" ], "storage_keys": [ "_sessionIcoPlusActive", "sessionTimestamp", "__sak", "_jxx", "_jx", "_jxxs", "_jxs", "_jxmu", "_jxpitems", "_jxIt" ], "tls": { "san": [ "idnnews.org" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "idnnews.org", "protocol": "TLS 1.3", "valid_to": "2027-01-15T16:21:44Z", "valid_from": "2026-10-17T16:21:45Z" }, "domain_age_days": 1899, "apex_age_days": 1899, "tls_age_days": 11, "tls_valid_days": 89, "requests": 146, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 65, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T01:22:07Z", "uuid": "12163fe5-d6d3-4294-ab97-854106acbf80", "scanned_at": "2026-10-29T01:19:51Z", "final_url": "https://idnnews.org/", "status": 200, "history": [ { "url": "https://idnnews.org/", "status": 200 } ], "dom_hash": "54ef050780efa8b6562e0b895ad57a6af333f400acbf75bf909dde341a3f0847", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "idnnews.org", "type": "A", "value": "212.90.120.121" } ], "dnssec_valid": false, "ip": "127.0.1.2", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2021-08-16T04:55:55Z", "updated": "2026-08-12T02:37:58Z", "expires": "2027-08-16T04:55:55Z", "nameservers": [ "ns13.hawkhost.com", "ns14.hawkhost.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-29T01:48:19Z", "analysis_at": "2026-10-27T03:07:26Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 1, "suspicious": 0, "undetected": 36 }, "detections": { "SOCRadar": "phishing" }, "reputation": 0, "registrar": "GoDaddy.com, LLC", "created": "2021-08-16T04:55:55Z", "expires": "2027-08-16T04:55:55Z", "updated": "2026-08-12T02:37:58Z", "first_seen": "2024-05-20T18:57:17Z", "dns": [ { "ttl": 14386, "type": "A", "value": "212.90.120.121" }, { "ttl": 21600, "type": "NS", "value": "ns13.hawkhost.com" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:198.252.105.8 include:_spf.arandomserver.com ~all" }, { "ttl": 21600, "type": "SOA", "rname": "server.arandomserver.com", "value": "ns13.hawkhost.com" }, { "ttl": 21600, "type": "NS", "value": "ns14.hawkhost.com" }, { "ttl": 14400, "type": "MX", "value": "idnnews.org", "priority": 0 } ], "dns_at": "2026-10-27T03:12:47Z", "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763", "cert": { "san": [ "idnnews.org" ], "issuer": "Let's Encrypt / YR1", "serial": "6f84e7e871c60a758538c75d8dc61bf8915", "sha256": "3fbf2ddd1ab7ac73a80124b527ad7ca5b978a15e7e614db2d18b2a24011b41c7", "subject": "idnnews.org", "valid_to": "2027-01-15T16:21:44Z", "valid_from": "2026-10-17T16:21:45Z" }, "whois": { "registrar": "GoDaddy.com, LLC", "registrar_iana_id": "146", "registrar_url": "http://www.whois.godaddy.com", "created": "2021-08-16T04:55:55Z", "updated": "2026-08-12T02:37:58Z", "expires": "2027-08-16T04:55:55Z", "status": [ "clientDeleteProhibited", "clientRenewProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns13.hawkhost.com", "ns14.hawkhost.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client renew prohibited", "client transfer prohibited", "client update prohibited" ], "events": { "expiration": "2027-08-16T04:55:55Z", "last changed": "2026-08-12T02:37:58Z", "registration": "2021-08-16T04:55:55Z", "last update of RDAP database": "2026-10-26T03:02:31Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T01:40:05Z", "mail_config": { "mx": [ "idnnews.org" ], "spf": "v=spf1 +a +mx +ip4:198.252.105.8 include:_spf.arandomserver.com ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 6 }, "caa_records": { "domain": "idnnews.org" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-29T01:19:42Z", "first": "2009-03-28T17:27:28Z", "changes": 22, "days_archived": 23, "scans_per_day": 0, "avg_page_bytes": 7456 }, "sitemap": { "present": true, "url_count": 1 }, "social_tags": { "ogUrl": "https://idnnews.org/", "title": "CAIR65: Sensasi Bermain Seru, Peluang Menarik Setiap Hari!", "author": "CAIR65", "ogType": "article", "robots": "index, follow", "ogImage": "https://veldrive.com/QFD55LJL/4eca.png", "ogTitle": "CAIR65: Sensasi Bermain Seru, Peluang Menarik Setiap Hari!", "ogSiteName": "KOMPAS.com", "twitterCard": "summary_large_image", "twitterSite": "@kompascom", "canonicalUrl": "https://idnnews.org/", "ogDescription": "CAIR65 adalah rekomendasi khusus akses game online resmi dan terpercaya dengan layanan modern, provider populer, akses cepat, dan pengalaman bermain senang setiap hari.", "twitterCreator": "@kompascom" }, "trackers": { "requests": 102, "trackers": [ { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 4 }, { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Google Adsense", "company": "Google", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Google Marketing Platform", "company": "Google", "country": "US", "category": "Advertising", "requests": 9 }, { "name": "Google Publisher Tags", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 13 }, { "name": "Cloudflare Insights", "company": "Cloudflare", "country": "US", "category": "Site Analytics", "requests": 5 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 4 }, { "name": "Google Accounts", "company": "Google", "country": "US", "category": "Utilities", "requests": 14 } ] }, "mixed_content": { "no_sri": [ "https://connect.facebook.net/signals/config/423063207362401", "https://connect.facebook.net/en_US/fbevents.js", "https://securepubads.g.doubleclick.net/tag/js/gpt.js", "https://connect.facebook.net/signals/config/423063207362401", "https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202510160101/pubads_impl.js", "https://asset.kompas.com/data/2017/wp/js/modernizr.custom.js", "https://scripts.jixie.media/jxpublisher_3_1.min.js", "https://fundingchoicesmessages.google.com/i/pub-9012468469771973", "https://cdn.oval.id/tracker/p/kompas/oval_web_analytics_latest.js", "https://fundingchoicesmessages.google.com/f/AGSKWxWpPVWc0wOaBdOgeSjsrBNExukuzyNPCtUMMTF7u6Q8RJHOp9yRJ_e8gVO4cTyS5z_Bh-fnErXkXdPTgygcOfgWayD33Tb6Yic3YlAsYiZTXN2DS1100vdLt1-pP4onwsCEZT7x7w==" ], "third_party_scripts": 42 }, "status": { "up": true, "code": 200, "timings": { "dns": 219, "tls": 61, "wait": 179, "connect": 19, "download": 69 }, "response_ms": 547 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 188418, "co2_grams": 0.0069, "cleaner_than": 8 }, "dns_server": { "ns": [ { "ip": "198.252.96.160", "host": "ns13.hawkhost.com" }, { "ip": "198.252.97.160", "host": "ns14.hawkhost.com" } ], "zone": "idnnews.org" }, "cookies": { "cookies": [ { "name": "g_state" }, { "name": "g_state" } ] }, "location": { "ip": "212.90.120.121", "asn": "51167", "org": "Contabo GmbH", "city": "Lauterbourg", "country": "FR" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "idnnews.org" }, "dns": { "A": [ "212.90.120.121" ], "MX": [ "{\"exchange\": \"idnnews.org\", \"priority\": 0}" ], "NS": [ "ns14.hawkhost.com", "ns13.hawkhost.com" ], "SOA": "{\"nsname\": \"ns13.hawkhost.com\", \"hostmaster\": \"server.arandomserver.com\", \"serial\": 2026101903, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:198.252.105.8 include:_spf.arandomserver.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "212.90.120.121", "family": 4 }, "redirects": { "chain": [ "https://idnnews.org" ] }, "social_presence": { "profiles": [ "https://x.com/kompascom" ] }, "linked_pages": { "external": [ "https://cair65-idnnews.pages.dev/", "https://account.kompas.com/login/a29tcGFz/aHR0cHM6Ly93d3cua29tcGFzLmNvbS9qYXdhLWJhcmF0L3JlYWQvMjAyNS8wOS8wNC8xNzIwMDAzODgva29tcG9sLWNvc21hcy1kaXBlY2F0LXRpZGFrLWhvcm1hdC1wZXJuYWgtdGVyc2VyZXQta2FzdXMtcG", "https://plus.kompas.com/detail", "https://activity.kompas.com/saved", "https://activity.kompas.com/liked", "https://activity.kompas.com/minat", "https://www.kompas.com/feedback", "https://www.facebook.com/kompascom", "https://www.twitter.com/kompascom", "https://t.me/kompascomupdate", "https://instagram.com/kompascom", "https://www.youtube.com/c/mykompascom", "https://kmp.im/AGFeTy", "https://www.tiktok.com/@kompascom", "https://apps.apple.com/id/app/kompas-com-berita-terpercaya/id535483055", "https://play.google.com/store/apps/details", "https://money.kompas.com/read/2019/08/01/124215826/kompascom-kembali-jadi-pemenang-kategori-media-online-tepercaya", "https://ifcncodeofprinciples.poynter.org/profile/pt-kompas-cyber-media", "https://www.kgmedia.id/legal-privacy-id", "https://xjslcu.short.gy/vip" ], "external_count": 20, "internal_count": 7 }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2021-08-16T04:55:55Z", "updated": "2026-08-12T02:37:58Z", "expires": "2027-08-16T04:55:55Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientRenewProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "ns13.hawkhost.com", "ns14.hawkhost.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```