Rekonstruksi Aktivitas Pengguna Situs Judi Online pada Smartphone Android melalui Analisis Digital Forensik

Aji Pangestu (Sekolah Tinggi Manajemen Informatika dan Komputer Jayakarta, Jakarta)
Teri Mengkasrinal (Sekolah Tinggi Manajemen Informatika dan Komputer Jayakarta, Jakarta)
Balthasar Sebastian Lumbantobing (Sekolah Tinggi Manajemen Informatika dan Komputer Jayakarta, Jakarta)

TIN: TERAPAN INFORMATIKA NUSANTARA
Vol 7 No 2 (2026): July 2026

Android smartphones retain digital artifacts that can help explain user activity, but modern Android security mechanisms restrict access to internal application data. This study identifies artifacts obtainable from a non-rooted Android 11 smartphone and evaluates their ability to support the reconstruction of online gambling website access. A descriptive qualitative method with a simulation-based digital forensic case study was conducted in Setiadarma, Tambun Selatan, Bekasi, from May to July 2026. The test device was a non-rooted Redmi 10A running Android 11. Acquisition was performed using MOBILedit Forensic, the extracted data were preserved with FTK Imager and examined with Autopsy, while Android Debug Bridge was used to validate connectivity and collect netstats and batterystats. Google Activity documentation displayed a visit entry to the simulated site on the Redmi 10A, while netstats and batterystats supported the use of Google Chrome. However, browsing history, cookies, cache, browser databases, downloaded files, screenshots, and related metadata were not found in the acquisition output. Google Activity was treated as account-level supporting evidence rather than an internal Chrome artifact recovered through non-root acquisition. Consequently, the reconstruction remained partial: Chrome use and an indication of the site visit could be supported, but a complete browser timeline could not be recovered.