{"report_id":"17d4cd6f-0eab-4985-a9b0-3ac81ac90d88","version":0,"status":"done","tags":[],"date":"2026-06-28T11:48:07Z","url":{"schema":"https","addr":"bali24.pro/","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bali24.pro/","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"title":"bali24.pro/","dom":{"size":16635,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (593)","md5":"9dccba10310034a83e43972408af90bd","sha1":"46f360a387554237f744bed1baf2f9d558306c4e","sha256":"8102d9e8fad49660fbc5f97a49134b3521bba9369a8a35ffc00e1999bee15dd3","sha512":"c39a1369f4b62457efbda66b7743e6f8bd98bb74c8df26b1a247d4bd52c934c37443686bd1007f0c5dfcef810d4df0b1067d66c309f11c2fe3637411f5e1148c","ssdeep":"384:NLM8hsj8PnpRBBdGrgKz3cuA7pfXl/wftZLNgmAcuCQyVQCp7:Npsj8fzDGgSZ4pfXlCtcmSySCp7","tlshash":"9f729717c7da1047063680eaf627635b2951628fe6474f9072aea2b77fc0da13573acc","dom_hash":"domhash95fad0a570771d1d90d355acce87a58d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bali24.pro/","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-07-01T11:48:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bali24.pro","ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T11:48:11.131498Z","last_seen":"2026-06-28T11:48:11.131498Z","alert_count":0,"request_count":11,"received_data":652599,"sent_data":8901,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yii","description":"Yii is an open-source, object-oriented, component-based MVC PHP web application framework.","website":"https://www.yiiframework.com","common_platform_enumeration":"","icon":"Yii.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s13.gifyu.com","ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2014-06-29","domain_rank":1541371,"first_seen":"2023-12-26T07:35:28Z","last_seen":"2026-06-27T15:26:04.709915Z","alert_count":0,"request_count":5,"received_data":26145314,"sent_data":2690,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s12.gifyu.com","ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2014-06-29","domain_rank":1966233,"first_seen":"2023-04-14T08:35:59Z","last_seen":"2026-06-27T05:04:59.211115Z","alert_count":0,"request_count":5,"received_data":9447046,"sent_data":2690,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"45.43.142.102","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-06-25T07:56:24.282682Z","alert_count":0,"request_count":1,"received_data":802078,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegra.ph","ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":2920,"first_seen":"2016-03-03T04:27:14Z","last_seen":"2026-06-22T12:46:19.562759Z","alert_count":0,"request_count":1,"received_data":2124978,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bali24.pro/assets/e6eeae2e/yii.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45b4d3c3e9f50d5c63231e72b016e8cb","sha1":"dbbd08db02a4443bb46560aace36a0d4177af14c","sha256":"995516724f69e24ddf82e9279a65d50a6f64a2c325226f7133bda794d6bf79a5","sha512":"b803690a7284b5fe36541353b86bc081c5f93915eb09d5b98e830e6c92150a1b85e814b4e9bb4d5ae80c92e137188243f20accc2687f567c19f28f8b6ae0b874","ssdeep":"384:Oj0RfTossjpOkUeUnMkx8QfiZ9/lvitSlu11pNAd5:c0RfTosxkURMk2QfMpi0luzpOd5","tlshash":"0892a3197de330a32077747e9b9f4098a675901b212ace503c4c97b84f54eb986f2fe9","size":20953,"data":"","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-06-28T15:52:58.939054Z","times_seen":1785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/c2934a0b/js/bootstrap.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"894d79839facf38d9fd672bdbe57443d","sha1":"11277f4e04cf070a350e566b053ef2215993720c","sha256":"dbd2a35e72edc7d6bde483481a912f1c38aa57fab2747d9b071d317339ee03a2","sha512":"34fffaf69de2045e8b90adaf72c6c3d73b99bb581832ee7de1be78d34753a3ba97d3aa1b8527ec1747d25e27594e4e0a4a9104e1e7ede811ab748aa1b766842c","ssdeep":"768:K/Lx8D6XlsB92TiwZi7vu6EBI7v8vaSx4ElvhLxs7St8PsBdZsWSdA:wVGihuv8ySx4EosbyWQA","tlshash":"af7340167af921614b5b30ba8cdf614c7238901b550bd42878ad93d46f50b38a2bbffd","size":75484,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-06-29T16:11:57.335849Z","times_seen":2706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/695dc887/jquery.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0208b96062ba59d07c4495115d2b42ce","sha1":"611b7f56ab2146e1277e9258f15c55d50034dcef","sha256":"6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1","sha512":"e830b5784dc05a0d5b822b64a1a44cd65858f7c3f16cc21b860602195d74eda665cb3cef696096d67256daf0ee6109b4ea15eb5b402ce8e18a7086805569c727","ssdeep":"6144:4nFhNVls+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/IaLgeNTIPfgy1:RjTcYmD4I4Px+WK+N7TFyjeTiPflAqqi","tlshash":"b654b3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","size":292458,"data":"","first_seen":"2023-03-29T22:35:35Z","last_seen":"2026-06-29T19:40:56.060249Z","times_seen":1898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Modal] Text length:0","filename":"https://bali24.pro/","line_number":184,"column_number":21},{"level":"log","text":"[Modal] localStorage flag:map[type:null]","filename":"https://bali24.pro/","line_number":185,"column_number":21},{"level":"log","text":"[Modal] main_text is empty - modal is not shown","filename":"https://bali24.pro/","line_number":195,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"bali24.pro/","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:47:40.105Z","timestamp":1782647260105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvYaScbh8640NbOW10EL9yyvAdkdKxED8lqR47sOYq3tefq8Dc5peIa1cd1YNykHP8EujdTJEiBnJw2l77uDjkjJ%2Ftsu1vau9QVOlVT2Pem7dcXPFykh6ohjAZmU\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src https://oauth.telegram.org;\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12c753facca56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yii","description":"Yii is an open-source, object-oriented, component-based MVC PHP web application framework.","website":"https://www.yiiframework.com","common_platform_enumeration":"","icon":"Yii.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16572,"size_decoded":6660,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (603)","md5":"44798e462c08a3d9be3f8d48203b09e0","sha1":"c2414760219ea6378bd70a64e00a9cd215a33bdf","sha256":"ad34e166da25d2f53f49cc483a6d206d2c831c8d6e2014647451d78c0945a9cf","sha512":"ad5ca1c311d9d22f8795b0d4c40c66b281519770a1ea8652555811eb8e33cae5aa02e6c8a3d32563ce0b1f5b4fa1872e20eded0efdffbfde930c2dc4be99a3cd","ssdeep":"384:/LMOhRSrPGp/UyJBdGrTKrTc+2jpAoiP8fta26W0MomAcuCQyVQCp/:/PRSru1UyrGTuVapAoi+tmW0xmSySCp/","tlshash":"ea729717c7da1447063680e9e623a71b2461624fe6474f9072aed2b77fc0da53973acc","first_seen":"2026-06-28T11:48:16.896981Z","last_seen":"2026-06-28T11:48:16.896981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/695dc887/jquery.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.891Z","timestamp":1782647260891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /assets/695dc887/jquery.js HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDHTs9ULZPJyZ0ER6UcGZSLc3rTo4CJeJIHsACHJUCPhDck2jSp21LysUTPmQdbkpBKrAKwsXuw6VeExaCt3kEv5diO7kSNIlxhgDvmRc%2BISnHsmb%2FoAzMWoQtsw\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:36:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddee66-4766a\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c75449ce656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292458,"size_decoded":91711,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"0208b96062ba59d07c4495115d2b42ce","sha1":"611b7f56ab2146e1277e9258f15c55d50034dcef","sha256":"6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1","sha512":"e830b5784dc05a0d5b822b64a1a44cd65858f7c3f16cc21b860602195d74eda665cb3cef696096d67256daf0ee6109b4ea15eb5b402ce8e18a7086805569c727","ssdeep":"6144:4nFhNVls+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/IaLgeNTIPfgy1:RjTcYmD4I4Px+WK+N7TFyjeTiPflAqqi","tlshash":"b654b3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","first_seen":"2023-03-29T22:35:35Z","last_seen":"2026-06-29T19:40:56.060249Z","times_seen":1898,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bqnmN.png","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.907Z","timestamp":1782647260907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:02:35 GMT","end":"Tue, 15 Sep 2026 05:02:34 GMT"},"fingerprint":{"sha1":"B0:F8:32:3B:09:6A:A6:67:AE:47:11:D3:39:4F:C7:3F:39:B9:9B:12","sha256":"FA:05:9C:D3:7B:E8:BD:0B:4E:0F:F1:8B:82:E8:03:62:16:37:08:F4:99:01:B5:DC:78:18:7A:6A:BF:A4:77:8D"}}},"request":{"raw":"GET /images/bqnmN.png HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.0\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 6519862\r\nlast-modified: Tue, 14 Apr 2026 09:30:03 GMT\r\netag: \"69de091b-637c36\"\r\nexpires: Wed, 01 Jul 2026 11:47:41 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6519862,"size_decoded":6520207,"mime_type":"image/png","magic":"PNG image data, 2560 x 1920, 8-bit/color RGB, non-interlaced","md5":"637dd53bc30e1e277627df44c94b7b30","sha1":"e4dc7f3f3ae4b6bb1220ba7a81d993aea2215f9f","sha256":"d25bc5b9096e3aece7d88a73ec96f885da2924bb7fc1d28313068a3a69946760","sha512":"ca5b62bc0d5292444b881dc11a4e420dd7bd4b3782fcafbbc1265a73297caec3fc9f71ea4cffd2b9314998843266aedf70805761ff1e98e27afa215ab5968bbd","ssdeep":"24576:oLf7n+y09GHLiPMNbr0f0Stkbwhr40YB5rxVbVdUylM6QIlIQMBl:oLDn+y0QikprlK8mXYB5bbsCnIQ0","tlshash":"d22533b6c072f0fc4967fa228516655037ad198a533a8f0f2ebdd75c3805790e8a1fe9","first_seen":"2026-06-28T11:48:16.898991Z","last_seen":"2026-06-28T11:48:18.859338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1352,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":145,"receive":911,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s12.gifyu.com/images/bEPhE.png","fqdn":"s12.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.917Z","timestamp":1782647260917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 18:35:22 GMT","end":"Mon, 14 Sep 2026 18:35:21 GMT"},"fingerprint":{"sha1":"6E:1C:26:DD:EF:A7:59:48:3C:D0:11:19:7B:7F:25:5B:BF:75:8A:08","sha256":"3C:78:CA:4E:7E:23:51:F7:8E:2F:99:73:CD:E9:56:0E:C2:46:5F:3C:78:F0:B9:5C:BB:2D:DF:E1:CB:BB:79:85"}}},"request":{"raw":"GET /images/bEPhE.png HTTP/1.1\r\nHost: s12.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1230901\r\naccess-control-expose-headers: Seaweed-X-Amz-Etag,Seaweed-X-Amz-Owner,Content-Disposition\r\ncontent-disposition: inline; filename=bEPhE.png\r\netag: \"4011e66312076466113fc22faa20ba7e\"\r\nlast-modified: Tue, 09 Jun 2026 14:03:24 GMT\r\nseaweed-x-amz-etag: 4011e66312076466113fc22faa20ba7e\r\nseaweed-x-amz-owner: admin\r\nx-amz-meta-mtime: 1766594487\r\nx-amz-request-id: 18BD3BA13FD94D65052FBE12\r\nexpires: Tue, 28 Jul 2026 11:47:41 GMT\r\ncache-control: max-age=2592000, public, immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1230901,"size_decoded":1231592,"mime_type":"image/png","magic":"PNG image data, 1280 x 960, 8-bit/color RGB, non-interlaced","md5":"257aac4d387d33ccbfb48c240cce3718","sha1":"7103fb104fe85f3e502e978364a0f8cfc90b21a9","sha256":"9e56855aa78d89ef3059e5372dcc53fb57449835cedbef060c8842f3fdda9e2e","sha512":"8f70e51a582ff80ea8c1d347f71e1553d4534bb3a10e197286c57864a624eb25a1e4204b2f6cefe0040f287233f324b4a16f87a1678c533ae0ca34f62258e1b0","ssdeep":"24576:z8ZXcnvG0m+h8O0tLA7YH1AU9Ee15MLYV3WKxjwIJDJbqOa:zGMnvG0m4N0LA7YH1AIE3YV5WIJDY","tlshash":"ef2533c8e8e5b7f2c97a3c72982c3e949900a4e8d7d7875e5538de1d166b3e50683f08","first_seen":"2026-06-28T11:48:16.900225Z","last_seen":"2026-06-28T11:48:18.866801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":24,"receive":833,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s12.gifyu.com/images/b9j0K.png","fqdn":"s12.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.919Z","timestamp":1782647260919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 18:35:22 GMT","end":"Mon, 14 Sep 2026 18:35:21 GMT"},"fingerprint":{"sha1":"6E:1C:26:DD:EF:A7:59:48:3C:D0:11:19:7B:7F:25:5B:BF:75:8A:08","sha256":"3C:78:CA:4E:7E:23:51:F7:8E:2F:99:73:CD:E9:56:0E:C2:46:5F:3C:78:F0:B9:5C:BB:2D:DF:E1:CB:BB:79:85"}}},"request":{"raw":"GET /images/b9j0K.png HTTP/1.1\r\nHost: s12.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1497485\r\naccess-control-expose-headers: Seaweed-X-Amz-Owner,Seaweed-X-Amz-Etag,Content-Disposition\r\ncontent-disposition: inline; filename=b9j0K.png\r\netag: \"8baf984d805738676e93b112b017f2a5\"\r\nlast-modified: Tue, 09 Jun 2026 12:07:48 GMT\r\nseaweed-x-amz-etag: 8baf984d805738676e93b112b017f2a5\r\nseaweed-x-amz-owner: admin\r\nx-amz-meta-mtime: 1763993952\r\nx-amz-request-id: 18BD3BA13FDA1ED0B1C58EB5\r\nexpires: Tue, 28 Jul 2026 11:47:41 GMT\r\ncache-control: max-age=2592000, public, immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1497485,"size_decoded":1498176,"mime_type":"image/png","magic":"PNG image data, 960 x 1280, 8-bit/color RGB, non-interlaced","md5":"3f01836f2a90ed9bb7c75c39eeebd396","sha1":"ef580fefa2a2d2081951bad025f3df1ea4d5578d","sha256":"bc40e2a6cef7de97d136ff5b38f7d0ef6780769e9054206846efef5fae2e080e","sha512":"25a0094fe690ebda27da1f9f9fe04ea11c21cc05270daa26f5607b4a90aa17a5f3137f8b24e47dcde913f145180de3e1c2806406b1b05f435769cf29eec08453","ssdeep":"24576:hUi6PMmcQNMOB1g0HxGdkcBImjk8Hhdjf7mbTOqXnY+Ay+wJ:h/A91VHxGdkTMpHn7mbpXY+dJ","tlshash":"132533a2c1c0e6f6a573a639c22558637c3609a4f7631f0dd439594d67783c297b2f83","first_seen":"2026-06-28T11:48:16.90147Z","last_seen":"2026-06-28T11:48:18.870462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1214,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":24,"receive":896,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s12.gifyu.com/images/bEPkg.png","fqdn":"s12.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.924Z","timestamp":1782647260924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 18:35:22 GMT","end":"Mon, 14 Sep 2026 18:35:21 GMT"},"fingerprint":{"sha1":"6E:1C:26:DD:EF:A7:59:48:3C:D0:11:19:7B:7F:25:5B:BF:75:8A:08","sha256":"3C:78:CA:4E:7E:23:51:F7:8E:2F:99:73:CD:E9:56:0E:C2:46:5F:3C:78:F0:B9:5C:BB:2D:DF:E1:CB:BB:79:85"}}},"request":{"raw":"GET /images/bEPkg.png HTTP/1.1\r\nHost: s12.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 2445322\r\naccess-control-expose-headers: Seaweed-X-Amz-Etag,Seaweed-X-Amz-Owner,Content-Disposition\r\ncontent-disposition: inline; filename=bEPkg.png\r\netag: \"8456dd5ce73b63c5f1a68811b4df4608\"\r\nlast-modified: Tue, 09 Jun 2026 14:03:32 GMT\r\nseaweed-x-amz-etag: 8456dd5ce73b63c5f1a68811b4df4608\r\nseaweed-x-amz-owner: admin\r\nx-amz-meta-mtime: 1766595386\r\nx-amz-request-id: 18BD38DD9086BCE35BE59919\r\nexpires: Tue, 28 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=2592000, public, immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2445322,"size_decoded":2446013,"mime_type":"image/png","magic":"PNG image data, 960 x 1280, 8-bit/color RGB, non-interlaced","md5":"a841ce67394fdf539da6eb4a75832cb7","sha1":"9ab93518bcf8782717bbcb72e0308cf909098707","sha256":"33e15458d3709632e55e15d57cf00e3e594d87f1e356784dc79c80a780cb06b2","sha512":"5daf6313be44ab847a7b4fdc309338b04700c9ccab244f85e5281445c1683fda14ae0a517872da4ad9693500339aeb9fc0e52647000dc4a28a7c8cab697f19db","ssdeep":"24576:1a9mfQqH4E/2Q5Ba1ebvaXfBwrWTY1cpLnLxPDNbnH:1mcQmP/95Ba1ycZZrfBdH","tlshash":"8e252312c3cb6bf0e3279dcb862c95b06e5ed829b3a9c3a59531c9d8865cfc1248df45","first_seen":"2026-06-28T11:48:16.902665Z","last_seen":"2026-06-28T11:48:18.871682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":57,"receive":1180,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/images/favicon.svg","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:42.350Z","timestamp":1782647262350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ju%2B4h%2FxDPFjRgM%2FoB9JbpFKih8FyQYvs6M7SoeoypRJ%2BNsGX2ap%2FFHMRNIN00iaXmc%2FmpCasGP%2FTKDTcKRgj6vYx903ussJ15fFKgtCECaHMkkzKJx0LdKF33b9k\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:28:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddecb0-589\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c754dbd5356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":1374,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"344afc1aff1a45a81da81b367df7e899","sha1":"fd90a9234c1e1b3e23b804599ddd76042c19237c","sha256":"94bf7be48d2a6c02f807790fd85b4acb14854839ffc39016659b4f3b469383d2","sha512":"c8de7b647badd5b6816ea312568cd0f14f6e1da4c7b9e4c6641b97ecef3dc801e8610a0cf2eb18593bbdbfeb990f76644e191f9e264e06e46af03d0c2a25c1a8","ssdeep":"","tlshash":"6c21460a58a4886e8546e645c3c7ec4ca90e9183a9535befb27b4dcb0b72569044f3f7","first_seen":"2026-06-28T11:48:16.904161Z","last_seen":"2026-06-28T11:48:18.874215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s12.gifyu.com/images/bEegt.png","fqdn":"s12.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.915Z","timestamp":1782647260915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 18:35:22 GMT","end":"Mon, 14 Sep 2026 18:35:21 GMT"},"fingerprint":{"sha1":"6E:1C:26:DD:EF:A7:59:48:3C:D0:11:19:7B:7F:25:5B:BF:75:8A:08","sha256":"3C:78:CA:4E:7E:23:51:F7:8E:2F:99:73:CD:E9:56:0E:C2:46:5F:3C:78:F0:B9:5C:BB:2D:DF:E1:CB:BB:79:85"}}},"request":{"raw":"GET /images/bEegt.png HTTP/1.1\r\nHost: s12.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1546328\r\naccess-control-expose-headers: Seaweed-X-Amz-Etag,Seaweed-X-Amz-Owner,Content-Disposition\r\ncontent-disposition: inline; filename=bEegt.png\r\netag: \"3c7855e9f98acae474ab803e3d031439\"\r\nlast-modified: Tue, 09 Jun 2026 14:44:12 GMT\r\nseaweed-x-amz-etag: 3c7855e9f98acae474ab803e3d031439\r\nseaweed-x-amz-owner: admin\r\nx-amz-meta-mtime: 1766703692\r\nx-amz-request-id: 18BD3BA13FD934DBBB7AEAD9\r\nexpires: Tue, 28 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=2592000, public, immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1546328,"size_decoded":1547019,"mime_type":"image/png","magic":"PNG image data, 960 x 1280, 8-bit/color RGB, non-interlaced","md5":"bba37adfb91c9e9b3f0041764f6dbe0c","sha1":"f61be29097ec20bc6032b76646b5c880aa609c47","sha256":"2c565520b1c6a8ed049022ef1d728ec3506f52312e30a7c0f7b40bc0ee1ffbe6","sha512":"aad8ef97496b7e076a1a5ff3e4e503a060c0e48534123683695aa21d0a31c129e7c09f8f9fdb49e0b25720645f84d36b30a212e07d85ff2455a0fb75f096a1a1","ssdeep":"24576:bNdeXS82oNd0LJo1ziG2J8UucSEqICYKcSMSq5f4i:RBG6LW1z5k8wVjF9Sowi","tlshash":"412523c452e1aef1eca69d418a3bb77cec8841189a64c9bf56b3f40d743c3562696fc0","first_seen":"2026-06-28T11:48:16.905138Z","last_seen":"2026-06-28T11:48:18.866059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":30,"receive":1232,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/css/site.css","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.551Z","timestamp":1782647260551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /css/site.css HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eA1q1RMelnqc0%2BeAwHLcBtVCaLw7H2Zppp%2FQl%2BMfmEZBjAAFzTPGxx1vh6ORv69tSrKuHz8SXdPO5X%2FLwSYYnxvHJ8RLZAxZKXKK0%2FsMmPM%2BjY5DUKGuyAXAtFl9\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:33:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddedd1-92d0\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c75427cd656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37584,"size_decoded":9633,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"56f7888db5d52b3fc52379de40748b64","sha1":"4b4adc95cb67f4d7142f37895a2c82c4cf68aae0","sha256":"478e350c17dd117b4226db19a1a056e9eec3648bfb80178cae4490b67d97237c","sha512":"dce9a15bd62c76fe70b0e3b28fedbd7d5b176cc521eba1c9a42bd70054354233419a229be72573a447109ff2d8a859db491f161dadd085ec1366a09f58a3fbf0","ssdeep":"384:Hx+NqaQ61qAGQLFSXN8DP7HOBvT7quLgilM/TLg0hGpRwgG8Zy8PhMpinZsw4F8:Hx+8aQHAGQLFSXSyFaLg00IUvysP","tlshash":"b1f28642ab6329927a17c4647bab5786632c2103d40bd97d7b592058cfcd6f8d2f2f8c","first_seen":"2026-06-28T11:48:16.906139Z","last_seen":"2026-06-28T11:48:18.8652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/e6eeae2e/yii.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.895Z","timestamp":1782647260895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /assets/e6eeae2e/yii.js HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW0fxFRQc4%2F2tBq29iPfO5hAXVaNER2ebxTB%2FFT9OhN8aRi48ILGC2MefVFgKKBcp%2Fwkfct5ZETIeErA9fLs2R7iBryp6ez%2B3IoLnG8AYAFKG%2BZHH5FhDha3fMDj\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:36:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddee66-51d9\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c75449ce756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20953,"size_decoded":6944,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"45b4d3c3e9f50d5c63231e72b016e8cb","sha1":"dbbd08db02a4443bb46560aace36a0d4177af14c","sha256":"995516724f69e24ddf82e9279a65d50a6f64a2c325226f7133bda794d6bf79a5","sha512":"b803690a7284b5fe36541353b86bc081c5f93915eb09d5b98e830e6c92150a1b85e814b4e9bb4d5ae80c92e137188243f20accc2687f567c19f28f8b6ae0b874","ssdeep":"384:Oj0RfTossjpOkUeUnMkx8QfiZ9/lvitSlu11pNAd5:c0RfTosxkURMk2QfMpi0luzpOd5","tlshash":"0892a3197de330a32077747e9b9f4098a675901b212ace503c4c97b84f54eb986f2fe9","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-06-28T15:52:58.939054Z","times_seen":1785,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bq662.jpg","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.909Z","timestamp":1782647260909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:02:35 GMT","end":"Tue, 15 Sep 2026 05:02:34 GMT"},"fingerprint":{"sha1":"B0:F8:32:3B:09:6A:A6:67:AE:47:11:D3:39:4F:C7:3F:39:B9:9B:12","sha256":"FA:05:9C:D3:7B:E8:BD:0B:4E:0F:F1:8B:82:E8:03:62:16:37:08:F4:99:01:B5:DC:78:18:7A:6A:BF:A4:77:8D"}}},"request":{"raw":"GET /images/bq662.jpg HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.0\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 215510\r\nlast-modified: Fri, 17 Apr 2026 10:56:55 GMT\r\netag: \"69e211f7-349d6\"\r\nexpires: Wed, 01 Jul 2026 11:47:41 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215510,"size_decoded":215854,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"a189d1584beb390ae75ebc9b0f6d7f03","sha1":"7efe9a0e3cdb16626491c2aa070ff5fb591ac5a8","sha256":"5c7853f352cec04703d98e640858a6cddc7ffa114cca4c9f56d9aaada426e068","sha512":"f39673fe55ab605e744ed856342008bce0affa334cb328766bbc11fcbe09340ee0512b2136ecd561c0367f00ec029c4374e9bbc52ad07b8f1b58812382cc6df3","ssdeep":"6144:5Xfz92fPvfOdLfffUffXflfMf/dhcvXz4aY7zqzfVbf+ffJ4fn9FFqUzoeOG80Aw:5Xfz92fPvfOdLfffUffXflfMf//cvXzL","tlshash":"5524024c2b0fc5db7833c2ff6c555dae48ee09291a72366f5ec52438a1c9676c4a8cd8","first_seen":"2026-06-28T11:48:16.907751Z","last_seen":"2026-06-28T11:48:18.860846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":142,"receive":11,"ssl":279},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bqnmk.png","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.911Z","timestamp":1782647260911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:02:35 GMT","end":"Tue, 15 Sep 2026 05:02:34 GMT"},"fingerprint":{"sha1":"B0:F8:32:3B:09:6A:A6:67:AE:47:11:D3:39:4F:C7:3F:39:B9:9B:12","sha256":"FA:05:9C:D3:7B:E8:BD:0B:4E:0F:F1:8B:82:E8:03:62:16:37:08:F4:99:01:B5:DC:78:18:7A:6A:BF:A4:77:8D"}}},"request":{"raw":"GET /images/bqnmk.png HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.0\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 7248490\r\nlast-modified: Tue, 14 Apr 2026 09:30:39 GMT\r\netag: \"69de093f-6e9a6a\"\r\nexpires: Wed, 01 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7248490,"size_decoded":7248835,"mime_type":"image/png","magic":"PNG image data, 2560 x 1920, 8-bit/color RGB, non-interlaced","md5":"63972ac39a0e8cca5fc9af9bd5969e8b","sha1":"d379db9e6d285e9dfa565f4ac9366a6089231de1","sha256":"33cfa749cf8d8ff4e1b86aa846b1d856afcc1b375162f82243b464aaf7307e58","sha512":"4c6c856d724c9874e3a27d61f94fdf0e1bbb230cc68fbec0d3d72f526cbcc742a2191373f9abe0e51b3592b78d42eef6e32c31aab2e6327a78d4e40e2082494f","ssdeep":"24576:n4MvvoQMVDEMfjDwMkazKlcdi3lT6JVpsL+leFE:twCcXm6YTYVpjea","tlshash":"be2523ede0c72bf29967c518ac88d4616f8816d2375b470006f6c75e21fbbe4da9ed20","first_seen":"2026-06-28T11:48:16.908945Z","last_seen":"2026-06-28T11:48:18.862127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":16,"receive":1126,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/CKn0Wmhr/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.102","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.920Z","timestamp":1782647260920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /CKn0Wmhr/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 801712\r\nlast-modified: Mon, 24 Nov 2025 14:44:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":801712,"size_decoded":802078,"mime_type":"image/png","magic":"PNG image data, 599 x 800, 8-bit/color RGBA, non-interlaced","md5":"60f4566ae87cdd1feedfb648d21ed09d","sha1":"62751dbb17bc1d939e886a14f58b488e5dee2e32","sha256":"45b54b522a3b931cfece74bdac668a256db5d8508202dd25bc86edf8ab283919","sha512":"64a3493b2ac456ae0a18a610193e361ccf7810963f7ba20c4f05197e93c885087d00686edec1cfc27c7daeb9ed0c9385e352f8b21cc11324161ae75f073554a9","ssdeep":"24576:O0G/jAOaGHLg/sX4KUdg9YwNtSDlX/Df4eoGU:FTjGHMkoNdqtSZLFoJ","tlshash":"2f0533d0848d7f32c509503b5176c291b2fb734bb9bc2bf4a983a1d18d7b5e5268ab13","first_seen":"2026-06-28T11:48:16.909953Z","last_seen":"2026-06-28T11:48:18.871088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":67,"receive":370,"ssl":282},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/fonts/fontello.woff2?58234571","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:41.050Z","timestamp":1782647261050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /fonts/fontello.woff2?58234571 HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://bali24.pro/css/site.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Jan 2020 13:42:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e1dc552-16cc\"\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QA9nNYZqZH71LblmBl7SaqqDaAOTqhgm34TpEAM96g%2F0%2BvKcjPXhsfDn%2BFrTVs8e3RW7KgT3Nvo6W18oiD62OpdQy9lFt8dluIZkYjbmc%2FOo3OJvIBISs88mt1tS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12c75459cf556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5836,"size_decoded":6726,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5836, version 1.0","md5":"343a1a88f4c8e61ba9e0ac05b6a7cef9","sha1":"0fc489f8e6e9b659b50140720902836331d62454","sha256":"fb3e7fd94f01311c60f6d0aeec558b7e3e901f6fae37c0aa508bc8534aaa46ec","sha512":"c82c6b5dc6130d01e6dc838a4935c4717681cad093ed35a6238dae05a6597924529075154ca71ce7366b583aa9eee5bf29649da7597f6889c1d18fe853e40954","ssdeep":"96:2tj3tz5hqPMsYRCKB6HVz3JJnYvrWv6TsUmcVBvYy8/54dPyOOmTlZh:4j3ZqPMsKWJNYa6QQCy8/5maQHh","tlshash":"e2c17eb8a29d8818c227277a1e4074a91f71a6326152ddbff90fccd334d7b829ae4549","first_seen":"2024-10-19T23:19:55.732892Z","last_seen":"2026-06-28T11:48:18.872508Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/c2934a0b/js/bootstrap.js","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.897Z","timestamp":1782647260897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /assets/c2934a0b/js/bootstrap.js HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfO6RwyNgEoXYF%2BHgqHDPbGrlqL3rUq%2F2dxl5Daov%2BSAM7Ujm49hfLSPpcd6kzXrqfGVQeOZpQNYtCIhUszDASZSta58dOHZxNwBX8VMuZBDIxH69Q5lnC3NPLW0\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:36:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddee67-126dc\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c75449ce856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75484,"size_decoded":18112,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"894d79839facf38d9fd672bdbe57443d","sha1":"11277f4e04cf070a350e566b053ef2215993720c","sha256":"dbd2a35e72edc7d6bde483481a912f1c38aa57fab2747d9b071d317339ee03a2","sha512":"34fffaf69de2045e8b90adaf72c6c3d73b99bb581832ee7de1be78d34753a3ba97d3aa1b8527ec1747d25e27594e4e0a4a9104e1e7ede811ab748aa1b766842c","ssdeep":"768:K/Lx8D6XlsB92TiwZi7vu6EBI7v8vaSx4ElvhLxs7St8PsBdZsWSdA:wVGihuv8ySx4EosbyWQA","tlshash":"af7340167af921614b5b30ba8cdf614c7238901b550bd42878ad93d46f50b38a2bbffd","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-06-29T16:11:57.335849Z","times_seen":2706,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/fonts/Jost-Regular.woff2","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:41.046Z","timestamp":1782647261046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /fonts/Jost-Regular.woff2 HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://bali24.pro/css/site.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 07 May 2020 14:10:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5eb416ee-51cc\"\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYzWeIFdX6S0BcTF6l69VNagK8Vo55yS%2FAbglAcjavK%2FBR5dyvYXYXzJ7vZGjX7iKZvShQwqrOTehvs%2Bf6bx9PTKcy0wlXk5YnePwCSS2hX1Tw%2Bj5oHVsfiAUnwz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12c75459cf356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20940,"size_decoded":21830,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20940, version 1.0","md5":"8543500d86adc1b909a6a9d15a0b78de","sha1":"fe7f6d077a78ede08ea1a5d28ba246e0d276824c","sha256":"facfdcab54e76af68acb9cc1133d4005bf8003cd33a79f5f758cc20cc41a3797","sha512":"60c63165fb56359f2c2174ef0a4aeeef63594ea2fdd40be41392a364d7b1481798a964f6158708b16128f9f66f787f060636f5ab8909809d1fe7f268d713cf0f","ssdeep":"384:WWXqi7N1iigQYCjNWi2yTvkflLPj8iHZQc3FBfexuBczLSdwa+p5r:WYF7uifJjL2yDclDj8iHZQoFBGxe8e4d","tlshash":"bd92e0cf16d6a407fa80a072e9eece03aa008b90025b7e91a7fd517169c914d67afd0d","first_seen":"2026-06-28T11:48:16.912993Z","last_seen":"2026-06-28T11:48:18.863941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/fonts/Jost-Bold.woff2","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:41.048Z","timestamp":1782647261048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /fonts/Jost-Bold.woff2 HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://bali24.pro/css/site.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 07 May 2020 14:10:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5eb416ee-5f40\"\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ri4RjCkuM0EqDpWx7nHzVlEe2TbIFTsgag4dU4gap0u5rdTxmCUh8Fc136b%2FXQiGxRpdLUHDBEposIkUD3HzePpnFqW36WFonY07GszKcS95%2Bw%2FtkdGY7trGJ5RN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12c75459cf456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24384,"size_decoded":25272,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24384, version 1.0","md5":"707ac8470dcf7b61c0706feef965a6df","sha1":"6fc86250f93207fd1cedf721a00a4bb8e3f5f4d2","sha256":"56489b0f7c907786ef6647d867b802456459d052486ba02633217801eece1250","sha512":"f99639a1ecde68066f891e46199637d646d171e5fddf23eefec52551d2242fc5f34215669ed261a9a89bffd5e9c0f3f5f74d46db8887b678d96bc6e33f53313a","ssdeep":"384:dLrPgk5brsrX1H2JNriiLt6PrvYE5rVkaAdkVfsspl/JSzGsoiTl2ZOrA6rRu8U:dHgIK2JNOzzYA5HJ/JSzGsoikUS","tlshash":"cbb2e1ec9ed5781afb69e3f761b2a82f737d25802fd9a062424250f5f93d4ac4071a14","first_seen":"2026-06-28T11:48:16.914087Z","last_seen":"2026-06-28T11:48:18.867449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/f753f07b7f0e5cf51ecc1.png","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.916Z","timestamp":1782647260916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/f753f07b7f0e5cf51ecc1.png HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 28 Jun 2026 11:47:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2118653\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 28 Jun 2026 14:47:40 GMT\r\netag: \"29da0852599eb5fd18f440770689ab1083b02c0a\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2124600,"size_decoded":2119031,"mime_type":"image/png","magic":"PNG image data, 1280 x 960, 8-bit/color RGB, non-interlaced","md5":"7c3c6a7f858d85db1c79fd3e547f7971","sha1":"4b4b80fbbfd9b7f41b9e51c0db3ee2cdaf347df3","sha256":"b1800f6392a0e25faa46d3fc8349da92441066a279da87159f5b9898276fd680","sha512":"ce1875fd02092a5e167e552bc9e9b4453d8708d1211049d8949960420a2fdb1793491e2976fbf72e24213bdcfca3e84f576ad8cb79ffe0ebe1167372fcfe3f26","ssdeep":"24576:DOeBcqspcFJBgqtQICQ2b7OkUp1CxAjJ93kd+9yUrD:6uUgEq97w9E1CydR","tlshash":"c22533729add3e2398ddc29807288015f6eef1dbc0dfd814004b9de963ab7de9416399","first_seen":"2026-06-28T11:48:16.915104Z","last_seen":"2026-06-28T11:48:18.868707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":3,"connect":20,"send":0,"wait":110,"receive":253,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:47:39.937Z","timestamp":1782647259937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://bali24.pro/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPDGr5vofWhckmtyVmF4RtYPSfh0E6%2FfTHhs6ltbqPNeHNGJd2VCsJ3FqF%2F9c3rcxTnw9VF5JhLzVNs5pwbY1ZbWCg%2BpNmZPq0SjjxoSLTST6Wyxo872YC6QMdko\"}]}\r\npriority: u=0,i\r\nset-cookie: shop0=nrahsev7upkbacaaa78p6tbghc; path=/; HttpOnly\nclient_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; path=/; HttpOnly; SameSite=Lax\n_csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src https://oauth.telegram.org;\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12c753edcc256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T20:32:15.499955Z","times_seen":16835046,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":8,"connect":20,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bali24.pro/assets/c2934a0b/css/bootstrap.css","fqdn":"bali24.pro","domain":"bali24.pro","tld":"pro"},"ip":{"addr":"104.21.95.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.549Z","timestamp":1782647260549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bali24.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 14:59:35 GMT","end":"Wed, 23 Sep 2026 15:58:10 GMT"},"fingerprint":{"sha1":"EA:9C:77:C2:E4:B4:4B:BE:A3:02:4A:59:17:F4:0F:AE:1A:4F:E6:A8","sha256":"4F:D0:78:95:5F:D4:81:A6:93:60:E0:CF:58:3F:8A:E6:27:D6:12:1B:9D:26:00:E6:C2:F8:B0:90:BD:32:F4:60"}}},"request":{"raw":"GET /assets/c2934a0b/css/bootstrap.css HTTP/1.1\r\nHost: bali24.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: shop0=nrahsev7upkbacaaa78p6tbghc; client_id=e9e7f907a98ee86bb20303014b5987cfdc6953d500201799d43069315780ec65a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22client_id%22%3Bi%3A1%3Bi%3A1860155035%3B%7D; _csrf-shop0=3c2cc9c54d16443ee2962fd9491c6e2b4073cc98fdbc558d0d3e26f670e17acba%3A2%3A%7Bi%3A0%3Bs%3A11%3A%22_csrf-shop0%22%3Bi%3A1%3Bs%3A32%3A%22zqUigTPhd8CMriY9BtupbcEQd3RqUr5E%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8M5D9P%2FCE1OZAoGVI7vLMsPw6SikbSF70wGRlbMQzGr0ld2iBZIgcbaXxB2CI54TzYau7uX7kuwIsRyFDx4Wb%2B6pIHFyGE16HB4akMiJISvI2OE8VAOwTV9ykWjd\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 14 Apr 2026 07:36:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ddee67-23a0d\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: a12c75427cd556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145933,"size_decoded":23938,"mime_type":"text/css","magic":"ASCII text, with very long lines (386)","md5":"2dbb985a5bb6dd8ef0a7b21d290ea9ae","sha1":"f8676e1f4a902a63088f45982f3f9b6a6c401b47","sha256":"d170052c16caec3810f2dee6456539045d8e326f6d8ed7c7f78e59ed34de348a","sha512":"986ed7a3a5cb950d772463d02e02f123b6f3f10944aebb04f6b6100d1805fba0254079bd4e7e5b87fbda20ac4198cf6650b3c2eb28b30211262b21a0347088be","ssdeep":"1536:RP2v8UU8K3LVH5h8BICxV3gzUNbDYv8/nG/BP9IZpHWJ23yJ8:RyUNLhmIGgAdU8/G/BP9IZpHWJ23n","tlshash":"bae394d8f6b039403223c09835939e52b71da143d41fed7ab7a235acafc91958573b8a","first_seen":"2023-04-07T10:31:45Z","last_seen":"2026-06-29T06:44:48.429134Z","times_seen":1527,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bqnmE.png","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.906Z","timestamp":1782647260906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:02:35 GMT","end":"Tue, 15 Sep 2026 05:02:34 GMT"},"fingerprint":{"sha1":"B0:F8:32:3B:09:6A:A6:67:AE:47:11:D3:39:4F:C7:3F:39:B9:9B:12","sha256":"FA:05:9C:D3:7B:E8:BD:0B:4E:0F:F1:8B:82:E8:03:62:16:37:08:F4:99:01:B5:DC:78:18:7A:6A:BF:A4:77:8D"}}},"request":{"raw":"GET /images/bqnmE.png HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.0\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 6393485\r\nlast-modified: Tue, 14 Apr 2026 09:30:31 GMT\r\netag: \"69de0937-618e8d\"\r\nexpires: Wed, 01 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6393485,"size_decoded":6393830,"mime_type":"image/png","magic":"PNG image data, 1920 x 2560, 8-bit/color RGB, non-interlaced","md5":"ef6b4127a80c20e23c77959e6b3a66f3","sha1":"347263d61cd7df82ebe174c18d2e7cd29a988b01","sha256":"c9ed6448045382353a24d389035184b06a9521921d45934b614decd517b8a074","sha512":"f2a9276f5349d67527d6991df5e011838726d0858e83fd93f79d7d7c84f03955050a444349dd951ce309375472e4784988a261aebe70047cf2c56da438aeeb1b","ssdeep":"24576:0ScS54uTRAkkaN5d0Aw9oqfksSHBIh8xXhk6HuB:0SrTakkaN04HBIhaDc","tlshash":"d92533601bc16fb4bd5f8e98c5aea5f0b1ce6c7e030185c6a9ebfa48b5807409785f61","first_seen":"2026-06-28T11:48:16.917179Z","last_seen":"2026-06-28T11:48:18.856664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":66,"receive":985,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bqnmm.png","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.913Z","timestamp":1782647260913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:02:35 GMT","end":"Tue, 15 Sep 2026 05:02:34 GMT"},"fingerprint":{"sha1":"B0:F8:32:3B:09:6A:A6:67:AE:47:11:D3:39:4F:C7:3F:39:B9:9B:12","sha256":"FA:05:9C:D3:7B:E8:BD:0B:4E:0F:F1:8B:82:E8:03:62:16:37:08:F4:99:01:B5:DC:78:18:7A:6A:BF:A4:77:8D"}}},"request":{"raw":"GET /images/bqnmm.png HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.0\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 5766243\r\nlast-modified: Tue, 14 Apr 2026 09:30:59 GMT\r\netag: \"69de0953-57fc63\"\r\nexpires: Wed, 01 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5766243,"size_decoded":5766588,"mime_type":"image/png","magic":"PNG image data, 1920 x 2560, 8-bit/color RGB, non-interlaced","md5":"fcf0e19df98b4c72e5a7e8711ade7998","sha1":"7288952d3e4cf730889956a7533e7b38ecc111ff","sha256":"fe28d92e8f70504377c9732e47f8c7ed1996fe242b75c21a7a6f51f1ba8c6ce8","sha512":"7dbb9985a6b6527b52d29b10c9a6cc01dc99d82fbc3228c5484c45528b7adfa65a219145ae8f728fa033611b3f8e46afaf9ac7ec53c0269b481ad2b054c29b5e","ssdeep":"24576:LxDuvBSx2IM5U+gWNaKMc65O7LvMqONmlTGGFe7w:N6+BM5UcNa6kO7LkxNuX","tlshash":"b9253385d5ff81f89d6ba0902814a954681a93ffb3780e139db4c917f4bcf922bc8d49","first_seen":"2026-06-28T11:48:16.918623Z","last_seen":"2026-06-28T11:48:18.868089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":65,"receive":849,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s12.gifyu.com/images/bEPk6.png","fqdn":"s12.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"37.27.65.153","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bali24.pro/","date":"2026-06-28T11:47:40.923Z","timestamp":1782647260923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gifyu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 18:35:22 GMT","end":"Mon, 14 Sep 2026 18:35:21 GMT"},"fingerprint":{"sha1":"6E:1C:26:DD:EF:A7:59:48:3C:D0:11:19:7B:7F:25:5B:BF:75:8A:08","sha256":"3C:78:CA:4E:7E:23:51:F7:8E:2F:99:73:CD:E9:56:0E:C2:46:5F:3C:78:F0:B9:5C:BB:2D:DF:E1:CB:BB:79:85"}}},"request":{"raw":"GET /images/bEPk6.png HTTP/1.1\r\nHost: s12.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bali24.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sun, 28 Jun 2026 11:47:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 2723555\r\naccess-control-expose-headers: Seaweed-X-Amz-Etag,Seaweed-X-Amz-Owner,Content-Disposition\r\ncontent-disposition: inline; filename=bEPk6.png\r\netag: \"75b7eb2d4f50967e96aa465d3b1d3785\"\r\nlast-modified: Tue, 09 Jun 2026 14:03:32 GMT\r\nseaweed-x-amz-etag: 75b7eb2d4f50967e96aa465d3b1d3785\r\nseaweed-x-amz-owner: admin\r\nx-amz-meta-mtime: 1766595391\r\nx-amz-request-id: 18BD38DD8ED31B670BA19D3B\r\nexpires: Tue, 28 Jul 2026 11:47:40 GMT\r\ncache-control: max-age=2592000, public, immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2723555,"size_decoded":2724246,"mime_type":"image/png","magic":"PNG image data, 1280 x 960, 8-bit/color RGB, non-interlaced","md5":"495ee246779a8b2aa2bf6369aed5644b","sha1":"bf63924fd617df90812c01015c299eedc3bcb76a","sha256":"bc14cd1d00e8f48b13de08c5237be2d07c884525c2aa9ac5c6af98fe427d8e45","sha512":"1a739ec17616156225c54db447730a51708b0451b5ad137c58229d35a2383658b1fd21b07e64d744c40ca92ae7800ef6415036fb91a19c088d4f03e33411df80","ssdeep":"24576:yBir9yN/uQfB3YsEhWq3OP+Z8LT7RQzpD7hu8H7kiI:PRyNFXEhWq3vZ8LT7epD9hH7kiI","tlshash":"cb2533a4c8dc2df6fb46d1da6e74d2b6b380aeed7be4c3d4429174ad9281764e007e40","first_seen":"2026-06-28T11:48:16.919887Z","last_seen":"2026-06-28T11:48:18.863173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":30,"receive":1233,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}