{"report_id":"21350df7-cd11-4b61-af55-be87d9872264","version":6,"status":"done","tags":[],"date":"2026-05-13T05:13:17Z","url":{"schema":"http","addr":"apinaga7xpd.cfd","fqdn":"apinaga7xpd.cfd","domain":"apinaga7xpd.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apinaga7xpd.cfd/","fqdn":"apinaga7xpd.cfd","domain":"apinaga7xpd.cfd","tld":"cfd"},"title":"APINAGA7XPD Hadir Membawa Nuansa Baru yang Lebih Dinamis","dom":{"size":18215,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"91b74ef45acfdae1abc81f0cd61038e6","sha1":"8e0edda26a3a7bc84a9e766cbf2364a3f58842c6","sha256":"40149de85d4d03ae1f9f8cc3b26dff1e8007fa3046601382c1e8f9fe41853c71","sha512":"58877997ce37344f8d7d59d7d8974f24d97fc9ce220d52e02c706178fe56b38fe38e9ab250f579e3122f7faa908ae4b1ddccec715f0ea7302bd0e3530417b186","ssdeep":"192:Vd7L4UGeVroA5eLU+LMeLNVLsXySrsM2s/x/skOkRk+k8LvW9yJ9RZOdKoGY5Jx2:IW0A3X/H2s/x/CHf9S1pdiOs+dP","tlshash":"d2824217b5d92099611bd32245e2f77f2d38c8038b320d19ba4c7b98df59f827a3220e","dom_hash":"domhash80acd06487150b27eee04a82d506c478","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"apinaga7xpd.cfd","fqdn":"apinaga7xpd.cfd","domain":"apinaga7xpd.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-17T05:13:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"apinaga7xpd.cfd","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-05-13T05:13:18.245797Z","last_seen":"2026-05-13T05:13:18.245797Z","alert_count":0,"request_count":1,"received_data":7292,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-05-11T15:15:59.806543Z","alert_count":0,"request_count":2,"received_data":295609,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imgstack.net","ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-18","domain_rank":1373750,"first_seen":"2016-07-24T10:03:45Z","last_seen":"2026-05-13T05:11:04.948067Z","alert_count":0,"request_count":2,"received_data":169311,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"slotplaywin123new.site","ip":{"addr":"104.21.92.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-03-02T15:53:13.335843Z","last_seen":"2026-05-01T08:43:19.57189Z","alert_count":0,"request_count":1,"received_data":706437,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012605071401000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeab4d27caf84c1910394b32972534d7","sha1":"d54987e0185f51433f78f48d19d459bc3540c2f8","sha256":"504ab7d62040901f4d1e436173330840d22534237065b78d6c87691ca4f81dc9","sha512":"57f2d3d3363dfc6031d89410e517f3a72856710f09e48eeab9c414af6a4f45409ae95d8ed5e4e8578dc411cbbf12e01e1a09811d97122c7b29d9b2c49fa486d8","ssdeep":"96:mTKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0df197dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-05-12T16:12:58.401546Z","last_seen":"2026-05-17T20:01:20.644178Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eb923bf5519b560429c8b0db37c1e3f","sha1":"988f0e1f0cb30b8a288e6c783bbb25c2c3f841a3","sha256":"57fa43a35f28bb6db0d02ef6507ecb2cd4b952aa6d4441f5d156bdbeca8ff229","sha512":"993e2dcb331f86a5bc7c241c4f28bf064c4df1a3fffca040a57d3e2ed4f37dae7428dfbdb66d2add1d11f5d5bee37ea0931bf1c4af2a45d017b5fe0ee67ec666","ssdeep":"3072:Q8SU/TMOu6O7A0AvxZYtG7t8bbiLiJ2lttwnK7DgQ:tSU/TMOu6O7UvaG7t8bbiWJ0ttwnK7X","tlshash":"af54839db286b0724793b074803f150ae33ba955644a812cf56de9d67cbcd8aa037f7c","size":284617,"data":"","first_seen":"2026-05-12T16:12:58.39803Z","last_seen":"2026-05-17T20:01:20.641423Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"apinaga7xpd.cfd/","fqdn":"apinaga7xpd.cfd","domain":"apinaga7xpd.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T05:12:56.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apinaga7xpd.cfd","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 09:15:21 GMT","end":"Sun, 09 Aug 2026 09:15:20 GMT"},"fingerprint":{"sha1":"C5:35:B3:BD:25:09:F4:4C:38:6C:98:1A:01:C6:83:EB:56:C2:2A:1B","sha256":"53:45:0F:7E:D4:56:13:18:68:1D:85:6C:CD:F3:D1:EE:0A:D2:F5:BB:DC:86:77:C3:E9:A3:FC:23:08:F2:71:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apinaga7xpd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:12:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 11 May 2026 10:09:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RypcC56WCG281mOo1TQLfRh9NQgy7AP3biwm8J%2Bq003gIbo1UZLlrYWfORKr3srerICB1UxwUH%2FYdURfsAGjY0XG9LrBAJhvC9lE9zXB%2BwB8QF6qrVhjGK1FCeCOkir3CuU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9faf2bc72a4d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4a2fd812326838c2ac3a07220d189b23","sha1":"535c9f1a3ef1c43a4564bb52d829409f0bfdae15","sha256":"9b4cbc7f8d366f664f0ddefb7488b53d088dd1a42c40df49d2437eed1d9556c6","sha512":"7e9353b5070f3c902fbcae596c26f6a4eac5ec8cfef29ac61f45df8522b1c41d420917e8f47574ae59b7e3cbb30f647e93684670aae84a5f5759a2b52fccbdb4","ssdeep":"192:3H6ZiM/8/+kRkSkTkZVRO7dQbpy0Uv/uZFz/d1:3AiM/8/k8Z/d1","tlshash":"92d1502794422042a33783705bb7b30ceb53102b9b0285257fdc23929fb9a95c6b3f6d","first_seen":"2026-05-13T05:13:21.177944Z","last_seen":"2026-05-13T05:15:20.70714Z","times_seen":2,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":73,"dns":58,"connect":1,"send":0,"wait":570,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apinaga7xpd.cfd/","date":"2026-05-13T05:12:56.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:36 GMT","end":"Mon, 13 Jul 2026 08:35:35 GMT"},"fingerprint":{"sha1":"B5:1A:59:53:CB:73:1E:57:72:47:4A:0F:A6:2A:CA:06:11:5F:F7:B1","sha256":"5A:CA:BC:7B:10:C3:08:29:B3:7B:CC:C3:CE:F7:E2:D0:9A:FC:CB:02:28:72:B4:97:EF:18:43:57:98:DE:15:2E"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga7xpd.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73119\r\ndate: Wed, 13 May 2026 05:12:57 GMT\r\nexpires: Wed, 13 May 2026 05:12:57 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"d1c4b9bc9bd9eb67\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8eb923bf5519b560429c8b0db37c1e3f","sha1":"988f0e1f0cb30b8a288e6c783bbb25c2c3f841a3","sha256":"57fa43a35f28bb6db0d02ef6507ecb2cd4b952aa6d4441f5d156bdbeca8ff229","sha512":"993e2dcb331f86a5bc7c241c4f28bf064c4df1a3fffca040a57d3e2ed4f37dae7428dfbdb66d2add1d11f5d5bee37ea0931bf1c4af2a45d017b5fe0ee67ec666","ssdeep":"3072:Q8SU/TMOu6O7A0AvxZYtG7t8bbiLiJ2lttwnK7DgQ:tSU/TMOu6O7UvaG7t8bbiWJ0ttwnK7X","tlshash":"af54839db286b0724793b074803f150ae33ba955644a812cf56de9d67cbcd8aa037f7c","first_seen":"2026-05-12T16:12:58.39803Z","last_seen":"2026-05-17T20:01:20.641423Z","times_seen":439,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":33,"receive":37,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstack.net/images/VYoMR.jpg","fqdn":"imgstack.net","domain":"imgstack.net","tld":"net"},"ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga7xpd.cfd/","date":"2026-05-13T05:12:57.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstack.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 20:14:36 GMT","end":"Sun, 09 Aug 2026 21:14:21 GMT"},"fingerprint":{"sha1":"48:1D:67:72:30:89:D2:10:2F:A3:E3:5A:86:48:17:49:34:F6:62:D7","sha256":"FD:AB:1E:A5:9C:CD:98:C5:EF:61:D9:DB:A5:88:48:56:B5:6F:2A:79:FF:49:79:90:B5:CA:52:A1:60:44:41:41"}}},"request":{"raw":"GET /images/VYoMR.jpg HTTP/1.1\r\nHost: imgstack.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga7xpd.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:12:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43757\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 07:06:42 GMT\r\netag: \"aaed-64f7a5ba25f19\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqfrGbMKfEDD0XFN1UXR6uT0lmu9fs26BV2j24W0j7f7s7NCye3jvGvIEH60ON9hZJAa5GCgiPHDzZRsEheBYJSpyWcQjLo0YU69dOW7VAsF%2BTto1r0lxkVg9gbqml0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9faf2bcc58fe2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x736, components 3","md5":"fb66b8bcf4b7015dc51e07fae104ee91","sha1":"36d180224203086065d613ab771a1dccb081262c","sha256":"8f5683a94cd437711c42aca7efb755982b86bafd5a40fd6befc287ebde249c6c","sha512":"f770ed1bba470a826be07adf9df2b96cd01b41b5900bd46d9d1944bbfaeaabd27942bccf48649e39d2ef2c502de97481903f8f87ba8750860f04b0fc7a51ed92","ssdeep":"768:i9T2+7j51iiKTpgBSapRTjZxniB2dNxjULQrueJHz0DrhGBGZm4iNWjrBsDRM9xQ:iR2+Z4zpgBSa/XZxnyWPqwN8qGtiNWjO","tlshash":"6f1302478b7d2fefc6e361322e74a9c99d56cb12262c4047ee1d7c2769bc990c00ab4d","first_seen":"2026-05-13T05:13:21.179503Z","last_seen":"2026-05-13T05:15:20.708551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":401,"receive":383,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slotplaywin123new.site/in/logo.gif","fqdn":"slotplaywin123new.site","domain":"slotplaywin123new.site","tld":"site"},"ip":{"addr":"104.21.92.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga7xpd.cfd/","date":"2026-05-13T05:12:57.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slotplaywin123new.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Mar 2026 07:06:17 GMT","end":"Tue, 16 Jun 2026 08:03:52 GMT"},"fingerprint":{"sha1":"E7:2B:EA:75:A4:D5:F9:CD:68:82:22:37:3B:20:BA:B9:6B:A6:4E:D8","sha256":"8A:17:43:6E:68:F7:EF:6F:35:8E:BC:FE:9E:D2:93:59:06:57:C2:F6:BD:90:10:82:24:92:15:37:46:52:13:FF"}}},"request":{"raw":"GET /in/logo.gif HTTP/1.1\r\nHost: slotplaywin123new.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga7xpd.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:12:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 705698\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 05:12:57 GMT\r\nlast-modified: Thu, 19 Feb 2026 05:44:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9DMx%2F%2Bcje6LKZZOqTBGoKbbFWbXlccEx9e3R2E5W0nWBQmykpaMk2FViVoMA9OOZPunDWm%2B0%2FxgZFBWEm0fRjxoZyLWBWmg4HZqtydQgbmFtldRcgDvMPS%2FKy7W3b12f%2F7TrUFB0syk\"}]}\r\ncf-ray: 9faf2bce7d2956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":705698,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"a7c4bd377fde002f0d0a2745725b0763","sha1":"1e21275912def322d3d542294a2f7a4337f3d667","sha256":"0253cf0de7451b64629b930eef480aae65c40773e4ca7b56046c37277e4d4218","sha512":"15b0b96a40038b94a451bd0f03e9eb1ca93a8e421eabe31889027c99bc9535488690238e959cc86180d96152119224514443a0f9d2d49ebc2c8d1cbd4747179a","ssdeep":"12288:GWRFjc4CCigwH41O4GAl8yXJ/hYo8yKTXAKVgCiC4joX1VB6o1v3W5wFEkzltjtv:Gl4xNwsvl84/hayRKxitsdZ4clhtv","tlshash":"afe42324c592c550c3afa00386e68387b77bb1c9a335ed757be9801fdf5b8cb5a1a181","first_seen":"2026-03-02T15:53:16.250896Z","last_seen":"2026-05-16T12:42:37.735656Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1805,"timings":{"blocked":58,"dns":45,"connect":1,"send":0,"wait":840,"receive":844,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstack.net/images/eQVxb.jpg","fqdn":"imgstack.net","domain":"imgstack.net","tld":"net"},"ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga7xpd.cfd/","date":"2026-05-13T05:12:57.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstack.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 20:14:36 GMT","end":"Sun, 09 Aug 2026 21:14:21 GMT"},"fingerprint":{"sha1":"48:1D:67:72:30:89:D2:10:2F:A3:E3:5A:86:48:17:49:34:F6:62:D7","sha256":"FD:AB:1E:A5:9C:CD:98:C5:EF:61:D9:DB:A5:88:48:56:B5:6F:2A:79:FF:49:79:90:B5:CA:52:A1:60:44:41:41"}}},"request":{"raw":"GET /images/eQVxb.jpg HTTP/1.1\r\nHost: imgstack.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga7xpd.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:12:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 124218\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 07:04:34 GMT\r\netag: \"1e53a-64f7a54049366\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4Y95o117wEI97wZPJOXEB4ex67iwhXle4F6JMh39ibIKhA4VhRlcycm%2BB8zeRh9fDWf5Pc0R8Ic0yQP0Ti1aY55qYTriPKiW7WaDc4qy6YPJ5Mi6MiIE9lfbjIbSOE%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9faf2bce1a792678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124218,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"080e5e1c0ae7397a92a255b807372fed","sha1":"a24a799179bcb6b7be4dbb2f5790ec08221901c3","sha256":"7f86f4d6f560b907eb2b3ae22670ead94e34ead7cf5ab17b9c37db7fb2f1462c","sha512":"90da1b06ff5605e30bdd0b80b0bd7e6c82c95f2854568a45e045312a6683098332fef68a0388cc20aec55b436f6a549035b08da8505cdbe4f67572730d142141","ssdeep":"3072:iVuVhcZ4PKVxq7a7t4pQefOhkDXab7FH/8yMmO3Q8bJD1B:idsKxVmtGtbBHvBgJ1B","tlshash":"eec312ed7b3b13a26a327321c2c287d0d68fa562a9bc4fd294248b14dc59f69075b347","first_seen":"2026-05-13T05:13:21.181181Z","last_seen":"2026-05-13T05:15:20.710757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012605071401000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apinaga7xpd.cfd/","date":"2026-05-13T05:12:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:36 GMT","end":"Mon, 13 Jul 2026 08:35:35 GMT"},"fingerprint":{"sha1":"B5:1A:59:53:CB:73:1E:57:72:47:4A:0F:A6:2A:CA:06:11:5F:F7:B1","sha256":"5A:CA:BC:7B:10:C3:08:29:B3:7B:CC:C3:CE:F7:E2:D0:9A:FC:CB:02:28:72:B4:97:EF:18:43:57:98:DE:15:2E"}}},"request":{"raw":"GET /rtv/012605071401000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://apinaga7xpd.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga7xpd.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2963\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 15:36:49 GMT\r\nexpires: Wed, 12 May 2027 15:36:49 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"0382c16cac8af8aa\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 48968\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"eeab4d27caf84c1910394b32972534d7","sha1":"d54987e0185f51433f78f48d19d459bc3540c2f8","sha256":"504ab7d62040901f4d1e436173330840d22534237065b78d6c87691ca4f81dc9","sha512":"57f2d3d3363dfc6031d89410e517f3a72856710f09e48eeab9c414af6a4f45409ae95d8ed5e4e8578dc411cbbf12e01e1a09811d97122c7b29d9b2c49fa486d8","ssdeep":"96:mTKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0df197dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-05-12T16:12:58.401546Z","last_seen":"2026-05-17T20:01:20.644178Z","times_seen":428,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":46,"dns":1,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}