{"report_id":"39515ca3-dcab-46c7-9d48-82c4aaa6fbdb","version":6,"status":"done","tags":[],"date":"2026-04-17T04:13:54Z","url":{"schema":"https","addr":"login-sanca999.pages.dev","fqdn":"login-sanca999.pages.dev","domain":"login-sanca999.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"login-sanca999.pages.dev/","fqdn":"login-sanca999.pages.dev","domain":"login-sanca999.pages.dev","tld":"pages.dev"},"title":"SANCA999 ✪ Link Login Akun VIP Slot Online Terpercaya \u0026 Gampang Cuan","dom":{"size":110466,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"f610397309ad24298385d817c7eb24f1","sha1":"f00d431cb9c4ccd1c56d8896599004e1c98f26cf","sha256":"08bf7d110f69122d07399ab55d3d93d8f47430550e68dc60f3fdc5cf3dc29d41","sha512":"2f412b04d1b4157cb8859a3a0ca656e7b52688fed735c07087e548f24389ec147cd9d15e88f147df7cd34d111f88a5cdf45386b5cf60a57f8c5356e388e5cb36","ssdeep":"1536:GZ5F4g5A4WR2vkCwnwXZOR8IW81AGRGH0k:XnweXAGRGv","tlshash":"a8b3a51b96a2114d5803d63827ea7b573338d013c61aedb5bddda780cf49a80dda378e","dom_hash":"domhashc7f21bc3e1d95e03db2a510a560d5390","first_seen":"2026-04-17T04:14:00.488772Z","last_seen":"2026-04-17T04:14:00.488772Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"login-sanca999.pages.dev","fqdn":"login-sanca999.pages.dev","domain":"login-sanca999.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T04:13:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-17T04:13:31Z","timestamp":1776399211,"ip_dst":{"addr":"172.66.47.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33488,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-17T04:13:31.101628+0000\",\"flow_id\":1452144337843136,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33488,\"dest_ip\":\"172.66.47.109\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"login-sanca999.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":926,\"bytes_toclient\":2725,\"start\":\"2026-04-17T04:13:31.095168+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imgku.io","ip":{"addr":"172.67.162.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-05","domain_rank":89270,"first_seen":"2024-01-22T14:43:59Z","last_seen":"2026-04-12T15:17:54.423169Z","alert_count":0,"request_count":1,"received_data":7053,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login-sanca999.pages.dev","ip":{"addr":"172.66.47.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-17T04:13:56.389312Z","last_seen":"2026-04-17T04:13:56.389312Z","alert_count":0,"request_count":1,"received_data":93466,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"pemaile.me","ip":{"addr":"186.2.161.227","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-12-22","domain_rank":510575,"first_seen":"2024-12-30T08:47:29.695937Z","last_seen":"2026-04-13T10:42:27.86958Z","alert_count":0,"request_count":1,"received_data":2345714,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-04-13T11:11:59.825186Z","alert_count":0,"request_count":4,"received_data":345679,"sent_data":1856,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"linkgambar.xyz","ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-14","domain_rank":0,"first_seen":"2026-01-08T10:59:39.333097Z","last_seen":"2026-04-07T17:36:14.96014Z","alert_count":12,"request_count":12,"received_data":81510,"sent_data":5353,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imagezp77.pages.dev","ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-08-04T03:31:58.019942Z","last_seen":"2025-08-04T03:31:58.019943Z","alert_count":0,"request_count":10,"received_data":4644206,"sent_data":4543,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89838914470dd0e624818145d0da20b0","sha1":"08e50aecb72cf5a2ee881dcd9f851f9060d7fecd","sha256":"f50872bb1f4ad2d9d9d9413b7f6a6fe28a824d82cd90a4d3865c9c9441a3ba76","sha512":"6a475a043519513c83d0c40d8fece777861225d8da5a845852d59652a87a6cc5e3a091d96fc489563c9109d53810c25604fda9d2ff2ff45cdc4ee7a61d390f0e","ssdeep":"192:9fQHMOgzKBbnnRrVGRoP0YWrO2tH1a9HzMb5F4g5A4WR2vN:p0g2BbnnHYaBzMb5F4g5A4WR2vN","tlshash":"2442a464b54ba2ac530352b484fab906757ecd4fb8504035f0018edecf99e48bd7ba6e","size":12715,"data":"","first_seen":"2026-03-17T22:15:38.807202Z","last_seen":"2026-05-12T13:06:36.380646Z","times_seen":2157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c54252d732bff78217cfbeff950b3476","sha1":"960deb0b579fba259aa9865d3b1deadff0538bff","sha256":"852bb88969e8e21c5f7403b97cdb69b072a54f60214690cee9f1dad4db2d6740","sha512":"e75fc0cc5405ac64ddce8e210062fda91bf50d668d8cbef548f54b22b311082da8d3830d9092375ab69a6d8def15d9889f195f03269ecc9f570ba7afbf77f7e2","ssdeep":"6144:ixUXfTWCOu6qiieuIbno1uzRePNS+7HYo:yqftp/0RENS+74o","tlshash":"e754949db286b0724793b075803f150aa33ba859244a812cf56de9d67cbcd89b137f7c","size":284617,"data":"","first_seen":"2026-03-17T22:15:38.805176Z","last_seen":"2026-05-25T13:50:55.996675Z","times_seen":2915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.2.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e1df7b3a1f7e809beda6b9eb1971960","sha1":"dc8efe060f02a587c7a19f09edc2d3818e3a9e97","sha256":"40cb943d5f53f3417e8d92c2cc7e06785cf83ce54ddb331a4b48d305b2c57765","sha512":"c4ef4647c953ff5b68a614489ddcece11deaf86e9e8398ddfc785b54642ac5ca4c6fa188b24e7e04f4567d0b3fae79971c488cc65edb256e2f8a9e3ccb738746","ssdeep":"384:/aOOJPxlfgGYtEppeKGZLf1N9jOVz3pR21nkCJBQ7xMbkylSc8ynrq+ykS0IMQgM:iZPxRggAKGvG7GFQmDDrq+ykSuQFT7","tlshash":"21e2965eb24170a54997f130402f150ea53bb459558a0c2cb0abede6ad78e8db07bf7c","size":34120,"data":"","first_seen":"2026-03-18T22:12:34.865136Z","last_seen":"2026-05-12T12:21:23.865231Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd43df9e3425f6077d3bd69d5928cfd","sha1":"d5b1138d94904e2ab07092a86614976e1c2f543c","sha256":"94922d1f912dea5b7dd68a1a62d746f58d44a0c8305607aca116d6f08ba46708","sha512":"1f42867fd9dce4ae9a17c2a13be535196920068b4ca5b52b256baa92c48150b0f725a5f977ac59bafe6187e06e25aa2ff2787c37e23485bb943cd05fd126b6f5","ssdeep":"96:jKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:jKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"d7f196dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-03-17T22:15:38.806244Z","last_seen":"2026-05-25T13:50:56.000747Z","times_seen":2806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.2.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /v0/amp-carousel-0.2.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9613\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\nexpires: Fri, 17 Apr 2026 04:13:31 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"bd45d3e82827a667\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34120,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34003)","md5":"3e1df7b3a1f7e809beda6b9eb1971960","sha1":"dc8efe060f02a587c7a19f09edc2d3818e3a9e97","sha256":"40cb943d5f53f3417e8d92c2cc7e06785cf83ce54ddb331a4b48d305b2c57765","sha512":"c4ef4647c953ff5b68a614489ddcece11deaf86e9e8398ddfc785b54642ac5ca4c6fa188b24e7e04f4567d0b3fae79971c488cc65edb256e2f8a9e3ccb738746","ssdeep":"384:/aOOJPxlfgGYtEppeKGZLf1N9jOVz3pR21nkCJBQ7xMbkylSc8ynrq+ykS0IMQgM:iZPxRggAKGvG7GFQmDDrq+ykSuQFT7","tlshash":"21e2965eb24170a54997f130402f150ea53bb459558a0c2cb0abede6ad78e8db07bf7c","first_seen":"2026-03-18T22:12:34.865136Z","last_seen":"2026-05-12T12:21:23.865231Z","times_seen":184,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":279,"dns":56,"connect":15,"send":0,"wait":30,"receive":2,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/bca.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/bca.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 9043\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"2353-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pNi2z0%2B6pseUNHi0URiLYKcwmMIds3btNo2mk63XBr3%2BevGkB3pXHA4%2BY3%2BoBQJT6Sh1nf%2FZvZMqNFuAFbYcCBRzNEQg3BRFPEOIoni6BjVlPG8NigGaCAQMHkWCbySQw%3D%3D\"}]}\r\ncf-ray: 9ed899003d9156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9043,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"c57032ded1b000438e4a003c05b923fb","sha1":"3899560673e423c865cf8c6a4b76dcc37e03c238","sha256":"464adacd3a9731353bd3b88cd74a5cbc9095a4ea140312e8d4f4822244f2c5d9","sha512":"03d70af01adffe24349908807be2db9ed0c212d58ef0a643ebc773525efe991cb1bd19d9b19495e8ec9beefe6b9efa29857503e6880896c182c915f8a02f9536","ssdeep":"192:5cVUOt475aIyUR99VmBtoU68NVODH73LxBtEjFQG:5sUO25lVmH1ODHTLxrEjFQG","tlshash":"5e12bfaef604bd8c1c99744093715a8b0ab27f210d0828f7799d24269f1d27e6a2839a","first_seen":"2024-08-19T18:32:00.864947Z","last_seen":"2026-08-11T07:38:11.791144Z","times_seen":366,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":164,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/terbaik_agrahh.webp","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:32.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /terbaik_agrahh.webp HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64542\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4fb9fe81c5ef160ae8c0cb8e07965ee5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzpYEVZg3K8%2Fal%2FXZIOK72L8Svz9dL6arKlG%2BotP0vA1QRFzcdOQwFmOHZHVsNo4ME9evRdMwcQ4hnTNITa%2FZ5vkRQPstDG%2Filz%2FMD0JMHSF%2BqIrjbYYizEYSIa90hU56UEOf5tA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed899060e86b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e437c1263c7965f1280f7f0353da1589","sha1":"67941180020c7bf561ab17562336e6603106d79a","sha256":"54d93fd3f3c492710b71d89c7352ab85d85199319adc5d1155c03d3e31de59ee","sha512":"0cbe0dbc55c14bdf67bb701a5f74e43e263e614858e0eaa15bc9a2646d83a7d410b8abe8e80042cee95b46bddeb483960fb3bd2be8eff9be2da3403c8e2d61a2","ssdeep":"1536:AXctS2hlBAedin0kH5NHmItvO0l/hm4E0uyjsjThXXD0s:hU2BAedin0EFVtG01hmDtP","tlshash":"9153024227feba0d70c942cd24bbbe0f74567c7e7000abf99b5c7a94b60cda548d2542","first_seen":"2025-06-15T12:23:41.49092Z","last_seen":"2026-04-17T04:14:00.496474Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73113\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\nexpires: Fri, 17 Apr 2026 04:13:31 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"5b239dc189f888b8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"c54252d732bff78217cfbeff950b3476","sha1":"960deb0b579fba259aa9865d3b1deadff0538bff","sha256":"852bb88969e8e21c5f7403b97cdb69b072a54f60214690cee9f1dad4db2d6740","sha512":"e75fc0cc5405ac64ddce8e210062fda91bf50d668d8cbef548f54b22b311082da8d3830d9092375ab69a6d8def15d9889f195f03269ecc9f570ba7afbf77f7e2","ssdeep":"6144:ixUXfTWCOu6qiieuIbno1uzRePNS+7HYo:yqftp/0RENS+74o","tlshash":"e754949db286b0724793b075803f150aa33ba859244a812cf56de9d67cbcd89b137f7c","first_seen":"2026-03-17T22:15:38.805176Z","last_seen":"2026-05-25T13:50:55.996675Z","times_seen":2915,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":277,"dns":55,"connect":15,"send":0,"wait":22,"receive":19,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/buktijp.gif","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /buktijp.gif HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 743598\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"80947cafa6289f5c3b848eb99797916e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7cCByjDFi0yQzHG2vIWnJ5F5JFYTiLhhk92YBjNP0mL7hi8zQm4FTAhIJNJWQUzj8vQHfFmIEHi1bC3E4ecZg4%2Bo3OvHIdFbOK0rk8emC%2FnI34O5askejdM23APs6jp2EfG8B7h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990059da8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":743598,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"5aa2e98d10b53ef53628e2335ff97264","sha1":"c2abb72d9642622245a11d2a430a16d603fd18af","sha256":"0080b12449166514c39beaf215c6343370c591ba5a2f82b6aabc542fd189259b","sha512":"7fdb19fc6160b75d66a7b48f7069b870a50e053fa428aff76c7cfd851e5ad94dd5905cf6eb908dd7bf4583f7da91af20f1cff699cea330f110f4886d4649ee48","ssdeep":"12288:NYWS5iziWMNW9A2IW6AlPwLRBQtc3+OAnQZPpks32McAhz1ItP0Tmw5edz6V3T:NYfuitSdIW6AARqjLnYgx2CtsTR54y","tlshash":"4bf433bfb1ee76b3f16259d0434fbc78ea11d4581159a6faf8c6074530cc822aa7e708","first_seen":"2026-02-08T15:00:18.777028Z","last_seen":"2026-05-16T15:02:47.755765Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":27,"connect":15,"send":0,"wait":89,"receive":18,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/mandiri.webp","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/mandiri.webp HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-length: 1450\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"5aa-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbiJnEaBNZhAgg6yFGQs49kPo7uRpJKk%2ByWW%2BNuU3%2F30kfdYrxqku8rjDRJMGArGhgLpfyIFnA%2BiOLOyePXrp0INZ8vUZeIFB0bbaDbpcC0u2Nz%2FOzxY9elSSxWV9%2BuBxg%3D%3D\"}]}\r\ncf-ray: 9ed899004d9856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2353b8053907decc64f44b359ece209d","sha1":"04e7249895d9f04bfee8e5c9f7e2eb7316298fe1","sha256":"3f7fc3e4963723b9301d534230914251012b5a2db1a1b87b9f981ea5f85beaff","sha512":"be9a037d8dae6030fd53b450008ff3faa0b1d4bc86ec23d51797ecd0f816836afca06b34ade0d52a27d04668f377de8b483a1474307f7d1baf5b9ca00e216234","ssdeep":"","tlshash":"7531e6cbddb2d510f9695835219e5fe6be0b26810892872e7a9f8518387c1a11b1e25c","first_seen":"2023-05-06T13:19:04Z","last_seen":"2026-08-15T09:08:05.993307Z","times_seen":611,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":20,"connect":4,"send":0,"wait":157,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/cimb.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/cimb.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6768\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:20 GMT\r\netag: \"1a70-63be9fbe87c00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddO5LJ2XqgZWhKYQglGIDOGURLERP6rGpQmHPnXTLFO8j%2FxV64eWJ5EB%2Fs98GB%2F0LUVs38Iz37U4qhk26Q1AKz7G8v%2FuqHRM5CWQAaQarHcLeuUnLBKEmd66OB0UKs7MFA%3D%3D\"}]}\r\ncf-ray: 9ed899000d7856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6768,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"40b39a4998780c63e3cb1b3852d9e538","sha1":"af4dfec84ae428fe8973f9a0f33806969a60d092","sha256":"a68349de8e566fcc9e873826e1ac289c98348a13b9bccd2ca9f5da1cb3e65923","sha512":"a09b7ae510c7033467771b1bdd48a33b584b72ef2defad8fe5cb500cc4d2e9dcf89a91a16eb0063f3460d49743cad01fb0d069529ff3626eeafaa91db06c9a63","ssdeep":"96:wKfwkacgWqAx2kEecBS8IqValdIqevqbFL2w/riQU3Oi/R2axhx923RBqA82p6TT:wKfwkcaqV+cqbBDrri/R2axhH8R51pyT","tlshash":"43d1ae77c0dc2e8b00183e8a7bf49927a8af5ca4c482eec7cd5e6a96502743f051f483","first_seen":"2024-10-21T10:56:54.691557Z","last_seen":"2026-08-15T09:08:05.999752Z","times_seen":447,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/gopay.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/gopay.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7247\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:20 GMT\r\netag: \"1c4f-63be9fbe87c00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzqVv8bseNbRC6BcHad%2FDrGhlaPmTLfVJR4NGt5HVIRG7ZcZq%2F7VPxHPy5LWNOoTftHcDzIdGPGD4QoF4YtFO1oTdHCNU1YFBMJhKTx7DnaXGLP0aL6%2FP49H9rv7wcpNew%3D%3D\"}]}\r\ncf-ray: 9ed899001d7b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7247,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"9e4d072d0ebc5abed34b0c820122ba41","sha1":"67c61842937eb53ac60d4289af89e5c63b803660","sha256":"dd61ebfc47ef8695510dd49fa85ffe68dad95516542d68df35b6f012784f49df","sha512":"7d0af860be888d70026333d802456e75d9fe22192ab232dfe59275af1eff12730b85fe286450553940b99185b76cbcc8f4ec5bd5bd9fcc2ef79fab9880714561","ssdeep":"96:P62wB5lAgWFgAx2acLZvExlgxnBEn7HRB75hiXH0++j9mtgMbFbfiLTLNxJUnTCQ:PGvE3eK7n9hix+jqP5UJUnEx8KXUNbh","tlshash":"05e19e16e58c6ed90c3f599809fb08131f9ad540b540e5592df9b10a34b28dc878a4bb","first_seen":"2024-08-19T18:32:00.877506Z","last_seen":"2026-08-15T09:15:04.536035Z","times_seen":458,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgku.io/download/76xrFlfA.gif","fqdn":"imgku.io","domain":"imgku.io","tld":"io"},"ip":{"addr":"172.67.162.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgku.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 12:11:16 GMT","end":"Thu, 18 Jun 2026 13:11:15 GMT"},"fingerprint":{"sha1":"91:D1:60:81:D6:92:18:D3:3E:7E:AB:72:7D:62:75:17:12:C3:73:C4","sha256":"64:03:C6:CA:F8:08:A3:C8:F7:25:63:86:B7:19:17:E6:DD:9A:A6:A6:59:D4:1A:AA:3C:DC:BF:88:F0:38:16:9D"}}},"request":{"raw":"GET /download/76xrFlfA.gif HTTP/1.1\r\nHost: imgku.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5921\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ratelimit-remaining-second: 244\r\nx-ratelimit-limit-second: 250\r\nratelimit-limit: 250\r\nratelimit-remaining: 244\r\nratelimit-reset: 1\r\nlast-modified: Wed, 28 Feb 2024 14:29:34 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ba19e9e4a6627d45955682458569197\"\r\nx-amz-request-id: tx00000b51a977c75374671-0068861677-a5038-default\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=16000000; includeSubDomains; preload;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ai5CYEgozvmH7Nxa6mG59wtjryB41GV8ikW2Z1tCLF0ZxWDeFehNNnsNCFyXQBhh5khP4x3x4eFuLnqUmpNarDJW8W7fmoFgm0xfDnT0mysrlNmxDVcbDQhSHA%3D%3D\"}]}\r\ncf-ray: 9ed899006ed3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5921,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"1ba19e9e4a6627d45955682458569197","sha1":"2321ceb93fac4c4ee8b1d31f7096ad45457afca6","sha256":"b4a4df87d3e52a00e193c7bc4b3d8e734ce8624904a3a38d977e76285c39628f","sha512":"62597812c1702d414b7e0a723cfaab1a382ffe4fd3d1a3d2ba7753beb3f38905d0a7e84de766be8d4dc8e149b46d2c31a483de8841d882acb13840600d4b485b","ssdeep":"96:wECORhj9gWQAx2k743UUVJ2aDzjB/hDBafyBS9H29YIhfxwc+OmPCGe00vGn3:wENRN3unVJ2aPjTAJ9H29XfSchmP/e/G","tlshash":"66c16d8ed9e0bcc08c887eb4a1b6e997271edd90e595470f368cfc25f20533d550a989","first_seen":"2024-01-03T13:47:41Z","last_seen":"2026-08-15T09:15:04.532317Z","times_seen":497,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":30,"connect":10,"send":0,"wait":535,"receive":1,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/terbaik_agrahh.webp","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:32.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /terbaik_agrahh.webp HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64542\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4fb9fe81c5ef160ae8c0cb8e07965ee5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfFB1pN5KjoVAMV4QlWZK%2BQiwVPrRRtm2pu8JHViSN%2BDEjTU4Sdq1J3zB2HPHChEMooEi%2FUhBAhCPhjuPU8xDxodgmq%2FJZX5vFsilPtjx4EVei0RMoQsGCfYFPz%2Bsy37Jyau9oNX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed899060e84b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e437c1263c7965f1280f7f0353da1589","sha1":"67941180020c7bf561ab17562336e6603106d79a","sha256":"54d93fd3f3c492710b71d89c7352ab85d85199319adc5d1155c03d3e31de59ee","sha512":"0cbe0dbc55c14bdf67bb701a5f74e43e263e614858e0eaa15bc9a2646d83a7d410b8abe8e80042cee95b46bddeb483960fb3bd2be8eff9be2da3403c8e2d61a2","ssdeep":"1536:AXctS2hlBAedin0kH5NHmItvO0l/hm4E0uyjsjThXXD0s:hU2BAedin0EFVtG01hmDtP","tlshash":"9153024227feba0d70c942cd24bbbe0f74567c7e7000abf99b5c7a94b60cda548d2542","first_seen":"2025-06-15T12:23:41.49092Z","last_seen":"2026-04-17T04:14:00.496474Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-sanca999.pages.dev/","fqdn":"login-sanca999.pages.dev","domain":"login-sanca999.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T04:13:31.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-sanca999.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 23:46:18 GMT","end":"Thu, 09 Jul 2026 23:46:17 GMT"},"fingerprint":{"sha1":"9B:A3:54:A9:3D:3B:09:A6:03:F7:71:38:41:51:0C:18:AA:75:E4:0E","sha256":"71:57:A6:EC:FB:F1:35:CC:F6:35:E4:03:83:91:F9:38:C2:CB:85:38:19:BB:C0:6C:15:00:18:0E:79:3A:81:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: login-sanca999.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BeqOsz7CVHEkSMjLhjZSi9Api5%2FFKhaiu%2Fmsh3izItV1JtzHsfDLTDeU5QtbhwS%2FJqU1I28nlpIPcKojUeYfnJwcO%2BkpbfE4yeEwG7Weq6g7f3oHpDzfXUlBzu3JKNR0C0y2Mr0wZYxdJU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed898fd7dbdb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":92745,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6b80fe21b49615f439c9c99571e959df","sha1":"72dc63ce3b968dd0fce4465bace4d5a5a56775b6","sha256":"c157404b489faf709aa0585a996d788a75f15729b0ba35dc5533f677eaaec16a","sha512":"a64b0a8946e5e86e658600b968f7a26d44caa48d6f1f5f0747ea94e3df6c64b3750732869f702dfa27aca98c7438dd39d30ff2f0ecaec5105f3cb5485adaf4d8","ssdeep":"768:5smY7oC0+H6dcU0o4k0Aw0ZM8aavbnjPD3bvr0DHJVwX+CO+iK+OqCTCuev7qmiT:mC+H3yyCE2WvIz8zy","tlshash":"b593312bc601210a5437d778bfe21e4ef7661137c242eaa6beec96418f7a540c493edd","first_seen":"2026-04-17T04:14:00.509873Z","last_seen":"2026-04-17T04:14:00.509873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":41,"dns":30,"connect":1,"send":0,"wait":130,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/keluhan-member.gif","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /keluhan-member.gif HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 854852\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7aa282c78b8213a1c395a35fe52cb3cc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGK7UH4DoJbBAqTV%2F00weENcYhK1e9c31eKi%2F%2FvEpIjgR7S3wsmviSbuDum89GBmaW3gP%2B9UaonHZNaf7p0PKG%2B0l6NW8vK3KZ%2Fcf9I8RyJGKvtBJiSYRWEAOUp5xM2J35QbwxYl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990059d58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854852,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"6fb5fd34c2cec9c54956675793cb5b45","sha1":"c8e6b75ca154b35be627e57ba3d52f8133754ca2","sha256":"1c7992e0f7f9533891a26120b29ddcdb2aacc4e9e717af600b8d61e2ca4a671e","sha512":"752561f9cdaaf1ae72ee24e30f8f246c5bd26fce3fd419aa25360f0c21506b95b48431c0af5cfaacf8cbd3da16cdbd6999d47d46476e19762c1ec322589da6a6","ssdeep":"24576:utORlvXpdOCNhDzBu9uHsAUfqTWEiiTpMwR8ss:TTxdnhDFu9uyGWuN8ss","tlshash":"2005238e9a5c5aa4a33024246f83fa05c49fda0b957dca738643f39c74485bf82c375a","first_seen":"2026-02-08T15:00:18.788416Z","last_seen":"2026-05-16T15:02:47.748794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":27,"connect":15,"send":0,"wait":44,"receive":102,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/permata.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/permata.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6799\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:20 GMT\r\netag: \"1a8f-63be9fbe87c00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ui2Id%2FhwYbbmjgcquWVXlAMxnVVa5raes1ANQvy2Rq5zdd9rGRWIfwAz%2FxhvGUzBYWnlEYhoaR2yBJ4byd%2BIf7Fl%2FTnWXMQIwTR18vU69Z4jusl35G3ZNFkfI0G89Pcqg%3D%3D\"}]}\r\ncf-ray: 9ed899000d7956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6799,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"a423678a68a5806ee5d58872a6d589e1","sha1":"189c1fcd80373a061c19dbdbd60e9b7cce57ca15","sha256":"be7c84ace86252e8a3e7cf15cc48f0fdb9bdda080bab9fdaca933a0d0c2254f9","sha512":"bf655ef9df252c6f085148082c8c2624eb996bd8c4546ec026725d95a8fa070ecebef02ba6339134298f3361d35d9726b5c762c46ddf870d86c50c35afadddb8","ssdeep":"96:zYJ4LEwV2sgWAAx2ktfV4LtxfDYu7OcIbc4C4HE7zV0I6sH4FLSyB:MJ4Q2FWiiOcIbcqkWI6sYsa","tlshash":"1de18eade5613c0300ba6efa15f95a8d5d420824ee267537701bfc12bc063bd673aa74","first_seen":"2024-10-21T10:56:54.706615Z","last_seen":"2026-08-15T09:08:06.000733Z","times_seen":412,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:32.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nOrigin: https://login-sanca999.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2972\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 11:22:00 GMT\r\nexpires: Fri, 16 Apr 2027 11:22:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60692\r\netag: \"74a8e6f749d364bb\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"dfd43df9e3425f6077d3bd69d5928cfd","sha1":"d5b1138d94904e2ab07092a86614976e1c2f543c","sha256":"94922d1f912dea5b7dd68a1a62d746f58d44a0c8305607aca116d6f08ba46708","sha512":"1f42867fd9dce4ae9a17c2a13be535196920068b4ca5b52b256baa92c48150b0f725a5f977ac59bafe6187e06e25aa2ff2787c37e23485bb943cd05fd126b6f5","ssdeep":"96:jKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:jKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"d7f196dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-03-17T22:15:38.806244Z","last_seen":"2026-05-25T13:50:56.000747Z","times_seen":2806,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/online.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/online.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4925\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"133d-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDOz20bKPBeJfBaUXxmtAixd2YVpHt5PeF%2FFBCtg2PLcxPZsahUB9gx0rjbcpUxVw0pU7YbtLo%2FEVnaHhEVvM9T64NmjdivqHzuPzfiJ%2FrHvZi%2FEtVaAVph5mzM4myAbLA%3D%3D\"}]}\r\ncf-ray: 9ed899005d9e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4925,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"6849796fef39354a83202ec3359e86c2","sha1":"f7dcd6e906879c01c14e8eeee688ed33ddb881ed","sha256":"d20e08d686e721b68c91fa98db34b3d850e805b58f2e74306a61dbe56b20ec1f","sha512":"524e234a9d93432684cd262307fc60d983e654c879fafe0f379206f7c16039366a710a23f080613e6cee29d2e6d3f094f99a25c5aa07e9de757a082b410a5eb7","ssdeep":"96:IpTWmAx2oiPp+mOOvjedF7T+cKkBvLNUiY25NwE:Iph+mOEjCFJzNU2wE","tlshash":"0ea18f5ee804fca09c84b6f741ba0e63d65184b09661b0c6436cb66ae1540fa9d493ff","first_seen":"2023-07-12T05:17:32Z","last_seen":"2026-08-11T07:38:11.803576Z","times_seen":362,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":21,"connect":5,"send":0,"wait":149,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/bni.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/bni.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 8163\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"1fe3-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2B2dufVAbD27cEuXu%2BZ7vgntiI8NOkhy1BaH%2FaMgVpudD2F0a7bBVqkydyJhwcQcset785JaLr14IpJcHlvvaL5OUKeqcF3MZ1jX12QlqCZR63sgNHSpl6Wpt2OlrxmR2Q%3D%3D\"}]}\r\ncf-ray: 9ed899003d8f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8163,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"07cfad93a51e69a2018577ecc67b3b60","sha1":"74f44b2bb8019867456add8499274724ea880ea4","sha256":"b252e06ecd8c4d8a4174596775282baab766bb257b6711930ae91adecadcb18a","sha512":"c1d031c61821348c39c4209ba6a47097e6de3a8124295f13cf9d9e8c918e8976a0547493eb127051f222a93ecdec1b85fd130b74fa70e33d37c37b57d3e861ec","ssdeep":"192:CGD7M9Og21FRNRp5xn0Rl+7p95QDjDYCbpHmU:J7KOfnp8LoQ3Nh","tlshash":"14f1bf1a4ff14d8224eaff9b28a80b4a9b41dd6544ebe41a48d8fbad031601e401e223","first_seen":"2024-08-19T18:32:00.873695Z","last_seen":"2026-08-15T09:08:05.998816Z","times_seen":477,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":18,"connect":4,"send":0,"wait":163,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/ovo.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/ovo.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6376\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:20 GMT\r\netag: \"18e8-63be9fbe87c00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rr%2B48kEU3j5zoARhb3X4gOPGucQJXphOMwzXlaxbU7NxtgPI6R1mgq7pBaiNsSFIpTi6ipGEHWzk8cJgZ1we5liCEtYPEdDxghyxg6Wlo%2BumIy7vEad%2B5c8eOjAZgLnJsw%3D%3D\"}]}\r\ncf-ray: 9ed899000d7a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6376,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"0637f31ea2ff4dce02d1a92914121878","sha1":"c8fcc84068e07ee4791cecebc4a562aab55791a7","sha256":"ac89d8b42b3aecb62b5e7faad78192789cff10e7f83bfc4a02e441c07b5121ff","sha512":"199cedc0cdede3d40c03d4dbf19cdfaa1a2d3e77c67b200f34667dd2bba5e46fae36f1c65b88548b5fb1ac39a125181e6ca99eea524abb74885aaef047b6ed2d","ssdeep":"192:FSIhro6ViyDXsu9yWuxoI5WHqnfp5iKVcOJbdD+:EE86fXxyWjI7xYCcOJbt+","tlshash":"80d19e1edd959c454824a760bdd01ee73419dcf1adc1e49b385cfd72c12307d4a1b4a5","first_seen":"2024-08-19T18:32:00.878485Z","last_seen":"2026-08-15T09:15:04.534072Z","times_seen":463,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/bri.webp","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/bri.webp HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-length: 1192\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"4a8-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAQ5MdZP%2BEaSW2TICyAJy6avjfTWt8BvRr6LXNDAvmQjb%2Fp3gPt9Z5DIiAZZgtxIPCNsogXdCAh5mwGaQqrolM2iN1rwC6dzJ3BQTN7%2BJCvPGDaMwUlsMLmwsFUPBEY47g%3D%3D\"}]}\r\ncf-ray: 9ed899003d9056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0962baf592c0fbbe7dca5ecd1d25b9c","sha1":"d5d1f393fc494f8f4139e78ecf0acdefe3b29dd1","sha256":"d0c2d57b187ea0297a89acafd79c8fb3dda297730e958b62cee6b07066f8c543","sha512":"dd7ffc120557de7162300fc8d602ec9777ad8aedf85f89ee590bc9389ff3d83383b4f5cd29dd7864b6c888d1342393e79859c0b0e0edda85b4103fedb0b37ebe","ssdeep":"","tlshash":"0821e7e9e86b27d2dad8eef2dd6530019fc47611891ac840651aa2a3500fb67c00a3c5","first_seen":"2023-05-06T13:19:04Z","last_seen":"2026-08-15T09:08:05.993923Z","times_seen":563,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":19,"connect":4,"send":0,"wait":148,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/linkaja.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/linkaja.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6599\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:24 GMT\r\netag: \"19c7-63be9fc258500\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPpDLMWtuY3HgrcBdFjCFtaGk4H3kQvZuW%2FGIpFttoLrk0PN1fVdxGu%2BB9TkKpcyQMn5vlyMDDnb%2BPW4dPE%2FJ8Yoo3PzAljOYW9OdTnuCS8%2B3Cvxi51%2FWs1%2BLaFhgW0poQ%3D%3D\"}]}\r\ncf-ray: 9ed899001d7f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"44886f57ded231724a5f1b602bccd4f7","sha1":"b0db73a550715261540396e0db523ac47cfde9ee","sha256":"ac7a5ff394ef55b464b430fc1f66f48ff86013546f1a2077b39b80ec6c364bb9","sha512":"d8dd9f03ff6e32521ebd33f0f81b3fc69066fe8aa8cbd4fce928430d6652b6403253105f3403e87c1775dd99421b731f0d10ceb4c707c361c7ef50c025ee4e9a","ssdeep":"192:1lwMMFI8H8MZreFs1MnYeFSzRO/17JShn:1j/oao1bzIChn","tlshash":"5cd17e2fd841f6cd496ef4953ef5268e4d6b2c01b981a0af64deb433f508164748e18b","first_seen":"2024-10-21T10:56:54.703063Z","last_seen":"2026-08-15T09:08:06.002281Z","times_seen":418,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:32.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nOrigin: https://login-sanca999.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3926\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 12:03:19 GMT\r\nexpires: Thu, 15 Apr 2027 12:03:19 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"9422bdcfef37a42c\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 144613\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"89838914470dd0e624818145d0da20b0","sha1":"08e50aecb72cf5a2ee881dcd9f851f9060d7fecd","sha256":"f50872bb1f4ad2d9d9d9413b7f6a6fe28a824d82cd90a4d3865c9c9441a3ba76","sha512":"6a475a043519513c83d0c40d8fece777861225d8da5a845852d59652a87a6cc5e3a091d96fc489563c9109d53810c25604fda9d2ff2ff45cdc4ee7a61d390f0e","ssdeep":"192:9fQHMOgzKBbnnRrVGRoP0YWrO2tH1a9HzMb5F4g5A4WR2vN:p0g2BbnnHYaBzMb5F4g5A4WR2vN","tlshash":"2442a464b54ba2ac530352b484fab906757ecd4fb8504035f0018edecf99e48bd7ba6e","first_seen":"2026-03-17T22:15:38.807202Z","last_seen":"2026-05-12T13:06:36.380646Z","times_seen":2157,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/terbaik_agrahh.webp","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /terbaik_agrahh.webp HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64542\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4fb9fe81c5ef160ae8c0cb8e07965ee5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5drJak8ivP0klUigxx%2FlyGIKBRmHSkAkOVH6wgPja517Fzue07MN48wPwV21pPViojRT4dkvKfVlksPZ0qb7JLYvuucBEF8PR3b%2F4Go%2F9IR17q5VkYfENmHSJKk8ACq4TloIOrTX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990049ca8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e437c1263c7965f1280f7f0353da1589","sha1":"67941180020c7bf561ab17562336e6603106d79a","sha256":"54d93fd3f3c492710b71d89c7352ab85d85199319adc5d1155c03d3e31de59ee","sha512":"0cbe0dbc55c14bdf67bb701a5f74e43e263e614858e0eaa15bc9a2646d83a7d410b8abe8e80042cee95b46bddeb483960fb3bd2be8eff9be2da3403c8e2d61a2","ssdeep":"1536:AXctS2hlBAedin0kH5NHmItvO0l/hm4E0uyjsjThXXD0s:hU2BAedin0EFVtG01hmDtP","tlshash":"9153024227feba0d70c942cd24bbbe0f74567c7e7000abf99b5c7a94b60cda548d2542","first_seen":"2025-06-15T12:23:41.49092Z","last_seen":"2026-04-17T04:14:00.496474Z","times_seen":3,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":143,"dns":28,"connect":10,"send":0,"wait":63,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/prediksi-togel.gif","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /prediksi-togel.gif HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 908676\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0752b7671b5d334b289b5a10fc40f395\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QV1p1dcnB4IRhFQsQESwSFT9X4Mqul3D%2B3fbmcWIVQ6RE4noteVPv%2FXfybwgCMYBUAeZFI2PRbvmfnKyibQ%2FIS9ZozGjopC43kmB3Q7MmAsu%2Bw8JXDgQ9qfeJ1DQadldjyjKTg4K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990049d08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908676,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"32aa745bf6cb3ee08df28c34d188e352","sha1":"69ea3b4816ff83af8e787697a971b3cca64fb8d5","sha256":"c735163c0434b31fc78a32f2d07b3a419d790ed97f1e13c071cf3e4640ca58e6","sha512":"4fcc16ce297c9c2ef4865294dfa254e115c5134d6a89ac7597c41c291cef1dbe21cf593d0bc1a3d672de9170cb4e541af98c6e62eadb51b757297cb8bed912cc","ssdeep":"24576:SbndEuASJQ/NbzxwdIJCnZOuZ12S/Nzrsr:qdZCblwdIJCZxhgr","tlshash":"8c15239bd60c0ec8e5327165f43fb254563e6cf335586e7643997c0270ceaaa2a87b0d","first_seen":"2026-02-08T15:00:18.781389Z","last_seen":"2026-05-16T15:02:47.657283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":146,"dns":29,"connect":10,"send":0,"wait":64,"receive":131,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/rtp-slot.gif","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /rtp-slot.gif HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 851851\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d6893a495dde3f5a5df4f854c4aa2e99\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqFqTicobZ6TeVB3FMg8TznDC8i5VUStbD0sCTkABUU%2BXXAAyRdPKmvWvZGmbkRQytxHxb9LMTv8LDhHZ6l9VoJE8FlCnlbWBlMOuw9BNLVscp7VoadyfsS%2FhsOI6oZKcJuFhgtH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990069dc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851851,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"07ef89f7fc911597d5662bd6e20c250e","sha1":"22467cceaf2c2459a4325282a1fc9dbef82d3958","sha256":"ebab67a2b9ab902d4fdd81ebd5224782497fe52d7150adf451468905c7fc9da2","sha512":"9ce05fac723b53303203bd1fb38a712155516232a80f6929ecad1221405bcb492fa167cd079407b3e5f375c5a502ce90e4bc90ac4181aa6cfdefc61d2c8fc3b9","ssdeep":"24576:egityzvDclAh4Vjxym7C04XQ2vZFLwp7BM:RiT7xym204HeW","tlshash":"440523311b9a8cd9f293e8b41b561bfb810e52f14ad479933c9240f5f95443a29acf3b","first_seen":"2026-02-08T15:00:18.770297Z","last_seen":"2026-08-08T10:22:07.046336Z","times_seen":4,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":159,"dns":29,"connect":10,"send":0,"wait":12,"receive":74,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/promo.gif","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /promo.gif HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 803456\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8a6a24c8f6a12fb9092ec22dd3349606\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncnvQP1tsmfP3ry0B5Ir4K%2B3NAnhXhx16z0KsugLRVo00YWyh%2FfM7JR%2B57TU9tPG5cnsMi6zXzh3Lpc%2BvpkaJJDpl0jbkoS%2FTxUEgplVrb08A9Cv0A8rucHwW8MK9Al3OwNS3VuX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990069e18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":803456,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"b5ab9a1c53482dbfbf7d007ee354789b","sha1":"5a817d4cb9583f2022366074de8d565f08060962","sha256":"0d699d12d7e7d1b6e60a197b6ecbfba61a30d7f63c60d1140fbb90bd2090f5eb","sha512":"6322a75e63d15f392550da030420062a38c0437b05d847b5030f044a1df9eb06567c7be7bbb14e3563091dc1c6576a8a296f8ddfda4c974cf294774bff667b14","ssdeep":"12288:4guLcpXbM+BOauhl8q641pGVXuu71QtiZAK5eFfN80M+orYw6ddUOozr:4guR+D08qTGk/iZAK5MfN8RrYRddgX","tlshash":"8a0523175b0d06d2cc3e6c2c8307fb692b599c4367944cab2e6759e279d808fe470ada","first_seen":"2026-02-08T15:00:18.782194Z","last_seen":"2026-05-16T15:02:47.786528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":159,"dns":30,"connect":10,"send":0,"wait":104,"receive":138,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/dana.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/dana.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6838\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:24 GMT\r\netag: \"1ab6-63be9fc258500\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Np4SKojIvAerY27G3LTqOGvMgcaHtZgTp2UwsTFGynBocqOl3hqNuSxGlx7D%2FsTkzfIhw6amlRG4LP8YugjUE9RotEziWKGVqB4yvnfM4JvP6vV91EJE6mc7FFpV3pE5MQ%3D%3D\"}]}\r\ncf-ray: 9ed899001d7c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6838,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"0b70ede090b0603493b52ef7ab0d05b8","sha1":"892d1bacbda1a89b005218e59d034c3a323a5f42","sha256":"54df7e8101fe1e2d12e30679e39c81f060adfd5c879f203668bfb29d8587f507","sha512":"77159bb7a228cfbe68c81b32da82859454a4db4ef9796bb59c073ddae49a6d65a4dd0a9210df75e26ecba7d72723ff1d3fdaaf613c92555d641440b24927a523","ssdeep":"192:rThgzJPTRKtVPNUS+OJBP76ErC0VlDlHDYHGEYmG:rThgh10i2JlTJrDlHcGkG","tlshash":"49e19e2186a07d86083edc9df5ec0edf1a58ed74467ad02c30dda99ed0655ec903b843","first_seen":"2024-08-19T18:32:00.882767Z","last_seen":"2026-08-15T09:15:04.567771Z","times_seen":483,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/jackpot-service.webp","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /jackpot-service.webp HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40468\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1b50c517b656b94781b9952f22072777\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHqXTVPWiJakBT%2FUvChLObJUwFlOjIkFQf13RccrOxzFha87ny%2F%2FLc9lLn8qXcwzGbViDHEJq6I74M2KnpruVLuSXwG%2FeWUaVqm6hPH0t16GrcTutKeWhVSf2N%2FjIffViJ87nFZ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ed8990049ce8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d02d13fcbf5df23ed5cb3ca571abe568","sha1":"ac5bb303e9369a25cf0d8e300c1e4b1d2f0d58ce","sha256":"ce33050dbc016c3b33967542f9a196af0852c3e90868c2431ed0c8e0de178ec0","sha512":"0f8173154e79454f97d5ba8e34f245acaee287858179af472477cc72fe8beac669f4b613546a3df6fdde3377449a9770f0d1ffd706133cecffbcbe7bce322758","ssdeep":"768:nz5CaiWIxRYsnHshnMkxtVUbogeccpr4Vb/MfjERsp9U51z+0bY+yYKj7wa:nz5CNWCHshMwkogecSWbM3p9UndbYrjL","tlshash":"3303f197e03880c956da2d7f4998e7869ccc53eeb716433b67051de68b3c9eb8581630","first_seen":"2026-02-08T15:00:18.78673Z","last_seen":"2026-07-26T07:50:15.201558Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"linkgambar.xyz/zzz/danamon.gif","fqdn":"linkgambar.xyz","domain":"linkgambar.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"linkgambar.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 09:05:50 GMT","end":"Fri, 10 Jul 2026 10:04:12 GMT"},"fingerprint":{"sha1":"41:E4:25:20:14:4D:7F:BE:AC:A4:1C:E0:7B:7C:F7:F8:79:F5:CE:8D","sha256":"4A:4F:96:ED:6E:77:42:2E:75:1A:B9:B8:32:33:F8:19:0C:72:93:4B:37:8C:74:3B:3F:FA:FC:C4:B1:87:B7:FA"}}},"request":{"raw":"GET /zzz/danamon.gif HTTP/1.1\r\nHost: linkgambar.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7476\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 07:53:22 GMT\r\netag: \"1d34-63be9fc070080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Fri, 17 Apr 2026 05:13:31 GMT\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQbQb0X3o0O9VzSdYRb94Uj%2Fsaty6khaIXxl9yah4qU6CH4cnfj3gWH%2BSmYJgd%2BcYpSkKOZK1xTUovngd8npOzAmgMAJ8%2FOgGUnoCLK5pn8GjsIYIuaMjW1DrA2OWEGnrA%3D%3D\"}]}\r\ncf-ray: 9ed899000d7756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7476,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 26","md5":"5f9ab3c0971f7541decdf345dcd2af32","sha1":"6986d2fb246d8cc22f1adb7434eb750e271fe339","sha256":"18da0ea9d72ebe56ebb6f228e78e6932b5b2f96ec4a0c0a572004bf08968f6db","sha512":"ede7d29de49a65ffa15033bb28e518368dd812e7effc5deae152954d5c697484fbc8b4ac1d3bf4c3ca627204bf67bc29512925aa7817391cf995f431c6d1ce9d","ssdeep":"192:q7eFEYsCtS1z/jtrBrmKWEVPQwszKZ/HpeQk:cKEY3tgPjWE9QwZBHy","tlshash":"adf1a05ac34ebd1105b478e022e21e97637b5ce4e544f06a9886b279f36b3790b07426","first_seen":"2024-10-21T10:56:54.727226Z","last_seen":"2026-08-15T09:08:05.969241Z","times_seen":427,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":17,"connect":4,"send":0,"wait":164,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"linkgambar.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pemaile.me/bejo/backgroundamp.jpg","fqdn":"pemaile.me","domain":"pemaile.me","tld":"me"},"ip":{"addr":"186.2.161.227","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:31.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemaile.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 16:57:41 GMT","end":"Sun, 10 May 2026 16:57:40 GMT"},"fingerprint":{"sha1":"75:FC:47:A9:8C:9B:FA:5F:4D:A9:82:14:38:79:70:45:57:5B:3E:50","sha256":"88:E6:8C:B8:93:5D:E0:9E:A2:FE:AD:66:A5:BA:3B:47:85:8D:21:BD:16:96:D7:84:97:0A:D9:CC:73:F0:11:D9"}}},"request":{"raw":"GET /bejo/backgroundamp.jpg HTTP/1.1\r\nHost: pemaile.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tNewtpC6gfiCHES0; Domain=.pemaile.me; Path=/; Expires=Fri, 17-Apr-2026 04:33:31 GMT\n__ddg10_=1776399211; Domain=.pemaile.me; Path=/; Expires=Fri, 17-Apr-2026 04:33:31 GMT\n__ddg9_=91.90.42.154; Domain=.pemaile.me; Path=/; Expires=Fri, 17-Apr-2026 04:33:31 GMT\n__ddg1_=y0xqOI9yoXafKE5NwaOa; Domain=.pemaile.me; HttpOnly; Path=/; Expires=Sat, 17-Apr-2027 04:13:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Apr 2026 11:09:21 GMT\r\nlast-modified: Mon, 09 Feb 2026 18:19:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2345023\r\ncontent-type: image/jpeg\r\nage: 61450\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2345023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 852x3305, components 3","md5":"17a3957ea3c44ebfee31a8df4d6dff13","sha1":"648c9720611c53a8ded79ace3213e8078f5eb4c1","sha256":"10d79da2a93c650a8541e3cfdf6550149115d5dbd6e1d1dd45d8017ac5a224de","sha512":"90cbae2f4478679faa17feffd2e4dac6bd9492624d16e7000ee702d8c2229ef65d0af17ebab6b9cac9797c8e2ee58936872b68563e54ee43fd102bd281f9f9ac","ssdeep":"24576:Mqp2RjQ+74CRpFNmyIodO6Udv6yRtT2LGmPUfZAbfJdBZm:yRjQ+7wTL6yTKamshWRm","tlshash":"9a2533cbd406d538c8249774cae2d6e4879f3ba143d4ec66b19cd087afc9620fad8587","first_seen":"2026-02-08T15:00:18.779684Z","last_seen":"2026-06-06T08:44:59.205464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":70,"dns":2,"connect":72,"send":0,"wait":184,"receive":527,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagezp77.pages.dev/slot-gacor2026.jpg","fqdn":"imagezp77.pages.dev","domain":"imagezp77.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-sanca999.pages.dev/","date":"2026-04-17T04:13:32.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagezp77.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:12:07 GMT","end":"Mon, 01 Jun 2026 03:09:38 GMT"},"fingerprint":{"sha1":"F3:BF:DE:70:5B:28:FE:97:3F:9D:28:41:70:73:4B:ED:72:37:4E:21","sha256":"55:7D:06:B5:A7:07:AE:1F:D9:B7:65:B2:85:8D:12:BC:92:64:00:C6:E3:DE:BD:D6:E4:D8:55:70:F3:AF:11:A3"}}},"request":{"raw":"GET /slot-gacor2026.jpg HTTP/1.1\r\nHost: imagezp77.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://login-sanca999.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 04:13:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 240215\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"454e9f31b61ed7c3a1104ad0bc35f47d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iM4Nua%2FYuw77oBx1oJNPCmN5BGff7os66rJnIYBRhRxuSE7El4qi%2FT3OMjiTniHwoOjSKIIODp1Buer0M4ub0YUhg7YmR%2Fuo6uIg6xIS2LtRB5yly0sD0Jz7y%2BgmWAb4G1NAI3E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed899061e8db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240215,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1080x1080, components 3","md5":"325f0d0870ea9239bc1c880a972c20c6","sha1":"3427517fc2274f8baf5cb1256eba264b4af7bd45","sha256":"034c7215c8e9d077ac9dbc25f9e97aac1b04b3542d402cf26399b0876bb95dcd","sha512":"40ba3434b9e82247d1b5df6121f9939e0ea6870b1ae386d25e163356e22cb776292e269107e0ca721c39cadd2c4fd035c6c5f5bc578dc8518a45c4252cf9f315","ssdeep":"6144:dt7Jh4muvmSLMMaXSr+HG9iIX2GUtOl0jv4dIlfJ:dtAmuvXgMvreUiIm9tOl0jwsx","tlshash":"953423d9e5b54df39020e52bd4fcee622f36f5c8fd8e252358570075af800322aa9d65","first_seen":"2026-04-02T03:42:58.715591Z","last_seen":"2026-05-09T15:00:33.458351Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}