{"report_id":"3bac94b7-1dc9-46a7-842e-32f376dcaff7","version":6,"status":"done","tags":[],"date":"2026-05-13T05:14:46Z","url":{"schema":"https","addr":"apinaga5vwr.lat","fqdn":"apinaga5vwr.lat","domain":"apinaga5vwr.lat","tld":"lat"},"ip":{"addr":"172.67.130.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apinaga5vwr.lat/","fqdn":"apinaga5vwr.lat","domain":"apinaga5vwr.lat","tld":"lat"},"title":"APINAGA5VWR Buka Pengalaman Santai dengan Akses yang Ringan","dom":{"size":18213,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"c3a7a2826dab76289a36c5a7b2dd6566","sha1":"ba78167f0022f6d11fc1eb1cfa50a2d06d490b84","sha256":"58acddf8bbac18f141af94903e2ae0a8dde920fc1cd0b11f8fb732bad30c06a5","sha512":"7d8936962c0c164a53804391c4101b48d4141b55e285f9ad7a9ec228855f154d055ea844763ed68f930e9d4c546aebc29713cf20206647011ca1b22d5c065c01","ssdeep":"192:Vd7L4UGeVroA5eLU+LMeLNVLsXyRyw2s/x/skOkRk+k8LvW9yJ9RZOdKoGY5JxvK:IW0A3XQ2s/x/CH29S1pdiOs+EP","tlshash":"de823117b5d96099a117d32245e2f77f2d38c80387320d1aba4d7b98cf59f867a7220e","dom_hash":"domhash80acd06487150b27eee04a82d506c478","first_seen":"2026-05-13T05:14:49.48747Z","last_seen":"2026-05-13T05:14:49.48747Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"apinaga5vwr.lat","fqdn":"apinaga5vwr.lat","domain":"apinaga5vwr.lat","tld":"lat"},"ip":{"addr":"172.67.130.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-17T05:14:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"imgstack.net","ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-18","domain_rank":1373750,"first_seen":"2016-07-24T10:03:45Z","last_seen":"2026-05-13T05:11:04.948067Z","alert_count":0,"request_count":2,"received_data":169376,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-05-11T15:15:59.806543Z","alert_count":0,"request_count":2,"received_data":295609,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"slotplaywin123new.site","ip":{"addr":"172.67.194.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-03-02T15:53:13.335843Z","last_seen":"2026-05-13T05:13:18.773545Z","alert_count":0,"request_count":1,"received_data":706447,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apinaga5vwr.lat","ip":{"addr":"172.67.130.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-05-13T05:14:46.880097Z","last_seen":"2026-05-13T05:14:46.880097Z","alert_count":0,"request_count":1,"received_data":7062,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eb923bf5519b560429c8b0db37c1e3f","sha1":"988f0e1f0cb30b8a288e6c783bbb25c2c3f841a3","sha256":"57fa43a35f28bb6db0d02ef6507ecb2cd4b952aa6d4441f5d156bdbeca8ff229","sha512":"993e2dcb331f86a5bc7c241c4f28bf064c4df1a3fffca040a57d3e2ed4f37dae7428dfbdb66d2add1d11f5d5bee37ea0931bf1c4af2a45d017b5fe0ee67ec666","ssdeep":"3072:Q8SU/TMOu6O7A0AvxZYtG7t8bbiLiJ2lttwnK7DgQ:tSU/TMOu6O7UvaG7t8bbiWJ0ttwnK7X","tlshash":"af54839db286b0724793b074803f150ae33ba955644a812cf56de9d67cbcd8aa037f7c","size":284617,"data":"","first_seen":"2026-05-12T16:12:58.39803Z","last_seen":"2026-08-07T07:14:36.752839Z","times_seen":3686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012605071401000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeab4d27caf84c1910394b32972534d7","sha1":"d54987e0185f51433f78f48d19d459bc3540c2f8","sha256":"504ab7d62040901f4d1e436173330840d22534237065b78d6c87691ca4f81dc9","sha512":"57f2d3d3363dfc6031d89410e517f3a72856710f09e48eeab9c414af6a4f45409ae95d8ed5e4e8578dc411cbbf12e01e1a09811d97122c7b29d9b2c49fa486d8","ssdeep":"96:mTKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0df197dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-05-12T16:12:58.401546Z","last_seen":"2026-08-07T07:14:36.756077Z","times_seen":3550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"imgstack.net/images/VYoMR.jpg","fqdn":"imgstack.net","domain":"imgstack.net","tld":"net"},"ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga5vwr.lat/","date":"2026-05-13T05:14:25.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstack.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 20:14:36 GMT","end":"Sun, 09 Aug 2026 21:14:21 GMT"},"fingerprint":{"sha1":"48:1D:67:72:30:89:D2:10:2F:A3:E3:5A:86:48:17:49:34:F6:62:D7","sha256":"FD:AB:1E:A5:9C:CD:98:C5:EF:61:D9:DB:A5:88:48:56:B5:6F:2A:79:FF:49:79:90:B5:CA:52:A1:60:44:41:41"}}},"request":{"raw":"GET /images/VYoMR.jpg HTTP/1.1\r\nHost: imgstack.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga5vwr.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:14:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43757\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 07:06:42 GMT\r\netag: \"aaed-64f7a5ba25f19\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7NHDjJttkHOV4b0sATpQnSr6LNJKZleIhWi3ovdkKCcH1tXWeXnCvUO%2FCDOe53dC%2FykxY9zJjLhRq3%2B8S%2FBH1J%2F8TFMXmblV%2Bi8Jl1RT9bJgR6Mo%2B6L%2Bv%2B0Uv0TJbM%3D\"}]}\r\nage: 88\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9faf2df62f388deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x736, components 3","md5":"fb66b8bcf4b7015dc51e07fae104ee91","sha1":"36d180224203086065d613ab771a1dccb081262c","sha256":"8f5683a94cd437711c42aca7efb755982b86bafd5a40fd6befc287ebde249c6c","sha512":"f770ed1bba470a826be07adf9df2b96cd01b41b5900bd46d9d1944bbfaeaabd27942bccf48649e39d2ef2c502de97481903f8f87ba8750860f04b0fc7a51ed92","ssdeep":"768:i9T2+7j51iiKTpgBSapRTjZxniB2dNxjULQrueJHz0DrhGBGZm4iNWjrBsDRM9xQ:iR2+Z4zpgBSa/XZxnyWPqwN8qGtiNWjO","tlshash":"6f1302478b7d2fefc6e361322e74a9c99d56cb12262c4047ee1d7c2769bc990c00ab4d","first_seen":"2026-05-13T05:13:21.179503Z","last_seen":"2026-05-13T05:15:20.708551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":9,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012605071401000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apinaga5vwr.lat/","date":"2026-05-13T05:14:26.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:36 GMT","end":"Mon, 13 Jul 2026 08:35:35 GMT"},"fingerprint":{"sha1":"B5:1A:59:53:CB:73:1E:57:72:47:4A:0F:A6:2A:CA:06:11:5F:F7:B1","sha256":"5A:CA:BC:7B:10:C3:08:29:B3:7B:CC:C3:CE:F7:E2:D0:9A:FC:CB:02:28:72:B4:97:EF:18:43:57:98:DE:15:2E"}}},"request":{"raw":"GET /rtv/012605071401000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://apinaga5vwr.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga5vwr.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2963\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 15:36:49 GMT\r\nexpires: Wed, 12 May 2027 15:36:49 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"0382c16cac8af8aa\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 49057\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"eeab4d27caf84c1910394b32972534d7","sha1":"d54987e0185f51433f78f48d19d459bc3540c2f8","sha256":"504ab7d62040901f4d1e436173330840d22534237065b78d6c87691ca4f81dc9","sha512":"57f2d3d3363dfc6031d89410e517f3a72856710f09e48eeab9c414af6a4f45409ae95d8ed5e4e8578dc411cbbf12e01e1a09811d97122c7b29d9b2c49fa486d8","ssdeep":"96:mTKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0df197dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-05-12T16:12:58.401546Z","last_seen":"2026-08-07T07:14:36.756077Z","times_seen":3550,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":42,"dns":1,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstack.net/images/eQVxb.jpg","fqdn":"imgstack.net","domain":"imgstack.net","tld":"net"},"ip":{"addr":"104.21.93.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga5vwr.lat/","date":"2026-05-13T05:14:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstack.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 20:14:36 GMT","end":"Sun, 09 Aug 2026 21:14:21 GMT"},"fingerprint":{"sha1":"48:1D:67:72:30:89:D2:10:2F:A3:E3:5A:86:48:17:49:34:F6:62:D7","sha256":"FD:AB:1E:A5:9C:CD:98:C5:EF:61:D9:DB:A5:88:48:56:B5:6F:2A:79:FF:49:79:90:B5:CA:52:A1:60:44:41:41"}}},"request":{"raw":"GET /images/eQVxb.jpg HTTP/1.1\r\nHost: imgstack.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga5vwr.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 05:14:26 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 07:04:34 GMT\r\netag: \"1e53a-64f7a54049366\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 124218\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nage: 88\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHavJy0iDEHHJaKkh34HDGXokAqUBsRyrc15nA8%2F4Jdk%2BiYskK6MEuEYTgZ%2BVtZgHD1Hn2rR8fMEiL%2BVFuyQh8LmvyJX%2Fimeu8iSnthy82gMsD8L55q8FnB7JGMI5UM%3D\"}]}\r\ncf-ray: 9faf2df8cbacb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124218,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"080e5e1c0ae7397a92a255b807372fed","sha1":"a24a799179bcb6b7be4dbb2f5790ec08221901c3","sha256":"7f86f4d6f560b907eb2b3ae22670ead94e34ead7cf5ab17b9c37db7fb2f1462c","sha512":"90da1b06ff5605e30bdd0b80b0bd7e6c82c95f2854568a45e045312a6683098332fef68a0388cc20aec55b436f6a549035b08da8505cdbe4f67572730d142141","ssdeep":"3072:iVuVhcZ4PKVxq7a7t4pQefOhkDXab7FH/8yMmO3Q8bJD1B:idsKxVmtGtbBHvBgJ1B","tlshash":"eec312ed7b3b13a26a327321c2c287d0d68fa562a9bc4fd294248b14dc59f69075b347","first_seen":"2026-05-13T05:13:21.181181Z","last_seen":"2026-05-13T05:15:20.710757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slotplaywin123new.site/in/logo.gif","fqdn":"slotplaywin123new.site","domain":"slotplaywin123new.site","tld":"site"},"ip":{"addr":"172.67.194.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apinaga5vwr.lat/","date":"2026-05-13T05:14:26.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slotplaywin123new.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Mar 2026 07:06:17 GMT","end":"Tue, 16 Jun 2026 08:03:52 GMT"},"fingerprint":{"sha1":"E7:2B:EA:75:A4:D5:F9:CD:68:82:22:37:3B:20:BA:B9:6B:A6:4E:D8","sha256":"8A:17:43:6E:68:F7:EF:6F:35:8E:BC:FE:9E:D2:93:59:06:57:C2:F6:BD:90:10:82:24:92:15:37:46:52:13:FF"}}},"request":{"raw":"GET /in/logo.gif HTTP/1.1\r\nHost: slotplaywin123new.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga5vwr.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:14:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 705698\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 05:12:57 GMT\r\nlast-modified: Thu, 19 Feb 2026 05:44:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kF%2FH%2FHlUAvNPEYe4rIE9zSUvQNpuh8QtymbGsifEN75xMgowE6vY%2FoStm89AqSp4814y5J9%2BnjmAibP%2Bx9n8UuS522%2FsLevGXWyue9rHBDxn%2BUgNllcrVquxnTDq8D17hD56zCKJYibe\"}]}\r\ncf-ray: 9faf2df8f90fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705698,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"a7c4bd377fde002f0d0a2745725b0763","sha1":"1e21275912def322d3d542294a2f7a4337f3d667","sha256":"0253cf0de7451b64629b930eef480aae65c40773e4ca7b56046c37277e4d4218","sha512":"15b0b96a40038b94a451bd0f03e9eb1ca93a8e421eabe31889027c99bc9535488690238e959cc86180d96152119224514443a0f9d2d49ebc2c8d1cbd4747179a","ssdeep":"12288:GWRFjc4CCigwH41O4GAl8yXJ/hYo8yKTXAKVgCiC4joX1VB6o1v3W5wFEkzltjtv:Gl4xNwsvl84/hayRKxitsdZ4clhtv","tlshash":"afe42324c592c550c3afa00386e68387b77bb1c9a335ed757be9801fdf5b8cb5a1a181","first_seen":"2026-03-02T15:53:16.250896Z","last_seen":"2026-06-04T01:14:54.499794Z","times_seen":35,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":9,"receive":26,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apinaga5vwr.lat/","fqdn":"apinaga5vwr.lat","domain":"apinaga5vwr.lat","tld":"lat"},"ip":{"addr":"172.67.130.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T05:14:24.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apinaga5vwr.lat","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 08:53:32 GMT","end":"Sun, 09 Aug 2026 08:53:31 GMT"},"fingerprint":{"sha1":"C3:AB:33:63:61:34:B8:41:51:F0:00:F5:6C:A8:D3:E5:DC:E7:6F:41","sha256":"65:55:DF:F8:15:4F:A0:73:88:C8:0F:0B:C1:EB:BC:A1:EF:BC:5B:E8:48:25:16:94:5D:C8:10:F1:1F:BF:9C:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apinaga5vwr.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 05:14:25 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 11 May 2026 10:11:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSE96eUpYNXeR6RoZLE%2B%2FAiBDYfb4PqQl%2B5zuOQlNW8mOhGAKEomjIJalALHQrcEFXtcgbEmi4OFjdpvJa3efI6Z%2B2Y82nhWsgk2%2Bavtq%2BVzTxw7Bju9tZsmJxcVydTtGFY%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9faf2df07d5fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6406,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ade841fa711b00e7dc4b57bd33a0dc59","sha1":"c2bb937f4ade42901c2335f37a4c98790327eac9","sha256":"7019ff5b4fe479239373ea44e5742d26d039dcdf2c1b59c67b6a7bbfc79c3d5a","sha512":"4a1cbe957ab98b9383d63fb61b14a34dc2fe0730c75ad5ca8cf0e666e44c6dcbf636b90ea5bf46906d0a6a815578e9af5976732202d477aa3f17e31354b675ab","ssdeep":"192:WcjZm/Z/pkOkRk+k8LvW9yJ9RZO0KoGY5JEnzMEwM:bZm/Z/YWzMEwM","tlshash":"50d171a758f32052a60781b42bfb771916219417da1bcc297fcd2394cf89a918ae336d","first_seen":"2026-05-13T05:14:49.49142Z","last_seen":"2026-05-13T05:14:49.49142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":100,"dns":89,"connect":1,"send":0,"wait":570,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apinaga5vwr.lat/","date":"2026-05-13T05:14:25.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:36 GMT","end":"Mon, 13 Jul 2026 08:35:35 GMT"},"fingerprint":{"sha1":"B5:1A:59:53:CB:73:1E:57:72:47:4A:0F:A6:2A:CA:06:11:5F:F7:B1","sha256":"5A:CA:BC:7B:10:C3:08:29:B3:7B:CC:C3:CE:F7:E2:D0:9A:FC:CB:02:28:72:B4:97:EF:18:43:57:98:DE:15:2E"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apinaga5vwr.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73119\r\ndate: Wed, 13 May 2026 05:14:25 GMT\r\nexpires: Wed, 13 May 2026 05:14:25 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"d1c4b9bc9bd9eb67\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8eb923bf5519b560429c8b0db37c1e3f","sha1":"988f0e1f0cb30b8a288e6c783bbb25c2c3f841a3","sha256":"57fa43a35f28bb6db0d02ef6507ecb2cd4b952aa6d4441f5d156bdbeca8ff229","sha512":"993e2dcb331f86a5bc7c241c4f28bf064c4df1a3fffca040a57d3e2ed4f37dae7428dfbdb66d2add1d11f5d5bee37ea0931bf1c4af2a45d017b5fe0ee67ec666","ssdeep":"3072:Q8SU/TMOu6O7A0AvxZYtG7t8bbiLiJ2lttwnK7DgQ:tSU/TMOu6O7UvaG7t8bbiWJ0ttwnK7X","tlshash":"af54839db286b0724793b074803f150ae33ba955644a812cf56de9d67cbcd8aa037f7c","first_seen":"2026-05-12T16:12:58.39803Z","last_seen":"2026-08-07T07:14:36.752839Z","times_seen":3686,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":31,"receive":38,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}