{"report_id":"42c38785-16cb-46a3-afec-615232f88bf1","version":6,"status":"done","tags":[],"date":"2026-02-02T01:17:28Z","url":{"schema":"http","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"title":"Situs Taruhan Daring Terbaik di Indonesia | RIANG4D","dom":{"size":15262,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15259), with no line terminators","md5":"69cba02e6d9ffe38e3ad34991906e7f4","sha1":"641872d1ee4ae21311c576e5c2962eb910bfc564","sha256":"74596ef34af158aafb12d6741996c11c8ff8818e40cb65e5e603023cc8a46ac9","sha512":"c6d7dbce24c82f358c1fe5dab7991850ac3ad48ba504c135032309835f97e198026ccf54661efea1451401b39acb4691dd0c661cd707e948480f56956eabd5a9","ssdeep":"384:T8oOpXaCpl6sGiTphidGzzCZW7+hpV/hpCKp9JQ:ThOhnKsGiT/idVZ1hnhsKPe","tlshash":"4f626171a702203561070bccf164338967e7f38bd78694acb3fa46b2dbe7cb92954a15","dom_hash":"domhashcbc2f63f4c7673d48ad6e4f5b2d46557","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T01:17:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img.viva88athenae.com","ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2026-01-30T07:26:28.168153Z","alert_count":0,"request_count":71,"received_data":1601636,"sent_data":31833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-01-26T04:55:14.118646Z","alert_count":0,"request_count":15,"received_data":1826478,"sent_data":6584,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-01-28T12:47:21.138275Z","alert_count":0,"request_count":1,"received_data":2220,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"v2assets.zopim.io","ip":{"addr":"104.16.200.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-09","domain_rank":335007,"first_seen":"2017-01-30T05:07:37Z","last_seen":"2026-01-26T12:33:59.980293Z","alert_count":0,"request_count":2,"received_data":254599,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"riangbersama.xyz","ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":21,"received_data":1321137,"sent_data":10489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":4,"received_data":534628,"sent_data":2051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":5,"received_data":121286,"sent_data":2687,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":8984,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget-mediator.zopim.com","ip":{"addr":"3.74.80.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2006-11-16","domain_rank":38190,"first_seen":"2019-04-23T10:46:17Z","last_seen":"2026-01-28T13:17:20.229273Z","alert_count":0,"request_count":1,"received_data":564,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8777-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"817a141c2c5d523b0969cf8c05263c80","sha1":"78b6b73fefa2218187ff2d3c110ea1773d16ab8b","sha256":"469acf653f1a0078e47a10372a307da8a93a9d06eaca4533ac4db99d28be7357","sha512":"9c9daac830df73a96bb7a7b83dc8a3bab8137d220c5970b70bbfb32f6f2ac5c13ec79c52a93cc900396a358a7c3a62b71f082e675d6a66d169e61b6e7448793a","ssdeep":"3072:KeEMH1Ac8RUvg0x7NKoAwvw75MMXQie1mrMFfWqVt8geP0V0hEttFjZBkOAF5:XO1RUoyKN9MMXQie1PFfWMt2","tlshash":"4714f796ff95b47277d76281806b0511aeba112d200b8c6cfa78c9d21e35dca613ff39","size":192844,"data":"","first_seen":"2026-01-12T20:32:42.563494Z","last_seen":"2026-02-19T06:38:02.589767Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-lazy/chat-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c21fe9e01667f245d3e65aab63bdb3e4","sha1":"600b9e019fd3c6c35370b5412eac895791818458","sha256":"f8c1e874ed384f902010991a87df54cfdc878d925c4d9d205c61ff777307135d","sha512":"c9926b7a1a2dca4adb41bb04d1f350e05eac84b4d16500fd484a78103aaea6e32d16ab2d128829b5a181b4fe3c67f2203c1649cfbf0611f484d37d7882bd1781","ssdeep":"3072:CPP4ZuRuZOkufRGCl0RFYSqSD3rNpbGry:CPP4ZuREOaD3Jpbiy","tlshash":"d3d34b76f086726c9a6784c2eb36994db26e6d08f50e0178f5386ca505dd4c3233bf6e","size":139315,"data":"","first_seen":"2026-01-12T20:32:42.567793Z","last_seen":"2026-02-19T06:38:02.613555Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/js/old/jquery-3.6.4.min.js","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-05T08:29:46.856441Z","times_seen":2583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c5dd8e07ab2aa7b83e02dc4bf193440","sha1":"fd20251c226f88ee9aea54d933f529087580b608","sha256":"a1f978d318bcde06be72d489bf706927cf87fb04fa8bdc10570ff42e086fc0b8","sha512":"e458418e143c493a9bb6580540fb48a864d907f7831070e217929c907c7b59c324b5fc4e160c70c5d73b6911bcc94ae71962db510e450c1f31f85fb976f24fcc","ssdeep":"","tlshash":"ae112b2417b10220011af6469bc95750623c415fa444dc1e7d6d569a5fa2f1a12fceb9","size":944,"data":"","first_seen":"2025-02-14T06:27:47.014565Z","last_seen":"2026-04-05T08:29:46.867935Z","times_seen":1607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=5832abae-a4ae-4d79-a2c8-9845fe3d7562","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","size":10134,"data":"","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535e065fc4023a5b83ac59ad739ceec3","sha1":"85aceda883b231d5a8c7e11a29d93912e199f9ed","sha256":"343ea09fb9e954fa1383ab01432325fdd0c3535a78cd2d677d7a4c0879b51274","sha512":"bb2965db9dff79bd8adb3d4fce7cd426084312bd6ebb4da71eeb5c0e14e67672b1eb52711daf2c22520eb2917453601497269c670734c6e68bb20ebe01491e3d","ssdeep":"","tlshash":"5141c52af1db0dd34037ace22afa8b503b5841576447c6123ebcd94d6f63d1b6c634aa","size":2197,"data":"","first_seen":"2025-12-08T08:31:50.012227Z","last_seen":"2026-04-05T08:29:46.868419Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-103-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15aef6ca1ea087e9bf824d638229f018","sha1":"e4b63026647999b75fc991e72f91c8220c48542e","sha256":"329c6c08b48aa7e11cc49ecb2d08602f1dc90c2c6812d3374ee027fc6aff8e05","sha512":"f6ee597dd2fc6cf4f30c886094e33f37b6fefcf09e2fbe0809b84337ea5d9e5048c2d0f1d797b448c21bac900505bd48cfdf7236aef9894709aeb33fd3142cbf","ssdeep":"768:XqQ7OGcha7teOfoMbNTY479K4gP4NDgPg+imjLb7v2u5kWLPv7wywe:m2RU3+kR","tlshash":"a00309887291f1f157e7219ad47f560af23aa428740ae040f221e8e168b59df517bf3f","size":40099,"data":"","first_seen":"2026-01-12T20:32:42.575939Z","last_seen":"2026-02-19T06:38:02.573341Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-7623-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"898c9b8878fbcdff529aab240c79baa4","sha1":"4367b1a211e028526410a98196eadf48b15801ac","sha256":"3a51ac7d4b79333ec182cb21eaea9805a1329b49286317c6f24689d34adcf837","sha512":"9eb69b424190c4470d906240aca6561f727aa9cf475b539b4130276b62431420d6760092a450d13cfbc67b864f12c7b638ff437f5160044857e56b557c3f10ac","ssdeep":"768:BwZXuJBnh8HgBYMqnk+B3Ob/wbMurTJTVvCKH6cas3kRjEXaSdEADOceAScHpIPU:XZkTrb09cZIid","tlshash":"e30319325091a7dd191b8ac456b8d18c7b6afd88f51e03b0f62dbc27279a4d22433b5f","size":37723,"data":"","first_seen":"2026-01-12T20:32:42.566893Z","last_seen":"2026-02-19T06:38:02.584262Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8024-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d71e126085b58712441f7fda9d96b31","sha1":"fffc95c21d16f71c4352ddcc82e2c8ec1f1f31b5","sha256":"82a1831888e746ed5cb1bcbffb0056be350e58b022408caa84710af71ea7e157","sha512":"6dc43d40851030f08ae1dc0d1e6b9eecdd3bcec5f570b0b035e28125c77b950951921d121bca112369d087673c24bb0e6d6387ed7b954043f06a1d37b28ad9d6","ssdeep":"768:X8rBhsls0yQt8yHsqwVVzULLGcGRsECNoqcNAjx5MMJMjRTnZVwjb3G+yzx2OhLy:mBAtS4X8qfcj5I1TG/VzjNo","tlshash":"49031ca631d2b0f497e7c0e9d0bb5a05f77b750c740d0624e295eca860e6ec5b227b39","size":39401,"data":"","first_seen":"2026-01-12T20:32:42.573794Z","last_seen":"2026-02-19T06:38:02.610069Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e2477f4c5a9dcc21f90adc24161ba6","sha1":"d5c63ecb6453bee0fc3e4117df6722b8f380d6ca","sha256":"405c3e0958ecd7daeac61f87b3c3d4843b70262085f56fef581cf6b90a12a525","sha512":"a4942a9dd5e4abaa96126942013bf09c67a3bb31348cc86b8827c41f55234d83930473b0da3c51acef446efe38383b3fc34b7bbf0211970a053f488a2bdda700","ssdeep":"192:MdLXEAB7K0tHXdFVEm/38KwqgzLDXV69LVSyQgkc+HXSixyeNfuUMc+28fzmJZ63:MBbttEm/JsbgHuQkPS6JE8rI6/w","tlshash":"1e62ae9975b3706b4623e0fd4bdf8015a3248817210ccd44bf6c9706bfa6b64cef5a9a","size":14821,"data":"","first_seen":"2026-02-02T01:17:37.514306Z","last_seen":"2026-02-02T01:17:37.514306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4434b133d07794f1ccc6a43e1974db04","sha1":"f70242b35b72cf83277447f6fb561b415da4cbab","sha256":"60153c5b27067a5fde46b6b605f3bf23a8b16e2a835c8bd12f7f4bbbbaaeaa43","sha512":"9b3fce4cd97fde5577760425c5b85975927121bdabe973b4ff20c856064b653c1231dcf7f722107ac01cffce6d732be821342e6a1c9d3c97be1b5ce06caae689","ssdeep":"","tlshash":"6ec09b5b637535314567657505eb41643420d18b15055c1d3d6cc7724f33a550f96a8c","size":181,"data":"","first_seen":"2023-06-26T19:27:32Z","last_seen":"2026-04-05T08:29:46.869855Z","times_seen":2563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20575641f622ccf3821d05cc5cf63d6f","sha1":"64698f213d5ae4357dc2921eaa143d28e1b527fa","sha256":"35deed5763bbd1e582e2034fa3b7aa584aad6f113c07d5a439293465e1d89e91","sha512":"03ecf66185174dd2a49c6dcfff42d5d3902d598f617f293cce928ae59fcaf67a3261469d8307133583badfb61c1e3c4688369049fcd11981f0b6181bb9307e8d","ssdeep":"96:YM9wDy8CGyd/Chycw02IEVL+Mui58SNi0SFHCFaiM/7ixK:z9w28Od6wtvIEMViKSNilCMio7iE","tlshash":"2db18f2d01a70a71496365fd6e8b285470b69003700ddeda3e2d1b017f96a299be37ff","size":5439,"data":"","first_seen":"2025-08-19T06:06:52.988416Z","last_seen":"2026-04-04T13:22:12.731797Z","times_seen":819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"175258ff814b5c134ca0b32510211fef","sha1":"05236b3554ba1892e75e67e470f737cfede747c8","sha256":"b6450ab77a8c1e141fa15f4a469340158eb7ae036cdc48b21441463d83fc3bc9","sha512":"fe0358972f7ef32bab67c76f6ebd6da18427010c5d7b5d123bc2d2fb6157b2937142a38d1578b250b4452ea7517cac27b0b34abff68c095d6cfb75bb78a8155e","ssdeep":"","tlshash":"2e71ef1af25705220acf69be27e3078535b08447a504ca073d2c56656fa7fa7263abfc","size":3758,"data":"","first_seen":"2025-12-08T08:53:31.349411Z","last_seen":"2026-04-05T08:29:46.872669Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-main-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43ce50203e5b1c7aa96b22799503e366","sha1":"c06406ed0dd9d6eb9e17406672f659193a8a5204","sha256":"d1da2e8fbf4b4f2584ca0a8e1c659d5225ff51fb8a5f2270b6f4d0cc0c8454d3","sha512":"28e2cb391292bbb272cbc347d6f1dfce4448e2a3b88a243d45358fe7e2e7801dd9cd48324534bf1253590e0637874062bfc796c30484775f1a66d9c6b8bba68d","ssdeep":"6144:d4bVMmc+y5d5qQ0bGBH4H6Ww31ztMyenw4N/mPBub4zc3lQSuUYMVCIQEQX/jR0Z:d0c+PgZPQ3+jUtCg8822URnQnPEC+YD","tlshash":"32055bd93192b0a607e750a5403f000bf33a6919780d8960f665edf9bca948eb277f7d","size":850749,"data":"","first_seen":"2026-01-19T16:19:09.57544Z","last_seen":"2026-02-03T12:50:40.393256Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab9bdda3847e8d3b65353203cfa2118a","sha1":"2afc6f4f6400dc58aa45e14eb3cb75194b351646","sha256":"b9cc9a0c33e8f0a92ae6b066dffd5f6f1dbb8da33010b8898297e44e4a66334a","sha512":"3abbf0bd5bd7cd37f92783bb7c2c871872dd5ded55e5f9e78f3b1f859102ece9259a39126bdc85c5bf412ff08d351d4c318dee5836a4bb2107a83bfbecfebccb","ssdeep":"384:rdq2te24z8VEB4yCSVYC+tn52PX2NT91z:pe24z8V24R+3W52PXyz","tlshash":"39c25c3f8519a52c3f75b1d1bc51a60eb9ee8940b88853b1f80624a407e5da570bff8b","size":25884,"data":"","first_seen":"2025-06-26T13:05:43.085379Z","last_seen":"2026-03-26T16:27:53.579991Z","times_seen":10044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-655-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a671a157da6206b1ae1aff5ef7d37a","sha1":"3fff047a5f619d5116d5751e065beae9b0da9fc1","sha256":"ae3e73e24e5390e07260e7fc52d14d3eadc9cfb87f8c0e6967ad9c7f35436aa0","sha512":"ca50f1a728da3edbf7eb045aa61754190195882a217e9c3263d8149efa192e8fc4c7dcd570524d6b73cba2c13363b6f77453d7742df2020f05ca4d9dab34d1c0","ssdeep":"768:w5I6zt/owtA1yP3fJ418T/a4vcOd65+xss9RNHdTe+FnPp2t+1rImq0zrUycCjMp:WAId418O4EOdN2Y1smquUtJRsjlolp","tlshash":"a42309c875f270ea5bd350a4c8ff5505a77e36096c0d4484e2d6d8d625a8fcef22bb28","size":47872,"data":"","first_seen":"2026-01-12T20:32:42.57678Z","last_seen":"2026-02-19T06:38:02.600995Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3c144b883a3abdbbe71701ebb0e66b","sha1":"9a6863582eebab6a5c00391ef8a37b3afa855945","sha256":"26ded8f2b1b53d104c738332e3ede0dc27518fe9aba6ecb67be692592f02e88a","sha512":"e0f0f98278b181b703d238011b3e8828c6fe283659371d445ebcac8ab548032e7c32011575d5584e9e1f1b28faaf457febc3105f135548494d44953d07a4587a","ssdeep":"","tlshash":"84b012dc70b9e10402342b80495b415c341e500e310e3cb3104c0f48471045400c5118","size":90,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-04-05T08:29:46.873175Z","times_seen":1586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-05T08:29:46.741504Z","times_seen":4230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-lazy/embeds-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc8b02be67805e87aefe4b41b78b3a4","sha1":"fe24d7cb8e1a878514dfed21af08e7c9d069d76d","sha256":"ee7b248f0dc1f92423d0e4be8ff93ce84b4c3db0d0dfff8c9dc91fe95664d579","sha512":"fa0309e668740c1c7f2934a359a92ffcf56565eaf9266162651943b1d8447316da91b93d27fc785778603fdf0d572e828543fd704caf454ae79d1927de8a3b51","ssdeep":"1536:t5XJ1mb51XqKIB5lANfpk2c32uU2v0pepe4Xy49HtU:jJAb51X2lUkRG0pe4XO","tlshash":"cd635db6be40315ca563848ac013f4d9597e6448e60a4f3df6dbadb14fca1c83d22b5d","size":69422,"data":"","first_seen":"2026-01-12T20:32:42.562509Z","last_seen":"2026-02-02T06:55:40.904494Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8417-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e64c1e80c5433248097832cb6d97db04","sha1":"2bdab665d5a4aa47f19cc7efeb322f27978e25c9","sha256":"e1b1f22d83b9a1d9adeef15906a22547f15c7416eb13fdccbc4084103cd1dd1d","sha512":"196b0d33985444f2fa6c83a389d6ec653551e0f16b9f0ca0281f74e9604ec90d71f0e6d7dc61cb9f8082b0c471c4137574782c07c9650064bb138e8679534e58","ssdeep":"1536:JFMFWWLdZXzWIrd4PWiby4+JjQAAkqInOW+vU70Lh9Mx:3Ad1xryonOW+M29Mx","tlshash":"ae8307957291f0a04be351e780bf850af337245cb40e9154f259e8e828b5d5fa17bf3a","size":87176,"data":"","first_seen":"2026-01-14T14:14:16.855219Z","last_seen":"2026-02-19T06:38:02.609573Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/js/old/new2-webduo35.js?v=1768455952","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76abab2386cd78bb4d889b6b3b0daa84","sha1":"74f6b725b88e76e47719043cac71eef3e8cc948e","sha256":"ba6f03ba9e5e2dd4323bcfeba4ab5a30b303e48003ec8f88e1ba7f519e85bc3c","sha512":"a64be7a094e432b4c34dc9cbcf647f8b944772fe610af6e1e2a10a9f11babf32db7ab356119439c1cb6a37d756d294a40010dfbea799bf5503572a2d5313deb5","ssdeep":"768:SZMaBlntNraBRdXhG8Q8Y8o8sAMgmMuYUQ6cX:UntNqdXhG8Q8Y8o8sAMgmMuYUQ6cX","tlshash":"ffe2314aff4c4acf57b626ac483b91c55f4d4c28e50b4e02fe6c54c86b4b615b272a2f","size":32875,"data":"","first_seen":"2025-11-19T10:28:57.188911Z","last_seen":"2026-02-16T00:37:27.174078Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e6f7ec16ddbacd4c8035231c304f9ae","sha1":"9147f82e989f72ba1d8054ac1552a9d83d0a821d","sha256":"bcb4d2205cb087e128555d21ce367e3b144f3043d59975d82b4f7b0b0b0a9bbc","sha512":"fbc9847ae17d6dfc895b809b5b10b3ecad458a58c4b1d36a25661c8d93bad0325228d59c92439be6d9ad63775830bcd2933da0324c66b57e29b03438a2eac463","ssdeep":"3072:lHhLQkLRYjbg1U6aSVVQMvSzBtSamlYBxeUPRb:lBUIYjbg1U6zVQMvStINYBxeU5b","tlshash":"88241914f1d0bca611e392acd2dba64cf268c537e44fdbad665040dde4e814ad12af3e","size":222450,"data":"","first_seen":"2025-09-16T15:18:44.7622Z","last_seen":"2026-03-26T16:27:53.619562Z","times_seen":6119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9d8b92096016dfd74d2f2500556464e","sha1":"0db4e74b955611b21791405af062346f34ac2eee","sha256":"eb2902ff32366de00d3afa351aeceb1357d5a468eacbb2fd92cf115276d626cb","sha512":"bc78ca4e3b2706a5b054504e3534689fd85f66e118a47bcf68c9e2457b1f7152930b21b81945ee2f4e84ee50a5664e11c68841d5c11a62b3d926246e6aa58456","ssdeep":"","tlshash":"17d0a705ac91bc3d311611cfcc794b31a4564ebab31d7da1ac583c845214daa0ca91b7","size":236,"data":"","first_seen":"2024-09-26T16:31:04Z","last_seen":"2026-03-26T16:27:53.569167Z","times_seen":13261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-6108-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a8803032cbb29b0eb1d6c674168271e","sha1":"21b5b1917a59d578c2adc48948a389298ded3ecd","sha256":"a53f8aff4225de9b98d6e616bd2bc1a533ed4243dc793ad0a8ba7755668ac7ac","sha512":"3265f98ff614a5a845dbb95bbca7b35326f14eec4e9297828b7570e5642b1dda7d9eec99ba52a18105a4f9283b46b8ed6322504cad7d89e053e38b34a00550a2","ssdeep":"768:NUT8CW7w2wauihIEOUsnsenwSnZdknCMuc4A7:KTAueIDUJenwWdSrr44","tlshash":"ecb219096d5dd83987dc31c86cfb1e0991fc040ae408e925eeddfef869a876820576bc","size":25514,"data":"","first_seen":"2025-09-19T12:46:07.16585Z","last_seen":"2026-03-26T16:18:02.173185Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\ncf-ray: 9c75d8ca9d0b5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5247\r\ncontent-disposition: inline; filename=\"sport-saba.webp\"\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=08DCvW0klYyVFT4gq_MTHpOeiR2FCLRgJH_TcuwtM2k-1769995025-1.0.1.1-ee6s2rdXokHutVw9RMV.JM30ws.u1EnmIaU7.Z1xrTvujbocyg2P7LiOBX.QpqZqJqLUuJetakM76Kva7IcsNZUE2xUE_sE0XpQAWlKYdG8; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.732279Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\ncf-ray: 9c75d8ca9d185ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1698\r\ncontent-disposition: inline; filename=\"sabung-sv.webp\"\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RXkl9VvV9Dq8CdiZevi.70AoGheNJ2hXoJ1GoaMKGOc-1769995025-1.0.1.1-18Srz7VBsUs8M.yREYf2Af9fKaLh5FC.ZLujStxK8QPE2uNwSv3c39osWmPPgXddxEY.m8jT6uPwNc7ChxTeuGbsDxyDqjmE8k_Q_.YjSdM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-04-05T08:29:46.738161Z","times_seen":1337,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\ncf-ray: 9c75d8caad315ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3881\r\ncontent-disposition: inline; filename=\"whatsapp.webp\"\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=m_dgALdiLiJZd1yfNhZKefClN1KncTs8PBi9_9L6F5A-1769995025-1.0.1.1-IY.aCcxEeC474Gz88Hvq.0yvJWVM_FsEtz31PL5tVHU9ag0NxsNaGVQjkBlWAXRd6.9D5Fx8ANEfrOpdw1SBd0ADK4HThQm4jFG.yfkqcoA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-04-05T08:29:46.72845Z","times_seen":1448,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/upload-Slides-20211201121947.jpg","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/upload-Slides-20211201121947.jpg HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 55291\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS5Ftd9oJIZU%2B6ibePIx7xloLht3R08XFk9qXsGBcByAAuFMSBjZB5RwgpS8vEocrOtZNa0a0frHzIEny7qt%2BMEnmat5NAUu0txR0CQ%2FUkU%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cafc22c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x180, components 3","md5":"553fe8cfb4577386efdd9e7a300e5bc1","sha1":"8ad050a1c4a0e29f062b14058a05be049f3cf32e","sha256":"4c6b9a30ca114d3b14f2c0c289ff55efda4a4737536c5eecdd433d743e4c1316","sha512":"06b99e00b8cd8f43813ed01886c84aa00bd880b903de6037a24109372a4d21668735a9d4e47d0a929484155f967379268e3fcb64693fe784ef9092a3cc16fcfa","ssdeep":"1536:HgSuhmVP95rfEaxtL1tTf6PTUt+wSWWhNU7UGHz+M:HgDhC8axljf6LUt7SWOyb+M","tlshash":"bc43012ed560c83ee9855debf3cda13027501c24a84a2cb798d77ff9cf092044a9823a","first_seen":"2026-02-02T01:17:37.44674Z","last_seen":"2026-02-02T01:17:37.44674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-25.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /banner/mgl-25.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 456456\r\ncf-ray: 9c75d8cb0d885ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=479007\r\nlast-modified: Mon, 05 Jan 2026 05:02:02 GMT\r\ncf-cache-status: HIT\r\nage: 3138\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=7ve2xeQitAMrjNeArWy5zjz5Ndilkd3yF.EM_H7GJdo-1769995025-1.0.1.1-RsWQ8AgNDvny61Oi9.BFWq9pNsdjr7nMhzRbkcYIUI8lJ6MiU5yXmYz56M09LK05CWWYHkX3cwDCb8ZOjpaRPDU7tm6a0RG.R0.vz9zhZAY; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":456456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"a13a15dd75c19c2bf532a12911ec1acc","sha1":"2863d1f6f4b8993706031f0bab4a11ff054ebdfa","sha256":"18f9d503cd62f6235f976e678c7ee84191a797ec5e650b38e4056b9a4522ea54","sha512":"ccfd5970864dc401adbb6f4119116296b0068672bff2a5cd88396601470d21667a3a499f81367b5d99f644cb0975b4563476e1004ebfd7cbe4c59736f584d2e3","ssdeep":"12288:aSOwbcJ1HAnIxUlgM+p50BZ9bEpguDzNWAbiIuf5:gw8sIvObiBWAtuR","tlshash":"eaa4239ca1fd2997f2e793968a3c81c9d8334c10b91232ad262d2c043ded7e455dbe5e","first_seen":"2026-01-05T19:48:01.155492Z","last_seen":"2026-02-02T12:14:53.801629Z","times_seen":114,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4764\r\ncf-ray: 9c75d8caad305ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6850\r\ncontent-disposition: inline; filename=\"events.webp\"\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=u6WGw5tsGdoQsVyzfQk0NTNYsWJ3n7Q_Qwe9Jw2eY3c-1769995025-1.0.1.1-GZyASlHhOrVwVwwxjMHMPJHIaMTgUwZPyS8LFcNypAbDky5g2r54NbHX0XUcUbxt8fyQ14JG7TpMLqSWPxC3iB1rh0HXtEe2MwPdHQQu0W4; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcc8214161918b4a6454d0012185214","sha1":"ef1cb58cdb13c4eb20d829b0a1e5c0c7ad07f1a5","sha256":"50bd32098504e3e1e509c05915be1871628a9486e8d76b84f13384b27df09c62","sha512":"80232fa4bb935ba30c39608c09de8d0092f8a755017025b43466991cf82665d7da23e98170baec45aacf6de7b67e0a652e9e384404b2a1e1e44193a5f60d15c9","ssdeep":"96:5OAObmsqYZpT6KVsJjm5Odtk0HxVGBvC5wyJ++D/Vetw:4isqYbu9q5ONVbxJ++D/Vetw","tlshash":"0fa18f3e4236d24b80457babc61d963a7753358ed501feb40fc32752d1758f602816e7","first_seen":"2025-02-01T22:41:26.02949Z","last_seen":"2026-04-05T08:29:46.734245Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/upload-Slides-20211201121932.jpg","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/upload-Slides-20211201121932.jpg HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 162592\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSCkYUD%2F%2BUYb9a5v9RT1DUtMFnm6e31hwrjVFT9Ft9o8AtWX3oJ50ohCQKpNrtO2wnSLA6u2K3tRfxsxePMZHVHD9p01aHU9kmZZysMzIGQ%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cafc21c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162592,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"2e512658c16c4db16190ee4a69337564","sha1":"f2008b6d3d6a03c37bf21ee2b1954d546ececba5","sha256":"2ff3e41d638904636e6c36f24ccdf4fe4753e1f71c9204f6ddfe09620f725e76","sha512":"5b3a5751c0e4ab26751e44be2a954070f00fc0c00e5887cc48e787c39043bdcadb717880fbd8235ae4dfc8375d985af870cbf19e4ac50295b0be87b34326b64b","ssdeep":"3072:bg4wIeDsuZwgWbQefUnodgtNj7YDSUiYJFftCbzLFCrRHdzU7IYFGNK:b3x8nWbQe+FNj8DSU7t03F1OK","tlshash":"fbf312a30611f8cfee3c0af0951361aa4b3bef890a5da0eb85e54974da3d17451fd06e","first_seen":"2026-02-02T01:17:37.448804Z","last_seen":"2026-02-02T01:17:37.448804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:11.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 02 Feb 2026 01:17:11 GMT\r\ncontent-type: audio/mpeg; charset=utf-8\r\ncontent-length: 19698\r\nx-amz-id-2: qwvXOc+BMXfbAx++WPFwdFlr4mGbt6K3jhJY1NCT20Io0Pk69DcLdHHY8Ku0EOCwlqM/L0PrEbi0888851DKfamClwxP4ml9\r\nx-amz-request-id: WBSJ5FH76KPPTHJM\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 16 Sep 2025 18:02:10 GMT\r\netag: \"f11ce9e8f40a392830217253fe75d6de\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 19 Dec 2026 11:24:11 GMT\r\nx-amz-version-id: fXRW.Z2XvSwTWTR8QPmLK1w_RZC75l5g\r\nage: 3013711\r\ncontent-range: bytes 0-19697/19698\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TMl6dKty4m1fC34ZS76wimBhGhxeCwHCJ234KcNmQV1a4pLpoL3ctdQFyxCm5sEtLGKj6ynhHJnkdQHcyc6KSOTvP5ZH%2FUg988gesWuZ%2Fdh5nyNq8Un%2BfCyb1VAF1qJaFgEFex4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8f25f7f56ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19698,"size_decoded":0,"mime_type":"audio/mpeg; charset=utf-8","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"f11ce9e8f40a392830217253fe75d6de","sha1":"89ba57fcc360da34756c127acba15a8b23267fc6","sha256":"05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee","sha512":"00aaee50939ad1d95b52f4a51fa3e357bb561aaa19817ad24ac174d699080539a75d84ba6ee26d59bdaf45c201ee4d41bd4683a9484c78575d76b67ce65037ba","ssdeep":"384:2kWVjAhqGJp3T9RYGJWbv9+5OQHPIoyOgos:23MJJ0Gwb2uOvs","tlshash":"64925c36b5683880e04fe6795edc5455cc530dd3a6f0ac88b9dfbd4d4f312a12d2a26b","first_seen":"2023-04-05T14:35:10Z","last_seen":"2026-04-05T07:22:42.305583Z","times_seen":17697,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8777-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-8777-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: fOk7iH/jtC+aMqYOk4vLkkFQj1RkoTAzcE5lXUx/x+PcUGVzn7O9xlaku7LGcvaEiPbqBKUmkB0z5IIOTeCBEW9qPqI87AFY\r\nx-amz-request-id: JJ69N75H57WP4QW3\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"817a141c2c5d523b0969cf8c05263c80\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: r_rC4atmioIyc.LC.joGzTppTVpTXR9B\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2bKMtrTjuAP70z60PVfBS6%2Fw8Q6XqrxC2XMIyfBMmJ%2FAssl4CnJixvfD3L4WhQU3m8tOvd7or2PTFJXdzZkf%2FIieY8bfdHKvRLjrAD175lYBFYYN5nzEZVjZHLFFFT%2BNJWHAssI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff2c0256ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":192844,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"817a141c2c5d523b0969cf8c05263c80","sha1":"78b6b73fefa2218187ff2d3c110ea1773d16ab8b","sha256":"469acf653f1a0078e47a10372a307da8a93a9d06eaca4533ac4db99d28be7357","sha512":"9c9daac830df73a96bb7a7b83dc8a3bab8137d220c5970b70bbfb32f6f2ac5c13ec79c52a93cc900396a358a7c3a62b71f082e675d6a66d169e61b6e7448793a","ssdeep":"3072:KeEMH1Ac8RUvg0x7NKoAwvw75MMXQie1mrMFfWqVt8geP0V0hEttFjZBkOAF5:XO1RUoyKN9MMXQie1PFfWMt2","tlshash":"4714f796ff95b47277d76281806b0511aeba112d200b8c6cfa78c9d21e35dca613ff39","first_seen":"2026-01-12T20:32:42.563494Z","last_seen":"2026-02-19T06:38:02.589767Z","times_seen":65,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-7623-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-7623-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: Q4xD0npHWaIRPs4OhZCWisjrkSb3pjI9h6AKSRY7PvvxOKiO15BIQ1I7hVIeDs9cmecWZ9ZIOnnsYBWra0GRP2GVk9WRU1F6\r\nx-amz-request-id: JJ64XHR5RWZ5DFPH\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"898c9b8878fbcdff529aab240c79baa4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: It6oVfcPywvLxSTiQAMRtR6jrXf7Nee4\r\ncf-cache-status: HIT\r\nage: 1161107\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DZLnJ73Bh2fc%2FH7VV3mlO9g%2FGsX7zckEjXnm8WH6ehOAalQlDsws3dzSZ3fh6xTFZz%2BKp6ZzRwW%2FA0DW0Yl6uiA5UPwOTTCsC3ZmHL%2B2Lj%2BWnywu84j%2FBQuVJTpxqu%2Fn8GGhgms%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff3c0c56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37721), with no line terminators","md5":"898c9b8878fbcdff529aab240c79baa4","sha1":"4367b1a211e028526410a98196eadf48b15801ac","sha256":"3a51ac7d4b79333ec182cb21eaea9805a1329b49286317c6f24689d34adcf837","sha512":"9eb69b424190c4470d906240aca6561f727aa9cf475b539b4130276b62431420d6760092a450d13cfbc67b864f12c7b638ff437f5160044857e56b557c3f10ac","ssdeep":"768:BwZXuJBnh8HgBYMqnk+B3Ob/wbMurTJTVvCKH6cas3kRjEXaSdEADOceAScHpIPU:XZkTrb09cZIid","tlshash":"e30319325091a7dd191b8ac456b8d18c7b6afd88f51e03b0f62dbc27279a4d22433b5f","first_seen":"2026-01-12T20:32:42.566893Z","last_seen":"2026-02-19T06:38:02.584262Z","times_seen":65,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/style.scss","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=expRcE3A8kUEdsnxBvPZqhgN4FhSFkxvNv05xrqx6suL6z%2FffdmVk1fzvg4Zdu3E1zF91WtTdtb8LIWBAnhUQCr%2B%2BLfhdrK8fMediBRVmdM%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c75d8c9ec12c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/css/old/light.css","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /css/old/light.css HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLP2OrbOuxto90PvpA8DBH5lpUgfiFABLID9g7LQy93gtFy1COgjICBwKrM91MmAuvqTeFdZ4%2F55N8Gsg%2BcUcvFgw16qbB3RJNKW9e%2FjKkc%3D\"}]}\r\ncf-ray: 9c75d8c9fc13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"918a774c526038844073234e83746e7f","sha1":"0686e06932950193c7d8e14059fda19d5fb1a4d8","sha256":"823bb72f9ae0f0d28bc4e6b5b326091d52c9a871898fe02329167886233d18c7","sha512":"2fced9b54191a7a450ba0b701443498784fb26c17291deccb2768ee05ef41a358e42bb81d7a879d5616cf4f0696e2737ebd00277f33e11bec454cd374441c52d","ssdeep":"","tlshash":"490126b9906b8836382f97aa73efe5376261a847c001ff637fd910906f041996232952","first_seen":"2023-06-07T05:59:23Z","last_seen":"2026-04-05T08:11:55.832428Z","times_seen":429,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/js/old/jquery-3.6.4.min.js","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wShVgrxPvGbR2Y%2B0O3GrBciJOWPZtYn1IEiW2d%2BYZK3Bb8uNDeKn%2Br4WLDPNy0TFxd1CeTe3yhAT9CCguUTThFSPyiqEXAqqUsr5ZhuSE5k%3D\"}]}\r\ncf-ray: 9c75d8c9fc16c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-05T08:29:46.856441Z","times_seen":2583,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: M/2/B9WLSPXXh4WJpJfTwUmYIGk/4GXGvLum0egdwfMPa/NdxwuP8t1zpSQ7yhydw2FdmccwosY=\r\nx-amz-request-id: Q6KSX1VCQM65BQNP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:04 GMT\r\netag: W/\"ab9bdda3847e8d3b65353203cfa2118a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:02 GMT\r\nx-amz-version-id: 1pQ5BMxzPCcVpXLj_TGMkpR_3nHsGKZ7\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZqdUy9bQXk7WOU%2FkNA9C896CFlWbDuuDXGEg5XG20r9qs9UaCPqATUzd4uFN%2Fi3VLhScpKDxgs%2FYCepd8q5WFrpEiNjjifz5BLdcCAtN1DxWi4kYSH8AM7R8FVOLZAkkJJ93F%2BY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8dcb85b56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25884,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25882), with no line terminators","md5":"ab9bdda3847e8d3b65353203cfa2118a","sha1":"2afc6f4f6400dc58aa45e14eb3cb75194b351646","sha256":"b9cc9a0c33e8f0a92ae6b066dffd5f6f1dbb8da33010b8898297e44e4a66334a","sha512":"3abbf0bd5bd7cd37f92783bb7c2c871872dd5ded55e5f9e78f3b1f859102ece9259a39126bdc85c5bf412ff08d351d4c318dee5836a4bb2107a83bfbecfebccb","ssdeep":"384:rdq2te24z8VEB4yCSVYC+tn52PX2NT91z:pe24z8V24R+3W52PXyz","tlshash":"39c25c3f8519a52c3f75b1d1bc51a60eb9ee8940b88853b1f80624a407e5da570bff8b","first_seen":"2025-06-26T13:05:43.085379Z","last_seen":"2026-03-26T16:27:53.579991Z","times_seen":10044,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/css/old/variable.css","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0dxOS3yTOl0KwjLnXmSvwnkScF%2FOC%2FL4mXv781VATDUAZjm0OrRGaGH9KVTw6h2mPTEcN%2Fs3t7YJElSYFZw8q5wFclnHMFzDo9Wm5fa1sQ%3D\"}]}\r\ncf-ray: 9c75d8c9fc15c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-04-05T08:29:46.74936Z","times_seen":1704,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\ncf-ray: 9c75d8caad215ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7983\r\ncontent-disposition: inline; filename=\"interactive-jok.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=r0hQxGrOp.7M_k6pgSxIU6dRgPQsX37E45jvgZrK9vE-1769995025-1.0.1.1-.JB9.FUQwSpkEjfA65q4ZXuSAxDxESjIsta9GLsc1q_7GZYv2oAXGowkj7dxvKzh.Vi.60iNF_9feMIGgpc861CdLS.B_sqa7pMOe4YBHBM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.746451Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/fonts/icomoon.ttf?cobna3","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icomoon/fonts/icomoon.ttf?cobna3 HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://img.viva88athenae.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 2971\r\ncf-ray: 9c75d8d71d4056c1-OSL\r\nlast-modified: Wed, 19 Nov 2025 08:02:36 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nexpires: Mon, 02 Feb 2026 05:17:07 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=FKmcmoUve.gaHBF9nvbF1gD8jULX2iryXIPmOP.h50I-1769995027-1.0.1.1-QguSYZIhZyqw3e0AzAb451hMO.ztStbh_M_fciBJ8oJ1P1hznCGJwGLpiChIG2JZXrSxHHjLel_UwvmXCji.WhbM1hnlVXJl2RH.GtAMURE; path=/; expires=Mon, 02-Feb-26 01:47:07 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"17755c1a595a6cfad8faf64d79bfb096","sha1":"9ff4edf4a135ad92d418eca49cbd5751595554c8","sha256":"6e24331ad054b14d877983c01ab24266e054eff30104645719b826988320b610","sha512":"3f96b5c63d673fa34d542c1b7e6b08b0a355e71529273f41928ec01ed594018f22cf3556b753a41c27719b9dc6c35a8cbeefa09859d9d657b22b21d93c77a0ff","ssdeep":"96:zwvCwULhT2cmh8bj6ZxQrNUGlSfcEvsR2oTbUjVl7ydkS/+nBvQmlPV2DG:0qwUMcO8bjGxQrNU6SUEALb6z7hS/gv3","tlshash":"8aa1e707c336cfcbc026e3b95c94d3824be1ee11a765d3a785484d45b61cba48d717ab","first_seen":"2025-11-19T12:27:30.59329Z","last_seen":"2026-04-05T08:29:46.857125Z","times_seen":819,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":7,"dns":1,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\ncf-ray: 9c75d8ca9cf45ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7765\r\ncontent-disposition: inline; filename=\"live-pp.webp\"\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=cX5KdrqGwrg6eIxqdlW4hmfuOG2oz3LsuU96MnmQmg4-1769995025-1.0.1.1-38QXKkbNPbtKyZ0t8sXdoLmI4laPFxm0u4wPWZy17QWK4oGBJlrTQDmSWYx5R4Q15AU6pnY4JSph7HCU9aWFk7vYr14MaIGpw2uNTXcn138; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.745838Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\ncf-ray: 9c75d8ca9d0d5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2527\r\ncontent-disposition: inline; filename=\"sport-cmd.webp\"\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ybQGGA1oboHLs7._JbjxKFUICgbGMA3Fh6Gw8HV5br4-1769995025-1.0.1.1-HlKrVk424gzu_ha9qRylgeWWwyM258wy0LqgDE2QfWiZuyQLWkzIfyp9KW5dfbOOBJ6pdIDoMoj8OdIWUtERFUgnpeNLRCFSTNOt5z3iYuQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-04-05T08:29:46.782225Z","times_seen":2306,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\ncf-ray: 9c75d8ca9d165ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2970\r\ncontent-disposition: inline; filename=\"sabung-ws.webp\"\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=thDZK4sVg64HcGPzTsW_vOeqQhkopMbDqq7SWcmhYso-1769995025-1.0.1.1-cJKnn6z4R.Tw0_1WZBLj8uCOHbDdcpkm2wnO06lVsWGVAzpZVevtB1gsjIfSh6ZgM10qz950YA93PHf4.Z6qJpOlOvJ9nBy2PM9mpPdj4nA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-04-05T08:29:46.742622Z","times_seen":2370,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/provider_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /assets/provider_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50712\r\ncf-ray: 9c75d8cb6df85ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=97035\r\ncontent-disposition: inline; filename=\"provider_w.webp\"\r\nlast-modified: Fri, 23 Jan 2026 11:19:21 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=37vRCZrbThP38Y2N0otvveIYfWdA.brsMuP.fO0wNTc-1769995025-1.0.1.1-QeQ_n4V8mClrLL2n45D5hC2GWb.Ha9ZLm6fxu8Ho0xAnW8_HFu6qJuxxdnjLL_oK8bbnL3i0sahS3jVmYF1qABJHw4kJ15sH92ZiMZtCW6k; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":50712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11e75a14c77eda0c946b8353dc3cca83","sha1":"77e180a3954f614152d90d0fa5695aadcfa313a4","sha256":"3918750368a39802da297062178b66325bf7c0fc3cefca27a1513462d98a8103","sha512":"73964e6c389bcb0b874758e98b9324f7f6e444a10a1bde6c74f1c857547c3b04eb8065ee0beb6540a7af059822652225f805660881910c37b56a87d8203d88f7","ssdeep":"768:albFP25DkVV8SB4IpblEoLKL81QqKe1lONGKoBC2eX0Zn/aUKwo4LDcBLZehI:OFP2cV8tGEoLKnqKe1W9qyUWLZeS","tlshash":"5833f1727198704dc289e5050806a99f7473422ec667eda7c573c91b6723ecabe0ae2c","first_seen":"2026-01-23T13:26:41.505707Z","last_seen":"2026-04-05T08:29:46.855858Z","times_seen":370,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/new-webdata.php?content=data","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FuAcEoLI0cU8NiM1TUJUbyyWfBepbADbJcYprsEad5dxcQrQTUT0U7K4l0b8NRUdmpkkwUHTCZllnT5JOidHvkmCghOWK%2FLc1sAe%2FPfxTvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c75d8d7dcd7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61e589b8f255e20f1a426eb8f6f3453b","sha1":"c4e34324fdbc4c08a9d6002d77bcfc41afb242c2","sha256":"97893d8b7aac8ae9fbbdb8657feabba4e1cbccc30c0850472caeda15ce028b9c","sha512":"33b714b9e9e10b3f96673a55531b7fb5415269e6277669c955f832d1df59d5b00d4632cee0927a291fc51e82c55ea89ba87019000f784883528494e6fae54570","ssdeep":"","tlshash":"49d02265c4de4f436a898224a8b620204a8148b38a03b0ae12000e5dcb898cef4a9c0b","first_seen":"2026-02-02T01:17:37.458813Z","last_seen":"2026-02-02T01:17:37.458813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:11.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: kLBhh/jX1jlnjR70y2T9C7HN260YpiXNMzGC7x31eoi8SXW82nTdC97ySNOXRwNKL9m0dyej8P2VoUybqYFvFGhZIVb3yKoy\r\nx-amz-request-id: EDMJMHPCQNXB4SQT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"e9d8b92096016dfd74d2f2500556464e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: yndULrTSPdp9OTRKBafoBFmaC5kcG3xd\r\ncf-cache-status: HIT\r\nage: 1160813\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sKgLxB1jhGdWYPhGpzIDVdC5D0qgJnXo9TjRPSOYhaXaFyro1sdKQOYSdf%2BhV1sPbp3ZuM70Tvcg8JvToAZTQierazpEy4T2tdqpH%2BiJ%2BdX%2BzWWV8%2BXUKHukowaGdR2jstbvPbM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8f20f4f56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"e9d8b92096016dfd74d2f2500556464e","sha1":"0db4e74b955611b21791405af062346f34ac2eee","sha256":"eb2902ff32366de00d3afa351aeceb1357d5a468eacbb2fd92cf115276d626cb","sha512":"bc78ca4e3b2706a5b054504e3534689fd85f66e118a47bcf68c9e2457b1f7152930b21b81945ee2f4e84ee50a5664e11c68841d5c11a62b3d926246e6aa58456","ssdeep":"","tlshash":"17d0a705ac91bc3d311611cfcc794b31a4564ebab31d7da1ac583c845214daa0ca91b7","first_seen":"2024-09-26T16:31:04Z","last_seen":"2026-03-26T16:27:53.569167Z","times_seen":13261,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/css/old/template/OW.css","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /css/old/template/OW.css HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpk%2FhlR1sTXL23Wkjrh9HgLU2GssXaa9YlzJPY7eReU%2F7t5HDPURuDRjbTN5qN%2BFSp9vnqkC2gwsMIRSvljUp8DvQ%2BVlRRVzHEpnpQrSdnw%3D\"}]}\r\ncf-ray: 9c75d8c9ec11c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a8778865194d47ff2b1d40b651badec0","sha1":"f30c5617c2a666e8f32d63564bd6c09bd837b42c","sha256":"be2a10f7e9fa3d797a298de0033b5312010d472f2f9d6f71ebb87c6a2681b05f","sha512":"c64c8366d1c87e90c5e92bf05bef6d103eafb46c20e411da830fb267a911242dfebe6ea4c41f343df886b110f057d3e8a9aa1c736e6b88e3b357f75e1809e6c2","ssdeep":"","tlshash":"7001f2699d8b405aa53b48bf33fbb103f730758b8484bb55bed890705f74404383a882","first_seen":"2025-06-02T09:38:49.814862Z","last_seen":"2026-03-06T11:34:19.087767Z","times_seen":66,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\ncf-ray: 9c75d8ca8cd95ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5084\r\ncontent-disposition: inline; filename=\"slot-pg.webp\"\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=F_Qo3f2cPmOqdwJI6knZYS5WRMfFDXI2jolpDcPpu7w-1769995025-1.0.1.1-N45_sxl6sjR1t9epQ95EiM1XHGa.xOUxb2BNuoxKw3SaXDexqo6KIFZGp7FD5p6Ce0ci.AwlnEIL8HGCeGFGEPiU23GiIVdKiovhbvwgUPo; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.731665Z","times_seen":2389,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\ncf-ray: 9c75d8ca9cf35ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1595\r\ncontent-disposition: inline; filename=\"slot-sbo.webp\"\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=IbPFHYtUWc25XILsAHpKgyDhx0CACxsMgslfaXzl36A-1769995025-1.0.1.1-Zq.wekdUsO_SuKv5Mqj4j2XbWCNQUv1lgnlxv.kVeLitu6zVnUtVK9D7aka6UGntYROdk.0WDnSM12jt3Fj3_3dIqowjlmI9c9OQhYIJ7SE; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-05T08:29:46.764036Z","times_seen":2304,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 9c75d8ca8cdd5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"slot-jl.webp\"\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=E2Drf4LTW_pLbaLMVwKWK3ZWylCTB.2Yjg_2I9ZVAnc-1769995025-1.0.1.1-dbEGIHTLl6wRLvjKzIbmYY.2GGWPzV3VC24wYabdlxwznAbaYibU4qiSxYRVolapR6t46cXIrYkTmxJNSYccOhxWRyytUPyyeSxeo1K6m9Y; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.726045Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 9c75d8ca9d035ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"live-pt.webp\"\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ykW5TiJ___eLk7mVS1WN3KK8YAhE730cUVDCIA_zP8s-1769995025-1.0.1.1-wlNq9Vr7dzUigxAABF5NWjbCthcgsNiAdHZ9GbhOKxscDFXx06ECa1WVGIXZ.dN1mWIdcDxMepJH6yc54SPyvRm_vpuhb4BUaZDMQixRpE4; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-05T08:29:46.825074Z","times_seen":1661,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/slots.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/slots.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\ncf-ray: 9c75d8cabd3f5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3936\r\ncontent-disposition: inline; filename=\"slots.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=KjzOfLa.8e9eaTLxwyZKC7pBivUKDbDYijayrxH6Z8Y-1769995025-1.0.1.1-3_XuBKa4mMandmzDPg3fsVOejRiAo0yHboBIr2uu65NmFpYakc70XfPnRrwpVO9TLQYIILo.C3EH_BlUVvZXXQy5vlq8wC6znIXxPFl0j8o; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49004475ffe1ab21bd1d1845cf3c5bb2","sha1":"5f1b45dbf862fc3b31fcf2995a3d79c85db7e1a1","sha256":"bde4902504d927b3c8f18a0000db9dfd665f16757368d3e225e9c6dffb366203","sha512":"24376af88f7a418d0b2f6b56dd003515b34bb927d5a946171aa0e11690d5794bb41dc524994ce3a67bd5b90861098ebad29bbf565d262d215e4ddf7490577d67","ssdeep":"","tlshash":"440199f8a7e855c24830b90965600cbeccbfc75d3142ec0a27e154c531213e0e81038a","first_seen":"2025-11-19T10:28:57.236453Z","last_seen":"2026-04-05T08:29:46.74442Z","times_seen":825,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/5832abae-a4ae-4d79-a2c8-9845fe3d7562","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /compose/5832abae-a4ae-4d79-a2c8-9845fe3d7562 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://riangbersama.xyz/\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"811f073585aefc470840462028527e11\"\r\nx-request-id: 9c75d88fe9858b10-SEA\r\nx-runtime: 0.017749\r\nx-envoy-upstream-service-time: 21\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gEG%2B%2FZFgGX63SOz4iWmzDc2s3uILbYNsPplE%2BH1G%2B9qaa9swiAm8O%2BE4KOMblYFBLkCDhiChrgXuZukF7Zvf5Mdi%2F2JP894zSWZhnMlP8aTFq43aru4Id9dXDO2g5liBjYI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9c75d8d739811525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":885,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68d792e7e1f55581ff618d763022790f","sha1":"68de3fce931477dea8e1e9498df1c2f7e3d5697e","sha256":"811f073585aefc470840462028527e1172df8dad8075aa8a5b29122a27e84763","sha512":"162fd37a632ea8378f10a6f7222f1008bc560df5eefd79eab65e384219cef3c138cbca66bde936f2cc30df6912ee1a9af51efcf3923c1f14c2e00d75165c35e5","ssdeep":"","tlshash":"5911231fd91401b147c2920fa80d3f53fe92807be6cdedb555687428565c2cf1815b1e","first_seen":"2026-02-02T01:17:37.463805Z","last_seen":"2026-02-02T01:17:37.463805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":582,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8417-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-8417-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: gCsvtl/V0k9gJYyqeWhj79UT2GontY0XITBq+KjHY5Uhgqza3Ve4jmjY/rb7pCS2FbHM8z52TgY=\r\nx-amz-request-id: JJ61T6VFR3E93D30\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"e64c1e80c5433248097832cb6d97db04\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: mVgSWDadpUNf.26bvRzYQX_cKQPwQmUM\r\ncf-cache-status: HIT\r\nage: 1161107\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KnhUzifF%2ByOg32kpBNaf8Y4kBDqGfaK%2BsDZgenA%2FJifbSu7jn%2Fa9R3vM9pR%2FcmWSb82RksJ8uqkW3jUJlcle80qJWMK6DbcincDvxlS08OKsPQOZxCzwWnA7yC37aQvtJ4o2sLE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff2c0556ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87176,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65307)","md5":"e64c1e80c5433248097832cb6d97db04","sha1":"2bdab665d5a4aa47f19cc7efeb322f27978e25c9","sha256":"e1b1f22d83b9a1d9adeef15906a22547f15c7416eb13fdccbc4084103cd1dd1d","sha512":"196b0d33985444f2fa6c83a389d6ec653551e0f16b9f0ca0281f74e9604ec90d71f0e6d7dc61cb9f8082b0c471c4137574782c07c9650064bb138e8679534e58","ssdeep":"1536:JFMFWWLdZXzWIrd4PWiby4+JjQAAkqInOW+vU70Lh9Mx:3Ad1xryonOW+M29Mx","tlshash":"ae8307957291f0a04be351e780bf850af337245cb40e9154f259e8e828b5d5fa17bf3a","first_seen":"2026-01-14T14:14:16.855219Z","last_seen":"2026-02-19T06:38:02.609573Z","times_seen":60,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2assets.zopim.io/Ig3RJgDddkkMdLFP4FQ2xe9JD4LqvLC9-concierge?1641115139081","fqdn":"v2assets.zopim.io","domain":"zopim.io","tld":"io"},"ip":{"addr":"104.16.200.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zopim.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 23:35:24 GMT","end":"Sat, 11 Apr 2026 00:35:09 GMT"},"fingerprint":{"sha1":"0F:78:1A:7B:C6:86:D3:07:FF:77:63:2E:F1:0A:C0:7B:39:52:00:A9","sha256":"9F:11:02:28:A4:16:38:00:00:51:84:2A:C4:9F:42:9C:28:06:CC:95:1C:B5:64:5F:60:AE:1F:36:88:14:0A:A5"}}},"request":{"raw":"GET /Ig3RJgDddkkMdLFP4FQ2xe9JD4LqvLC9-concierge?1641115139081 HTTP/1.1\r\nHost: v2assets.zopim.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9754\r\ncf-ray: 9c75d9014e752efa-OSL\r\nlast-modified: Sun, 02 Jan 2022 09:19:01 GMT\r\netag: \"2b83bf06c0c3f6b6024852ce97026417\"\r\ncf-cache-status: MISS\r\nexpires: Tue, 03 Feb 2026 01:17:14 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-robots-tag: none, noarchive\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9754,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:01:02 16:18:32], progressive, precision 8, 50x50, components 3","md5":"2b83bf06c0c3f6b6024852ce97026417","sha1":"e7a533eb3aecf4a0fadbd76cb54e8caec5491082","sha256":"1757c03532d21c807f1fe9bb493098db7a8f66665c540295a494f34c3b5df77c","sha512":"8e86a175e9858b65cbf275e13cc7654165d85fb6d0118325567a52fe300e16395adcd7020c40e619cec7c8d67d92aedc8c9ea50d370bc5af36662d3606c18db9","ssdeep":"96:L5hMkL7Alq1UicEZZ9Pvglr7Uy4lyJMf0P5sPgAkL7Alq1UicEZZ9PvgcrWlknNB:1uk7KGurQy4liCBk7KGXcknJ5dibAyf4","tlshash":"3512b62aabd19d21f9e4527458a5d783b321dcd8a7a32b42b8cc74017fb63d2ac1c353","first_seen":"2026-02-02T01:17:37.465395Z","last_seen":"2026-02-02T01:17:37.465395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 12963\r\ncf-ray: 9c75d8ca1c83783d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230104-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1543120\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zzIboJopC0ZeAhj%2Bh6Xj2Vz1tUbxIBUFNCNxUTSTIMM0CenGNxGor3YTC3KCZIbhx0cHcdUL8A0HpGgN7cNG89nDgRaEY81vrLQZ0NiYmgLzB4MyCeBJr2ohDRl5kknvuOY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95609,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-04-05T08:29:46.84922Z","times_seen":4815,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":4,"connect":5,"send":0,"wait":32,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\ncf-ray: 9c75d8ca8cde5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5768\r\ncontent-disposition: inline; filename=\"slot-hab.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=vjCNV9Z6JiRDDTfHELl5rX1tIahlw6TAAehl_Oa29M4-1769995025-1.0.1.1-PXf6far9WRsBMQb3ArPDlaqBhlDh.TEq.8HVtrET8QwrB_039qUMQZhRZRJLnL03GE3WHPuIDClVIGHHxn6welYThNYDEaVa1aJi7rmdYUg; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.736556Z","times_seen":2388,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cmp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-cmp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1552\r\ncf-ray: 9c75d8ca9ced5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2800\r\ncontent-disposition: inline; filename=\"slot-cmp.webp\"\r\nlast-modified: Thu, 15 Jan 2026 08:41:01 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=BfiN.NhV8MoCwVf2FU284G7Ld6HmY4tnwO_s5raxxFk-1769995025-1.0.1.1-KHcTRQs4sBMDL0bdiEWrm4.zxPiVEOkQDuIAKLF4UHY1VYQVdb0ntTGn_zjUbfxErMzjTYUmSsYctTWv9cZD8hzFDOvHpcsU.hqjvw2sBBU; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34372156b0c2022573d7f5c9f3774708","sha1":"8703d0cf24c9c3538dc87bf818e6b320d245f676","sha256":"9c60b792567184fc73b218bcb21cb697d577f75867427b90085bd7e67f9b0e42","sha512":"3d6100a367b70d48139110d57c065852438bcc23e76c5e07ae2ff28a5cc2d929e1408451edf348dfd632f443a71dcf2d36030d425601a83e751a67840f3fe281","ssdeep":"","tlshash":"9b310a09ff4d8409edd7ec6d1516890fea203044711f02a9af140f9883c49f1e7a761a","first_seen":"2026-01-23T19:09:53.3971Z","last_seen":"2026-02-13T06:56:55.332858Z","times_seen":66,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\ncf-ray: 9c75d8ca9cfd5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6674\r\ncontent-disposition: inline; filename=\"live-ion.webp\"\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RukjIuDgJV1Rc9csdy_TPCYsHmHHyneeDhfYb5rMuGg-1769995025-1.0.1.1-Ka4rRCGIdGAT9o2A9TBRRt_WZqDceAdr.mGZ4G_6dHSfOKEaT6Md77YfUhoraPe3uSInuL6XZkFCpyLScWaGyEn0vZvCwLijUi9Wt2pMWRQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-04-05T08:29:46.780959Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/upload-Slides-20211201121954.jpg","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/upload-Slides-20211201121954.jpg HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 147850\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zg8FKOjGozwMIgUPttNeSTKhRIN7JJZvtBPcqPIhr8WXsAaychEVW6KQVzbKeIM%2BymD%2BIdu4O09piqk3TIgrmrzh54FdW6MPK1UbnDypes0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cafc20c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"bf0a556fd39207a647a142c865d094f9","sha1":"c9d8362853e1310d29e9b086dd1688c4ace699dc","sha256":"9cffaf46c5fc0011ca16eb35df60ad9c5a41a45ca0ba3feee7928ca02122eb13","sha512":"b2bf226f9e08390f2cdb1c8c9ec00ef18f699465e52fd51367d9dd46895bba2adc15ebb72cc7a9f30dcd6a2a39523fe3706e5c5eeeab79a596f2606a910a9dd2","ssdeep":"3072:noeqChpTBX1u2SD0rsgt5/ofjAn1McW24Vb+ITmlyn68v4v47sYzYn6:nUChnsY3YfjC1ZW24VS8mlo4vS/","tlshash":"0fe31258576b4872bb1b1fb0b5c06620761bc60b32f01294e8b60ecb45fdee34a4add7","first_seen":"2026-02-02T01:17:37.468791Z","last_seen":"2026-02-02T01:17:37.468791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":443,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:17:35 GMT\r\nexpires: Sat, 30 Jan 2027 13:17:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 215972\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-04-05T08:57:38.403711Z","times_seen":5955,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-main-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-main-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: Q2By9LG7M4pMcajxBNM3gVWPKaglPLViaEZnJST+LA1bG0xLwonZJodC2gW/jE353FhOhVF3wHQ=\r\nx-amz-request-id: JVD0R3Z9YJ10ARHG\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"43ce50203e5b1c7aa96b22799503e366\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:01 GMT\r\nx-amz-version-id: gF2k.uKYygMWsXAUeI7Pn1lwxW7cM6DT\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xH97cdmTNhjSGdPDxGlNUe77drPsa0PsWAX935jleynv6scKii5yXzN9R%2BGSLp1ZmGVdEhFoOgcl6qSe%2FfGZOgFBYtVSpTr1qg%2B5UrdXE5P0REu2Rnwr12Gi%2FRNSpz1wlOM8o1U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8daffba56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":850749,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65305)","md5":"43ce50203e5b1c7aa96b22799503e366","sha1":"c06406ed0dd9d6eb9e17406672f659193a8a5204","sha256":"d1da2e8fbf4b4f2584ca0a8e1c659d5225ff51fb8a5f2270b6f4d0cc0c8454d3","sha512":"28e2cb391292bbb272cbc347d6f1dfce4448e2a3b88a243d45358fe7e2e7801dd9cd48324534bf1253590e0637874062bfc796c30484775f1a66d9c6b8bba68d","ssdeep":"6144:d4bVMmc+y5d5qQ0bGBH4H6Ww31ztMyenw4N/mPBub4zc3lQSuUYMVCIQEQX/jR0Z:d0c+PgZPQ3+jUtCg8822URnQnPEC+YD","tlshash":"32055bd93192b0a607e750a5403f000bf33a6919780d8960f665edf9bca948eb277f7d","first_seen":"2026-01-19T16:19:09.57544Z","last_seen":"2026-02-03T12:50:40.393256Z","times_seen":518,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 9c75d8ca9cfa5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"slot-mg.webp\"\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=vvgMTzDuhNCw9uK.pB2V9.dHPiWf_AlDmkpP.Q6j_RI-1769995025-1.0.1.1-vNcxbSGqFPaya_ng.cCxwFjSWm4wYB_h_aXZJy.hvD9Hkvg6yFxaoL3H4JTnwt8t0zZ6ee5NPVyAD8n434JwB1B6mMOKXXbH1_tc_gxmZ4U; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.724714Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/logoweb.png","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 50640\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XG3snCKrNEE2mihnwMOgw5zclEsID%2FQkUp%2FXccnnvw53WZ%2FVh0DsC7p8P2AdjYd3F%2B4HGu98WpPxPxX%2BgPZXVRGH30qVpe%2Bw5FjRz4KCdL8%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8ca9c1bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 125, 8-bit/color RGBA, non-interlaced","md5":"5292f4cbb51f50e5a17240f790b41373","sha1":"6753e696fed3dacfde178da81afd0a3c700431bc","sha256":"94b27d64d4977591ddb539255187ba5f30c4add36ba7402b9aa00647e40de703","sha512":"101835e78a5273894c5eab2da976fbe5d3b86d4244314278a2945553a6de00dbc6b4a5ba4b4eac74b4342ed59063bd8e5e03aeeea07ebaecdf8114240f4164a4","ssdeep":"1536:rxrWQXva2Emod7RDCl0fDHL0+a56x2oMqorzDPnrk/:rxr5XZM40rHL0VG2obor3W","tlshash":"f733021d7001f976a64c3e043edf9adc27aea3c791b84946ad96d09d0fa0894f36a4f4","first_seen":"2025-05-27T14:41:37.874905Z","last_seen":"2026-02-02T01:17:37.471105Z","times_seen":4,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 121296\r\ncf-ray: 9c75d8d67980b51b-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230151-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 6288208\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k5ZCSgwolAtGe7ypwEz5qKFiQeE5r%2BPIqxesqyFK%2BcKBKb82wdeTKHAFUpjt0EFutMylR45IR5IOcK5TmWMSANctTi25nuOuLK0xmfBS8DOqkRHY3HhCEQNLY69lwbpQ29s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-04-05T08:29:46.737134Z","times_seen":5787,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:00:30 GMT\r\nexpires: Sat, 30 Jan 2027 13:00:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216996\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-05T08:29:46.838166Z","times_seen":8170,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-103-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-103-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: qk+AapJ4V0geZdrVpmRSXg4X4mmxLIoAqqoF8I8EWZaXM46u6yNkzFjJJDjdnpwYVzZPUBYpFDOkTo2anc4ppGbDa4ZQ06oZ\r\nx-amz-request-id: TW1K5BCT9C28XEDJ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"15aef6ca1ea087e9bf824d638229f018\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: pbCnm7p4O5Sp_V5IHlXr.ep.tbzqT_yK\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fGjCr47GoMiluyKVjELCRL%2BHu%2Fh6ptr%2ByN9KzxyQRSfN5oc9xNi7AxPh3cNxKVZ1y2lznJhdWnUNmlQeCSQQWwGSHbKvVs5V%2FUiszbx%2BZxtE%2BG%2FwRSYxhOhOyM3WZyv9z8ziCVY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8fe3b8d56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40099,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39869)","md5":"15aef6ca1ea087e9bf824d638229f018","sha1":"e4b63026647999b75fc991e72f91c8220c48542e","sha256":"329c6c08b48aa7e11cc49ecb2d08602f1dc90c2c6812d3374ee027fc6aff8e05","sha512":"f6ee597dd2fc6cf4f30c886094e33f37b6fefcf09e2fbe0809b84337ea5d9e5048c2d0f1d797b448c21bac900505bd48cfdf7236aef9894709aeb33fd3142cbf","ssdeep":"768:XqQ7OGcha7teOfoMbNTY479K4gP4NDgPg+imjLb7v2u5kWLPv7wywe:m2RU3+kR","tlshash":"a00309887291f1f157e7219ad47f560af23aa428740ae040f221e8e168b59df517bf3f","first_seen":"2026-01-12T20:32:42.575939Z","last_seen":"2026-02-19T06:38:02.573341Z","times_seen":66,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-655-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-655-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: mmrOmst5rwFSrDUlK+HFD1BkdUw+EVP7ev4zwHRaCFBkShJeg+NwWz1SkjaVDfO4Z36DF/x3bVWrzFx+NZlVHzFcr6XcZLNk\r\nx-amz-request-id: JJ60RXJ7XKPNTQKQ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"18a671a157da6206b1ae1aff5ef7d37a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: vmtMocoPzIlbb.bnC1dCD8YauCDpa.Kz\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FyaXwBmWbof1MM5NGoScDEQ29%2BAqCwiV%2BcQyCqyT9kxh4qWAtn6YhPydzYBvpoOPqJCQbVO%2FcN8AYpqSgYu6c5tKyxRoEJT2Je0xW9lNa405zwS%2FAsDLZJgp5Uvjz3uNzUtahac%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff3c0856ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47871), with no line terminators","md5":"18a671a157da6206b1ae1aff5ef7d37a","sha1":"3fff047a5f619d5116d5751e065beae9b0da9fc1","sha256":"ae3e73e24e5390e07260e7fc52d14d3eadc9cfb87f8c0e6967ad9c7f35436aa0","sha512":"ca50f1a728da3edbf7eb045aa61754190195882a217e9c3263d8149efa192e8fc4c7dcd570524d6b73cba2c13363b6f77453d7742df2020f05ca4d9dab34d1c0","ssdeep":"768:w5I6zt/owtA1yP3fJ418T/a4vcOd65+xss9RNHdTe+FnPp2t+1rImq0zrUycCjMp:WAId418O4EOdN2Y1smquUtJRsjlolp","tlshash":"a42309c875f270ea5bd350a4c8ff5505a77e36096c0d4484e2d6d8d625a8fcef22bb28","first_seen":"2026-01-12T20:32:42.57678Z","last_seen":"2026-02-19T06:38:02.600995Z","times_seen":65,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\ncf-ray: 9c75d8ca9cff5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2690\r\ncontent-disposition: inline; filename=\"live-sg.webp\"\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=A1V4OInsqNFlhGVbybneLwyhkcc8DiF2_MdGfNIkFPo-1769995025-1.0.1.1-uYUEFsuJcr9Cmol.nqcySHccGDicnopm_ywbIHe11SxbJHepGT1PZFePaofOeZiA26DqccksrwzcNtKigpSbl0vvvedTTxr.vxh4yIHnN3I; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-04-05T08:29:46.850028Z","times_seen":1342,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 9c75d8caad285ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"interactive-pt.webp\"\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=uERH9c1iE37t8CEvhZMYveUG6wnG_LijFrOysqXHPwo-1769995025-1.0.1.1-z2T113Sj2Zoq287IZnZwv6Yfwe5_iVnb0W0M4oqCERhLGgF10aOrEFu13Sl120zWzmR__nfYwDA31JRhsLed74ZhlMCxK334Z1yv.W6GRfM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-05T08:29:46.825074Z","times_seen":1661,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/assets/hubungi.png?11","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 6150\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYwq9lMm1kDh4LcTt1plfbUZDZxTOvoIk0dc9KrphAR23N9cwLZOn8l94MA31xpXNPt6ewTXgxW2hQyKzVyQdIYS9jwNk2%2B5asWxLBgAZNw%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cb6c33c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.837304Z","times_seen":2829,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\ncf-ray: 9c75d8ca9ce65ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1967\r\ncontent-disposition: inline; filename=\"slot-hks.webp\"\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=sA437yayoinhNsgmSxK936e4g6jvRNUami791MRDbuM-1769995025-1.0.1.1-1gS6Jb_e7oG30F73RsUlfEJ5ivsb5Z08zZeaZMfrIwFcNXbXls6DSZTmE28gqyuqgm30If1XtDG0OzU2oV.dGoddvCYgNHB_397p.T9tl_o; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-05T08:29:46.793868Z","times_seen":1806,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 9c75d8ca9cea5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"slot-pt.webp\"\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=k3l2s01XYUeo6ysxsC_5veZYfDf1C5d6gAguvfNV3hw-1769995025-1.0.1.1-oBIZHFl_sb9FA1zpAGwTiLrzkTjtySOVpXKw0OQ4o4sXAQGIhcLJdagAj4s9RtQEwjmFwKsPvsWeZeUSt0wabYYYQ4v34Z1joOaun6OeDBk; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-05T08:29:46.825074Z","times_seen":1661,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4280\r\ncf-ray: 9c75d8caad2d5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5926\r\ncontent-disposition: inline; filename=\"beranda.webp\"\r\nlast-modified: Tue, 18 Nov 2025 06:08:31 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=tvl0F9NitpQxWeZZh9k.qolA0Cq4Cfg_wV3mdPJskP4-1769995025-1.0.1.1-kC7s1aRbNlanRZ9HI9UZVbWAoRUk9UILAvKR60iKKb5vzLbD5jlPuqG8Tfbi.whJ.ssORpd6aTgxJ1SedtU2f_3nSyltsT7QlX3cJ48DShM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5c94e134973f78a3abd09f8ecaaa1a7","sha1":"b079718fafc29f5496df6186b28ed6aa4e8000c6","sha256":"de1ffff913bd404be635b1f1fafa41fb2f83e65ebef63467adeade423d491315","sha512":"f6519ea55de5c7b50edf0ce8292964fc798d4397733c19048e769f9de89c8ac5ca843c8544f4d9a1c8f046049df2f6bc6509af0057a76258158206780130ced2","ssdeep":"96:OC1l25Lw1FSSu4F4GR0hyjDxGCMiKmfLPCiKjf9S9Yy:Rl25Lw3Sl4RRRj1GfiKG5S9S95","tlshash":"70917cd24d58e0864d78194b4dccfb38405d143e4d955fe3261a47fc02bc2c0612edb2","first_seen":"2025-11-19T04:54:17.138379Z","last_seen":"2026-04-05T08:29:46.83172Z","times_seen":866,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-lazy/embeds-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-lazy/embeds-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: QOf2RqT4K/mBgqcz717i1KNG835sEyPchIymVYhvDq04sqfgnFJmBNP8/kHKf5hkheBY4sC0HUY=\r\nx-amz-request-id: TW1Z8Z9TTV8NVYPM\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"4fc8b02be67805e87aefe4b41b78b3a4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:01 GMT\r\nx-amz-version-id: S.kAXjvm_N7lTacdMtH5Rc3UyiWjLBxH\r\ncf-cache-status: HIT\r\nage: 1161107\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BX4xV6Vuo%2FZFNNrJuz5BmSZAF9aNk1c70jJ10fsykzxrBirO5iVl4wUSQrss96cxhe9bJwY1aDSIIW5f3tHjOsXI8Ii3m8cvTOr6aCS%2FLfhODGtmUTHsAbniX9WxDjwqpgpSeos%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8fe4b8f56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69422,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4fc8b02be67805e87aefe4b41b78b3a4","sha1":"fe24d7cb8e1a878514dfed21af08e7c9d069d76d","sha256":"ee7b248f0dc1f92423d0e4be8ff93ce84b4c3db0d0dfff8c9dc91fe95664d579","sha512":"fa0309e668740c1c7f2934a359a92ffcf56565eaf9266162651943b1d8447316da91b93d27fc785778603fdf0d572e828543fd704caf454ae79d1927de8a3b51","ssdeep":"1536:t5XJ1mb51XqKIB5lANfpk2c32uU2v0pepe4Xy49HtU:jJAb51X2lUkRG0pe4XO","tlshash":"cd635db6be40315ca563848ac013f4d9597e6448e60a4f3df6dbadb14fca1c83d22b5d","first_seen":"2026-01-12T20:32:42.562509Z","last_seen":"2026-02-02T06:55:40.904494Z","times_seen":37,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\ncf-ray: 9c75d8ca9ce75ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1401\r\ncontent-disposition: inline; filename=\"slot-nxt.webp\"\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=GUHOh31MnbGExmB9HIx6yRsvOloQZ350r7RX9r5WgN4-1769995025-1.0.1.1-tfkW88nVVD8g10yRSHSgMGYgEJLwpprPMLWWZciJD7LumwTfsWH6MkkccaMPb4xJjl5trdQa9ocqXVZ6Lv8hK3kaxV_cby9f.068hrD4KzQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-04-05T08:29:46.830471Z","times_seen":1592,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/m/capimg.php?3042","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /m/capimg.php?3042 HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TprHEH70A0Bx%2FlheTYVZCko0Pkx%2BPenH%2FzkJQUq0ljvpjF8XxQtBJtNHrYMGam3FweT2wnjDy4CIszE1v6K65%2ByK4OzRMi%2BZd%2FprQEJiaVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c75d8ca9c1cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"e8c2b4a8d14037e8d2e19bed1dfd074e","sha1":"cb4c37a6b549a56adfe3bdfa0c95de1ba434a7cc","sha256":"36fc423a0929cb6a842d9035a9ab45f06b8d5fe8ccaa3998dc10bb29b817992d","sha512":"fc2f5f9db81392c38be6702ceaf9b18c7f18695e2ad8b2350730711f4b19d5a6a7ccef928d6a04410b75169f3c6ec4c16d7bc9686cc293d1e978101e4ec8ba43","ssdeep":"","tlshash":"63515cefbd8966a3f113671022b5ad534b136313a553171f22cac97e1a25b2c854410f","first_seen":"2026-02-02T01:17:37.47919Z","last_seen":"2026-02-02T01:17:37.47919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=5832abae-a4ae-4d79-a2c8-9845fe3d7562","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/snippet.js?key=5832abae-a4ae-4d79-a2c8-9845fe3d7562 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: TLeQjBgIQOv/kcaFOGIzG1EOj4zrEyVJKuCqV6X8rC2iRpQDtAMK5aMhGkQsv1rijmfVpuY7kWzhu0vQf6ZCVI6G9/WPr0s6\r\nx-amz-request-id: 596N159GNE27YQRJ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 27 Jan 2026 13:59:43 GMT\r\netag: W/\"d096b5b24105931fc508ee2125de32fb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sJOHiVTmvqPe81rnWXV8bHAzulK7y_pz\r\nage: 11\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FYZRP%2FRYbm6qzmnClwFX56a%2FN8LCKTcWrH9KiD2smPBFaFYxMYeav%2Fo6nPV1dRl8xOZ6GoctnweF9nroa2mLcrHz5cqR0n1itBTPaaMWPaTeiLgGTgrrS6U%2BMzlaNV0qnoDvi2A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8cb9b0356ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10134), with no line terminators","md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":19,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-lazy/chat-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-lazy/chat-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: WIVBnq1caKBQadjQuOaaxNmEXSmOOC+sh+pTW3QInwXxww9dtVxMiLnGEFkhSICCADmHzog7Gwg=\r\nx-amz-request-id: JJ62P70GZ2ZT8Y8E\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"c21fe9e01667f245d3e65aab63bdb3e4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:01 GMT\r\nx-amz-version-id: lQUmyqDHZ.JAJJcyOAszjdGsIgC_HlA0\r\ncf-cache-status: HIT\r\nage: 1161107\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y00UQmnODgcF33pgsSzPGgz6jsP47yzRhGJ6bwqCXkmWw4jdG1FhtbCMsxJDdhvbJeAm%2F%2BXxqnp8wRFMD%2FU13cm%2FD2kWqbl2onDTpCvCwaOCON1RT3GePbSg3ffNacEH%2BqlYRuA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff3c0d56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":139315,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c21fe9e01667f245d3e65aab63bdb3e4","sha1":"600b9e019fd3c6c35370b5412eac895791818458","sha256":"f8c1e874ed384f902010991a87df54cfdc878d925c4d9d205c61ff777307135d","sha512":"c9926b7a1a2dca4adb41bb04d1f350e05eac84b4d16500fd484a78103aaea6e32d16ab2d128829b5a181b4fe3c67f2203c1649cfbf0611f484d37d7882bd1781","ssdeep":"3072:CPP4ZuRuZOkufRGCl0RFYSqSD3rNpbGry:CPP4ZuREOaD3Jpbiy","tlshash":"d3d34b76f086726c9a6784c2eb36994db26e6d08f50e0178f5386ca505dd4c3233bf6e","first_seen":"2026-01-12T20:32:42.567793Z","last_seen":"2026-02-19T06:38:02.613555Z","times_seen":65,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\ncf-ray: 9c75d8ca9d075ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4303\r\ncontent-disposition: inline; filename=\"live-opus.webp\"\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=rMEE0ahryHEaqhmcB98J5wc6xQcYZBYydlJA9VUq5os-1769995025-1.0.1.1-RTRx7kuodrOIqMffp.RIzZruigyZlgbibpGBgujL57YXhwKMPppAGQdRUFphFakgL4uHW2GAEg50B3tLPZXn7e6K2P854itI7a7tFuPimxA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.724075Z","times_seen":2384,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\ncf-ray: 9c75d8caad2f5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6991\r\ncontent-disposition: inline; filename=\"promosi.webp\"\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=hHIVscENzzXruSMei7nX7m8lOT3pt6O0ezuAUQ5AKuk-1769995025-1.0.1.1-lQuk.KgRXba4GhyWAh4JPImU8OGww7ywJzcfRx3HaoDw7SQHeBWuH_kpO4nMoChLgXVVMVRjUuaGP3V8GBXYmYxEjwpYAga5IBWHN8XiPlI; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-04-05T08:29:46.864791Z","times_seen":1890,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-chat-sdk-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 9Z0nrx7L09JEcdp98ofKg8CX5KfDdLeb12IUWC+r62/GmIwmqDDRtAAMsBjTGtZMbRkDpjRVXcw=\r\nx-amz-request-id: Q6KT4MA5AGKFRKG4\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"3e6f7ec16ddbacd4c8035231c304f9ae\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:01 GMT\r\nx-amz-version-id: SYUD0NOtkM1l2nFbVfYtudoyAOffonp4\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q95pBt2khsdZPVF%2FIW3ONj4%2FUSFpWyC%2B%2BGMZ8rJwAjrN%2BndxnEtuG4bihfEvE%2BTnNxmtu4wp805kOf9s4DrfMyHexhTYpifpUA1Ijqn2m3zz9Ht8SVv2dV4iShsoV9wMvXfwb4s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8dcf86756ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":222450,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65307)","md5":"3e6f7ec16ddbacd4c8035231c304f9ae","sha1":"9147f82e989f72ba1d8054ac1552a9d83d0a821d","sha256":"bcb4d2205cb087e128555d21ce367e3b144f3043d59975d82b4f7b0b0b0a9bbc","sha512":"fbc9847ae17d6dfc895b809b5b10b3ecad458a58c4b1d36a25661c8d93bad0325228d59c92439be6d9ad63775830bcd2933da0324c66b57e29b03438a2eac463","ssdeep":"3072:lHhLQkLRYjbg1U6aSVVQMvSzBtSamlYBxeUPRb:lBUIYjbg1U6zVQMvStINYBxeU5b","tlshash":"88241914f1d0bca611e392acd2dba64cf268c537e44fdbad665040dde4e814ad12af3e","first_seen":"2025-09-16T15:18:44.7622Z","last_seen":"2026-03-26T16:27:53.619562Z","times_seen":6119,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\ncf-ray: 9c75d8ca9cf05ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2758\r\ncontent-disposition: inline; filename=\"slot-wow.webp\"\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=sycgAVCBaIVWzyAeFMJDBuFnAxQQW.KniCDHb0IoP74-1769995025-1.0.1.1-eQuZ5sEroBJW4sOeBZiZiJBIIWD3x.gxdXsnpZuEPoEZ0pGfQwPIPnHT7hk_o_oNnUyRDmRclEdNRYvBRgrVw9X5o9tIhA_zaf9wcvlkF4w; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-05T08:29:46.743238Z","times_seen":1476,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/js/old/new2-webduo35.js?v=1768455952","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /js/old/new2-webduo35.js?v=1768455952 HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 09:53:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpGE24iohrpQ9H1TrctgX%2BOgqOvirLopxY4faP2Iaouq6DPESqwAhXotsE1bYORIc9d0GTwMHF%2Bbz8J0QdIQzp2PuCyOn4ht%2BSI4LBpVLXU%3D\"}]}\r\ncf-ray: 9c75d8cb7c35c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32875,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76abab2386cd78bb4d889b6b3b0daa84","sha1":"74f6b725b88e76e47719043cac71eef3e8cc948e","sha256":"ba6f03ba9e5e2dd4323bcfeba4ab5a30b303e48003ec8f88e1ba7f519e85bc3c","sha512":"a64be7a094e432b4c34dc9cbcf647f8b944772fe610af6e1e2a10a9f11babf32db7ab356119439c1cb6a37d756d294a40010dfbea799bf5503572a2d5313deb5","ssdeep":"768:SZMaBlntNraBRdXhG8Q8Y8o8sAMgmMuYUQ6cX:UntNqdXhG8Q8Y8o8sAMgmMuYUQ6cX","tlshash":"ffe2314aff4c4acf57b626ac483b91c55f4d4c28e50b4e02fe6c54c86b4b615b272a2f","first_seen":"2025-11-19T10:28:57.188911Z","last_seen":"2026-02-16T00:37:27.174078Z","times_seen":531,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-8024-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-8024-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: ecVoMEc7cgK+1Z4Wf7ll0b30/F7T837l0UcY2fVeuJLaGSqPY103t4O7KtnGmP1eOftZM0yGK5GwzpwZXz+NxosnEc8I0qAk\r\nx-amz-request-id: JJ62KYBYSWH444A3\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"2d71e126085b58712441f7fda9d96b31\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: bNxwKzB5MnLXBo0aiXu5tByENDSBJU_j\r\ncf-cache-status: HIT\r\nage: 1161107\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JDKvjHdQ9UDcJRuI%2BIz2sQuYfgYQlH8F%2FiPl1M1kHIpVfdmD9evAh2seIFX6RFY5bu4aauRe6bM1RPJtJYe3pIUotsfVHyODH0tLs5%2F61%2BWZl8WMz0mUvWt2ZP4ES6MPxTwjbZU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff3c0b56ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39172)","md5":"2d71e126085b58712441f7fda9d96b31","sha1":"fffc95c21d16f71c4352ddcc82e2c8ec1f1f31b5","sha256":"82a1831888e746ed5cb1bcbffb0056be350e58b022408caa84710af71ea7e157","sha512":"6dc43d40851030f08ae1dc0d1e6b9eecdd3bcec5f570b0b035e28125c77b950951921d121bca112369d087673c24bb0e6d6387ed7b954043f06a1d37b28ad9d6","ssdeep":"768:X8rBhsls0yQt8yHsqwVVzULLGcGRsECNoqcNAjx5MMJMjRTnZVwjb3G+yzx2OhLy:mBAtS4X8qfcj5I1TG/VzjNo","tlshash":"49031ca631d2b0f497e7c0e9d0bb5a05f77b750c740d0624e295eca860e6ec5b227b39","first_seen":"2026-01-12T20:32:42.573794Z","last_seen":"2026-02-19T06:38:02.610069Z","times_seen":65,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\ncf-ray: 9c75d8ca9d025ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=9511\r\ncontent-disposition: inline; filename=\"live-all.webp\"\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=QfY3i1eAAGgC5pGMDv1jDMQtIFXzM4g8_dhXF5MX9z0-1769995025-1.0.1.1-c3usHjQKQb5ZgcAyd9LhXZMmHSsVr.iXGw21QtlyBp5HyRTLLzmt_0KsMaZHXpTt_ZnePoH35nIrBR05dGcrmTQ76n6pQHQjJZ7BNcDug1s; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.721371Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//banner-telegram.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //banner-telegram.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8260\r\ncf-ray: 9c75d8cb5dee5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=9126\r\nlast-modified: Mon, 22 Dec 2025 09:30:09 GMT\r\ncf-cache-status: HIT\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=PQxRC9Hw53Y0ZFFRnbh8qcHRYK_hBnCJOp364uXUGGg-1769995025-1.0.1.1-0rGJ7hpbvd7c8RR7drpFWTY_x2XX3T_f7cW9OrIQiUObuRUcE0dVnyY6Ek7k.KON1m26AepFFUyYK.KVrmA2zs5iJN3Tz9vzYjX_BaMy9bA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x80, components 3","md5":"05119ceca61ca5627c2de5d77909b284","sha1":"0bd8c96b84da934ca25b20392906977b482da43a","sha256":"b65e72e9ecc339c9e6f20b55082f0be11652757832247765f2adb57f8b01ef1e","sha512":"bc42a94af02673cbe3062052397b1d5ade32881d885a0da1f554fa6084d1c41756ecdeb63b1fa656da3ae988291c0442d373f20cea7a91dd6b7dfd8db0542392","ssdeep":"192:5NPTUmK0cbf/JFmMAyAeJaqmQ6BfsSVuGuBmp2+bpZ6TR3Z2JXGIaBb01:XPTUDbf/tdAK6BfsSVu1lyp0TJ0JXGo","tlshash":"a402bf111909f337e36e7b3b773d862c1f471bce4018799a3ab3bd447c6501985e4162","first_seen":"2025-12-23T05:49:57.806328Z","last_seen":"2026-04-05T05:02:25.80019Z","times_seen":269,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/favicon.png","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:07 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Nov 2021 08:02:15 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 24415\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZoG351vibZmqJUitF02m7TVc2yGRZr9JYPstjI3RO2EiVmi%2FtBOf%2FO5Q8EH06c4aBxo4uzWYOGbhO%2Fy1VZ4ENfUdwErSQoL2NfK0EK4k20%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8d98ce4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 244, 8-bit/color RGBA, non-interlaced","md5":"ca5969f25aa2166985104fc14ee94af8","sha1":"9c1142def5a3cfb4b3cdae6efea5992def56692d","sha256":"10afaa67fde7103b6084140f8de6fe6d8206f92262e2ffb9e880248717cdc836","sha512":"ca297859d19e0f2ccd55ede32480bf9541f3eb6121af0c6072e94d1704bf7ef3c8666368d0f891535e2770bf364d6f18162c3a4d3ffe1c0f81bc12b321c50b13","ssdeep":"384:gYJnUQPFDaDn/V2PBRIeH7TVfc1qravkihvedu2HuCuyjouPJqcV6sCN8GgQOUkf:HJ3aTAEe3Vf7HQ8AcaO3UkG2VSrFxXW5","tlshash":"83b2d0397e90ffa04d4ba7d8605ee277ad178b94b950d2c5a48fec5347402bc8c87a92","first_seen":"2025-07-22T15:08:41.906717Z","last_seen":"2026-02-02T01:17:37.485109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/classic/latest/web-widget-6108-4797c2d.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:13.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/classic/latest/web-widget-6108-4797c2d.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: eIBJifHCxy/ZPuKmZjhrb5xNULlgwSYBX/3KU594arSEBNkrDz1AG9JED+EZ2U0DtWi/eBZP4w9rN7PZBW+2ZquS1rFdarFm8qF749LtY0M=\r\nx-amz-request-id: JJ6FCF5R88ACA75J\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 19 Jan 2026 14:22:02 GMT\r\netag: W/\"1a8803032cbb29b0eb1d6c674168271e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 19 Jan 2027 14:22:00 GMT\r\nx-amz-version-id: _JCLkYehxgZ2Rhnt5zqUGgxKDM5uA_Ka\r\nage: 1161593\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6u9fQ9zKkAIrNm7FXzwfhSm88nMI30pBed4SA%2FtCRiy1yCdeoTTlT0DTqMls74AvQzg1KZI%2F1nyHxaFCMg%2FmBbaJ04wqWcG4Ybq0LI8vgtPnRI8EjgjpN1BUoPtHxeIqPt%2F%2FxyI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9c75d8ff3c0956ba-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25514,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24689), with no line terminators","md5":"1a8803032cbb29b0eb1d6c674168271e","sha1":"21b5b1917a59d578c2adc48948a389298ded3ecd","sha256":"a53f8aff4225de9b98d6e616bd2bc1a533ed4243dc793ad0a8ba7755668ac7ac","sha512":"3265f98ff614a5a845dbb95bbca7b35326f14eec4e9297828b7570e5642b1dda7d9eec99ba52a18105a4f9283b46b8ed6322504cad7d89e053e38b34a00550a2","ssdeep":"768:NUT8CW7w2wauihIEOUsnsenwSnZdknCMuc4A7:KTAueIDUJenwWdSrr44","tlshash":"ecb219096d5dd83987dc31c86cfb1e0991fc040ae408e925eeddfef869a876820576bc","first_seen":"2025-09-19T12:46:07.16585Z","last_seen":"2026-03-26T16:18:02.173185Z","times_seen":401,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\ncf-ray: 9c75d8ca8cd75ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3573\r\ncontent-disposition: inline; filename=\"icon-togel1.webp\"\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=w5B31uVmCvuI9clZsOEiUA9Ow1fGoCMmr9Oc9edE.CA-1769995025-1.0.1.1-GVidOCy.2F3xCSBgu948zokzX4m4pIVN7BZGRT.2.RHmPF22_mTw9DhBOvvFR_VXR7r.D9BLGUu5yew8xVM4TTvY6Pk81ZN6icqPNcAK2To; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-05T08:29:46.818473Z","times_seen":2307,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\ncf-ray: 9c75d8cacd4e5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3417\r\ncontent-disposition: inline; filename=\"interactive.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:51:01 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=UIJesy1Iwn976C831oT2t_5WcMjh2.W0CselDmbDEDY-1769995025-1.0.1.1-lfVuZv20jd8jU_JMuCMzxV8DfvNMk_PA7WB2Ps7iD_8MUf3GaKcpifbNardyBN9nbjsJaHs6jyffNQ9uJ8QpMkT3bIYSX_oRhhpRuA7JzDY; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cc0dcea77b7295c691fe07673177a86","sha1":"666431536479501ce70432f76475b7dc09ae70df","sha256":"5b8992379e55caf367e94b27323cc0e64b656977881a2ec14c95e652dc527920","sha512":"c48c66c5b41ac16efe1ff90bc4375866f13303aa320f64feeb13cedd480bb4bba5422a6965bc2c81700de0953d0ff17e010e660ab5c993bf681be6388cec6315","ssdeep":"","tlshash":"9de0f1dcc6a89a046504a0d07633370dd3d2d586138dba926345f430122462dbe28cb0","first_seen":"2025-11-19T10:28:57.292064Z","last_seen":"2026-04-05T08:29:46.851615Z","times_seen":825,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\ncf-ray: 9c75d8ca9cf95ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7983\r\ncontent-disposition: inline; filename=\"slot-jok.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=EYfqu3SPiS3tC_6fsH9XE9ZTg.HEt7t0PadsPmQbbdA-1769995025-1.0.1.1-ftZ.ERv5zYQMjcjnJcEd..DvwXi0aqP.mXORzqkf02pxbIrIqa.9AFeNaihjfG0UDhbkQhy6abOcU5Pl38vNSKP427FHEbqeBlu__zP129Q; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.746451Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 9c75d8ca9d105ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"fish-jl.webp\"\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=guMX6QHe__OUPVZtG9uWic8fkYgKJhTDyZAfocpBgu0-1769995025-1.0.1.1-r4E3q.FWMbH4lgsTgAF30A2jE9CsHDbpWnE0x0xw2bFWj_zAacfsUHasi6DxcfMQaufoxHT6jDgjzXiqbGuYKLdpIcuKT0U6m.TWxNLlfX0; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.726045Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\ncf-ray: 9c75d8caad245ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1967\r\ncontent-disposition: inline; filename=\"interactive-hks.webp\"\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=iZvpMh1uGZFQfRbNFBMD5PDU6nRwKSvM27xUxf6rTyo-1769995025-1.0.1.1-gujTjD33Tk4VE4GY6VPd3f8hxolRLBA9Sld2VDog37D0.10ivFHiHOSB14I1auhh9bHI4ZRDFyta1QRsyillMbBgozhrGBDlcX7CIgM8WiE; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-05T08:29:46.793868Z","times_seen":1806,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\ncf-ray: 9c75d8cabd4b5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3751\r\ncontent-disposition: inline; filename=\"sabung.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=4PHuS9GUn9bj1GWKgkq9zZl8SFyt16D34PnjbnYQsdE-1769995025-1.0.1.1-7LpGXP0sHivAU9CZTInZ6XQRHMGzSO3lioubrP_ISn3UcZ3AVolhP65uaoKZP79KtXm4pvVLgxhCXnPqpSit8cV0Pn4v0GlBQEAIUNyOTsU; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cabc944e32056660a317f51dcf4c8c70","sha1":"c2bcbfc855467f946dc5fa5b3b562e8895c7b4c6","sha256":"7969b5e6f41c00bb28d7882e001bc3859f49337dcfd9e3b2ab5209e63ebd92db","sha512":"cf590ece4a8161e48e395941c5046acdbea89c6fb8711599297aff86cce1d2617759b5b66e93c10734b4e33fdada0f24e3b126c23c3cec482170c66960d4b09b","ssdeep":"","tlshash":"f2f0418383f44326a600b0d457554504084d038610756b7a7f963c454635da8ee4430c","first_seen":"2025-11-19T10:28:57.237919Z","last_seen":"2026-04-05T08:29:46.782904Z","times_seen":825,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\ncf-ray: 9c75d8ca9d145ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1584\r\ncontent-disposition: inline; filename=\"fish-fs.webp\"\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ARwUzQPqBxy.P25gmLVXtcFIMhTkvTi.i9OUrSFKckk-1769995025-1.0.1.1-x8UsiQASxgoiHzbqzpg53FteKos2xgqYtHNwjvZ4Eb9F.TQ8_j8peI2uIDdRPahhXmpd__8O.IltNUl9b2gShnp04J6K0a1mPim_E5rGFWA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-05T08:29:46.784697Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 9c75d8caad1c5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"interactive-jl.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=yefU4Qy7kKLfc7abwKD8aBVfhT74n.vvL2eYU9cqtCk-1769995025-1.0.1.1-cEYRXQMwGxHKmBU2Kcrfl_YTijZU8vT3nA4YKft0r924o3k8MhRe3Vz5XWKW9e9o3l6LtvwjBU27QIjpYx75E7OzSbPlCg_Lbz2kPjrBEzM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.726045Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/casino.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/casino.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 990\r\ncf-ray: 9c75d8cabd415ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4290\r\ncontent-disposition: inline; filename=\"casino.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:51:00 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=_xIdGeABtqTGY8GTm255XWECtcMufxrqAy9WyMoEPl0-1769995025-1.0.1.1-2JbXAj0NFxYw20yaS2VxPZrGhlj7oqr1.HRa5VqNNn2G6yGO6_0QluwneV6LBrrZk63IxE2bzLBRMY8M3MscU4t9Y11cwNx0bTFTWORYj28; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d3f2a042f3a157da682adbb52f3040","sha1":"40066f35a2a29d4bafdcd05179e9f2c7af1666ea","sha256":"3c22945d0cbdf7368c5eaa30f26611147425df5c45d7303551b9ba9ddfc957eb","sha512":"0e7768bd55d719c646cdd57e7b0bb038c668142fcaf10d3d61d33b3d992ffea15a8f48f18404118d64cc3cf791f37ab6b8d0c4f044ca91a550ce0ef87fa807db","ssdeep":"","tlshash":"1011c8a98739c523e226cb39cf0c355a84a86385f031b0bf95c2790c70ea32b3b4c980","first_seen":"2025-11-19T10:28:57.226883Z","last_seen":"2026-04-05T08:29:46.814636Z","times_seen":825,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/css/old/new2-style.css?1768455952","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /css/old/new2-style.css?1768455952 HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 10:09:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6DeqDh7UBlvelH%2FVgS5oIrFQcv4%2FtX8sIh44EkWmrDGCLsZYq165LF6pOJRxNGZR9tLhyy8L%2BzRbcuK4XwD8rw%2BvHs5DlIXZgAqaEgF0bk%3D\"}]}\r\ncf-ray: 9c75d8c9fc14c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01af7e767be5b793b9def25cc5708367","sha1":"f5e928588d0ac5fc97ca65be366db7e5a6a0c375","sha256":"9ecca6a6a96bf6f13b2f733e8ee84c4f6868ecd00a76eb261133bfba42128fbe","sha512":"34ba7ffe63b61df1052c6fdfdc759abbb81b4cdd353d890f0891f449ab718be1b23c3fddf748604d0a8e4bf2f188d451888b759dcab1857e61eb2618ca852611","ssdeep":"192:WoVF+jJSouRa9q664vDL+TRl4y5UCUmQkGyMA+AHFtzTFB5SbbewonOlnUAdhwj+:Pf+gxwq6691fMcDKTVf9rA3v/JZKow","tlshash":"c392736dd512209a2633ebb4af750b19e7698023cb06626d3fdc62844ff22799161fdc","first_seen":"2025-11-19T10:28:57.246484Z","last_seen":"2026-04-05T08:29:46.780199Z","times_seen":820,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/assets/24h.png","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 11955\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqkFl%2BjfFvbmd%2FnLvI78MpKB9TZUsQKOwR%2FgrNF%2BPRubdmcJ7D%2BvoMLaBqYWGBAdgVCPfiMjBQpTI34BOUprIJp%2Be9h%2F00Ttg6lvm%2B4YlQk%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cb6c34c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.740971Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/lottery.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/lottery.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\ncf-ray: 9c75d8cabd3d5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4258\r\ncontent-disposition: inline; filename=\"lottery.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:51:02 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=.4nZaT2vQm8smGeUh0FWSpw9DUb5G84nbbpvCq3CgFw-1769995025-1.0.1.1-WTM_L0lSRXvvJ.sGYWbWVZ8k3GfqDMd4prvpb.xDh63RS8_TRJKTKhRFfOMFEntfooRERCfxTRGukwV5qTNt9gCAu9kZ5elCeM33K4303nQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15c0c4be6639d6ec9ce5ddc983f2c4f3","sha1":"9e541e491ca202d9d0aa9e0b61d01198eccc9eb7","sha256":"61a773aa166745eb9f86d91f71494d72866355dc9d1994d3bfa7ed76a75a183d","sha512":"715c171b747e44b894b63e9c97688a0d2f85d3dad63ed25bf019fc59cb987d7d25b35452b974221358a6f6663ae284823b933a61bac6bdc9fcd115734bee9e29","ssdeep":"","tlshash":"0e11c85683756942f06f7942fd6c932848b4dc147247d4a79bc2060bb1fc2dca301578","first_seen":"2025-11-19T10:28:57.308418Z","last_seen":"2026-04-05T08:29:46.787561Z","times_seen":820,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 12:35:15 GMT\r\nexpires: Thu, 28 Jan 2027 12:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391311\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-04-05T08:45:14.634588Z","times_seen":10155,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 476162\r\ncf-ray: 9c75d8cb0d8b5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=499077\r\nlast-modified: Mon, 05 Jan 2026 06:47:40 GMT\r\ncf-cache-status: HIT\r\nage: 3138\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=NXP1W6hlFzWY.GOOO74dVQsGIDA.AkPgmGnEVp6kZM0-1769995025-1.0.1.1-2SGJ6m2IJro1xRUvmYMDg9nNAFY12s1cuf2MsBINRSzB7KLzYaWyXXuHPXRqNkxsi4xAQJrhCeYZ78N4HRg4l1CBz1Vo7FO1Owc_U2r2b_0; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476162,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"7235cbb8f71e34fbc978b2e9ee1d2dcb","sha1":"79136379f02b395ef0d3a304bfe223a5a7adec94","sha256":"8eb892f47e9adf756ffd8807906cda293e2735b4160f43a7d72dc238d26ded0d","sha512":"2d5427ff23a784d5dc845931d6ff20492cf862c07ee309ffcbbcd8808f76fbb33b572406e284b0bee09ae8188abd0a43f16c2b0f4652fe8c7492bddc15351531","ssdeep":"12288:aHq+uEPsJzJq3f0lntuMzKlpQmEsOUU7Sio6Fct/Jk0iVxGa1G:2q+rsZJq3fSuMWrQmNUFn4b","tlshash":"cea423b9b89e1f58ace96066ff7df5a57009d850534a062eb1ad4e83b4223ed03f0d5c","first_seen":"2026-01-05T19:48:01.130869Z","last_seen":"2026-02-13T06:56:55.232592Z","times_seen":130,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\ncf-ray: 9c75d8ca8cd45ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2903\r\ncontent-disposition: inline; filename=\"slot-prag.webp\"\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=k_LDIlHCjk7uLM7mBJHiYJX3vCYbTTzVt.HK1sthUPY-1769995025-1.0.1.1-g9Igh8ErOvMM7yfFJynRaP.WugBzf6rce08Hd8MqlQvobM89SXwRmQeG8by3VkX6YT6tJQKZbe7fS_njymuNSoxIR5lVhfYnm_T8HAz17pQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-04-05T08:29:46.7254Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\ncf-ray: 9c75d8ca8ce05ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4945\r\ncontent-disposition: inline; filename=\"slot-spad.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=cpzG1CqGP2lNVe2LOWwMiCjCnje.fSFHEfE8hLdpKNY-1769995025-1.0.1.1-2gLs4anhNUoPkeKNnEsxGB8hYddjKCnwGYXc_dDkinVFo98XovL9oVYiAOqCXLGIO2EhUiCMy7cQeXwDHiWatba6BP4MTe2x_xrMeQ9PkRI; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.820915Z","times_seen":2387,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\ncf-ray: 9c75d8ca9cf55ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4930\r\ncontent-disposition: inline; filename=\"live-evo.webp\"\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=YQcVE9YTgW_A1fEHmfXte9jxrU5F4jXT29CU5P4Op4M-1769995025-1.0.1.1-U9.pnL86jFzXDrnuNTNKaY5R8FK23MMp8FJ_fWP1M20Sc.BjxmWJ74BppWDXxmCSr.zkvGkKJKw.iN6uf2yf79FBKZCuGMAY5jtmC_FEc8I; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.781632Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\ncf-ray: 9c75d8ca9d1a5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4417\r\ncontent-disposition: inline; filename=\"interactive-gmn.webp\"\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=dzH2kmU7VkgGfz7wiWNAM6xFd06fkFIIf69AwlYesOo-1769995025-1.0.1.1-zj.gLXri4pLt9Db06VhBIiBEIHhgICHpJm4wjQNP8MQa0X21Jtw.V6.iia.ZcNdhiirL51QE0WGGTbCM.5EbdSrWzZ0xpMIQ059Hyp4.4Es; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-05T08:29:46.839485Z","times_seen":2302,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/arcade.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/arcade.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\ncf-ray: 9c75d8cabd485ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3280\r\ncontent-disposition: inline; filename=\"arcade.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=GEoS5OONFffyd1AYPeXZdZIxOvkwjm14PAJ7BQz4.3Q-1769995025-1.0.1.1-WIHy8.sefYCKasW_wMWyKi3gfIJVM9O76jclYqfje.I2l.84ygwkY0LHEwOrFN.uxl3QQLll3dZV4I0NQ_CFpMN71_VlV5onBMX74rmwKX8; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b684e53d508cd6b31c7783bdff6cca5","sha1":"9ad973f643cc511319f32dd501539f6c223d45c2","sha256":"e5b50f69e6eea2b60cd5aaa8c79b05ed8a3846ff044ce8b9665cbfe56a821935","sha512":"9fd98539b171b98f674bfa6637ce289c851907b24447b6e964c1e9a8bc148eb2b6714446b2b2b420f75dc6f2bf18d00c675f2ee1be6747ff923d1500c24792b4","ssdeep":"","tlshash":"23e0c010ff04e6759ae728146839c95e1c008e5938c7cbd4070d06e1a1b43530b0295c","first_seen":"2025-11-19T10:28:57.335494Z","last_seen":"2026-04-05T08:29:46.798095Z","times_seen":825,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/5g-10rb.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /banner/5g-10rb.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 280709\r\ncf-ray: 9c75d8cb0d845ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=291388\r\nlast-modified: Fri, 23 Jan 2026 11:14:05 GMT\r\ncf-cache-status: HIT\r\nage: 3138\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ZK8ZrCItK8WxzQfjoZUDB3IIGEz_lTq_YG7w4vgxnLI-1769995025-1.0.1.1-iDTuv5mrPmdI51dZ3r2CSWUb73KHzjuuh8Km4BNTOnO9Rkz1TCT1DIkKrKpbrpZ1xiSbIek0y4Uy7s8eCGEWcodEYON7VKH1K7DPwAsXngQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1900x380, components 3","md5":"4481867ad1d339c699558f16e30aa186","sha1":"e8c8710748692024a0d0970bfa2cfd8140876077","sha256":"374bc692650469f43360edeb706cb0ee0f9031bb74738011c3ad0996d2d3f7d8","sha512":"bed22b6dfa1ae5bec709fccb3c740cb7b7ffd2e95380feae86cb9739d9765fe98b4d79bb1ba494c63c3772506dafc943d7f37be16ba0d47d6bf971bc9973e6bf","ssdeep":"6144:YUOzsG/KZnBCcdPODguQMvu9IVBjxqCJip5B8WKIz:YxsDocdPvMm9IKpj8W5z","tlshash":"b55423ab00761e5b7d939c99cb9ca9070f7f17ec37a7262164c09c8c2cb528e5b71ca0","first_seen":"2026-01-23T19:09:53.410925Z","last_seen":"2026-02-28T02:09:17.055066Z","times_seen":63,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/style.css","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icomoon/style.css HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 488\r\ncf-ray: 9c75d8ca8cd05ebd-OSL\r\nlast-modified: Wed, 19 Nov 2025 08:02:27 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=tdFGFIzdt4tvO7aIDCQ8mqDRQMRpMTFXfpcsRmb3aHI-1769995025-1.0.1.1-U81wqXMdjFnfWM.dlrIjAbo3F9U78dSDXCg2FnplqAsKmyznz4WqSvkN6HgI8IlfihbfJvOmOe7_Z_LqbNpCVJim4dHp6HomjWR._CWq7tM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fd841219e646258717d8c8c5ee8e1645","sha1":"3b11bf2731abad4ee4b4ed81923025aeee1779a9","sha256":"bd964175c358da3b2151572737f09a8b9b7a180b482ec1b379be8f05a23cfe81","sha512":"7854a76358116fb5eec3fde344bdafa933b20abf93bc324a0484a07188d16624c28e4146e573eb9c6d34041c4b04718385c5d67bae6f5f7ee54ab4a1c460ffe4","ssdeep":"","tlshash":"dc216dd0ecbd2851930194c833a73a20bf0c52159c4a6c9af7ab284cfff670592d679d","first_seen":"2025-11-19T12:27:30.570223Z","last_seen":"2026-04-05T08:29:46.763402Z","times_seen":824,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":5,"connect":4,"send":0,"wait":14,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\ncf-ray: 9c75d8ca9ce25ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2880\r\ncontent-disposition: inline; filename=\"slot-nlc.webp\"\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=fOk.7SdJCCWWjQI9gGQmbyBTT3kueOG6POhZ4HaNP98-1769995025-1.0.1.1-yxaU3E0aAAd4dC6gqGe0BqRF0BqMhdo2CLoRI7nfkNF3.6vGkcY_Zlm5X0Z1EOdu9nddDvzbHHLttfzWjdB0c1i_pT4jBbgLC9Os8yy8XpI; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-04-05T08:29:46.786414Z","times_seen":2314,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1324\r\ncf-ray: 9c75d8ca9ce45ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2957\r\ncontent-disposition: inline; filename=\"slot-fgs.webp\"\r\nlast-modified: Thu, 22 Aug 2024 05:14:43 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=c.rBK37vngC4mvqC0AUTsOJ.dlQKp04aIgM1rtQt9uI-1769995025-1.0.1.1-MwvMgKHDlb_tT0XtWBAiASxxOGptUM3dvndCaEtjcN_bwj6zF_TRu1X4Z_JYlif.ysRrqyo.ksgZ6Afp6NlmcR.QnrOp4o0WLVTNrUcaE7g; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0db329565ff7fa54709c6b982d143079","sha1":"86787749df4f0dac3c2aed2d7ed03c12d4e9f9cc","sha256":"a56b49bc68bd936efed2bb75c474cbff5aa6382bb4db26ea9ed393cd3a846b3a","sha512":"23e85ddefc5722b311bafcaf8bcf198dc28da94cf904129af1ce7795e2bdb38e6930feda2abf2d9ea1fdc2e8ae0d1b8bfe7abb7d0102db4366d3a65455b4bfe1","ssdeep":"","tlshash":"e421d5206bd3894c865fd608686ae401257b725a5d24fa7b0bfe16338f3f0608428919","first_seen":"2024-08-03T17:27:29Z","last_seen":"2026-04-05T08:29:46.844151Z","times_seen":2022,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 9c75d8ca9cf75ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"live-mg.webp\"\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=uCOlIoQpEVM7dSqwMViQJwSMA4EFnI7O2FFKsurKLVc-1769995025-1.0.1.1-5gGNsXWhW.HsRQngKoZPA3rMSGHmstq51qWJaP5sq6R_c.1yoTiuaHBzNpj80fKH5AMQ9lV3MRBI4NIZKptOQ3QlWb8RQNf1DgiRC9C7gYs; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.724714Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\ncf-ray: 9c75d8ca9d0e5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2565\r\ncontent-disposition: inline; filename=\"sport-tf.webp\"\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=bkWFimZBew0B6KsGDVpZyOd7YdWkzK9I5SKz8R8mk5M-1769995025-1.0.1.1-6lQBjRSIQb9nZkL7IaFpif9C77HJIK4KGvj69MKt75QfeAGGLnxc6CyVidgT5EgJE_zZBG0tbt7UAglICxr02PqmXV119LNO_DNWO7ERcB0; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-04-05T08:29:46.772852Z","times_seen":2368,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/m/capreg.php","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxQtGhau9gBVHtyuYym7sa%2BNit%2BipkFPjaSO5fYDvNpn6CZk%2BoaoVHM3UoiVRTZMqNRapIcj8gkqsoqPw037UK1j8FbVxvauamCoTDptgmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c75d8caac1dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"790969348c635b07cf2d6eb77f525dc8","sha1":"47ea2bfba0992e62c6e7c3ea581f70f2881525ea","sha256":"f9db7df842b070c94ba278573f618fcd74fbbf34b3c4052c85cc1dc7f4f9cb2c","sha512":"bc08b143a0fda6caa5743603a8fd3b4a1f877b3446b654ce6fc6f3791c1597d06bffc785cc3787564d4af67cbbff4775c63bac8463d0f96b03c8c6214335cbe5","ssdeep":"","tlshash":"85513bd269218080f33be3517d306ac0d8a745eb5e11df1aa3ccc5a14b4416bed68c97","first_seen":"2026-02-02T01:17:37.496549Z","last_seen":"2026-02-02T01:17:37.496549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\ncf-ray: 9c75d8cb6dfd5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1628\r\ncontent-disposition: inline; filename=\"whatsapp.webp\"\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=8R.fIjb0Aoli8PBibigvPVSX3lQ5Fmm2L0YnDaEJBFU-1769995025-1.0.1.1-LGYY2GwXmMXwRUZSWiCl1XDS3P_ETxGym3fcPi.eOnonam1IWsas70bbSiLXi737i1XU334DEGKV0XF2fN_Xh9UQYYrViyr.vZIRbJvzS8o; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.789245Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24750\r\ncf-ray: 9c75d8cb6ddfb51b-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230059-FRA, cache-lga21961-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3797287\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DIlzgrd%2FZpPdMlAfCsJ%2F8DUAoVTneWGBdKKHqUK2vE3mFgDuGCu5uayxvGDEU5W1kvwzE7h0uVRtAFPddPJls1%2FHifnqWKqQ7CyE0uIcHwRSlE%2F4R6a5aKV8vx2BgbkAX2g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-05T08:29:46.741504Z","times_seen":4230,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\ncf-ray: 9c75d8ca9cef5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4157\r\ncontent-disposition: inline; filename=\"slot-cq9.webp\"\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ySEzrYq6vIgkJ.NMmfa1Q5m03NIOl_0AfBY46T92tY4-1769995025-1.0.1.1-ca0wqfDEcF.SusfKHHVZz7d0PbWmZPvviVGwBp5ydc.UzTuhE1sC2s.umWKINVOvz59pBTOTxDrggyT7oE_hu0y.3UAoE21NZZjP4ztf.SI; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.72785Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\ncf-ray: 9c75d8ca9cf15ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2410\r\ncontent-disposition: inline; filename=\"slot-l22.webp\"\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=bWVeYpQsBPFkGIFCzEIX1cXsbyUbU.FPQX1FbTmVtfI-1769995025-1.0.1.1-wA7sXH3T.rrM5r7ECoXyGRiapXWOUBH_HkLFojD2A.GPwafYJ8as_Cqt7VPwe.Tn8IS0qxx38uI0fsaectpeDvUilTcA_zw6H.uONlq77AI; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-04-05T08:29:46.792637Z","times_seen":1676,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\ncf-ray: 9c75d8ca9d095ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2322\r\ncontent-disposition: inline; filename=\"live-sbo.webp\"\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RrcjzPRhu2rUDqy6l6.KMM.lZCgZHYgOF3zDa23Zj.I-1769995025-1.0.1.1-C.uJQfl.pYUgK6MXqUjPAscNs.Ux18en.cYJkP1gLRB4KKJybt1cVVQYr3GNo636PGmcC5tQ7Y3SrxyOQ6d5lO4gxROLifNZZs30p33XImY; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.796248Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sports.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //icons/sports.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 648\r\ncf-ray: 9c75d8cabd465ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3789\r\ncontent-disposition: inline; filename=\"sports.webp\"\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=yajzNR9c1VuXTM1VDR.Njw0ANv.Ff2gOeK_NSa7Xdf0-1769995025-1.0.1.1-Qslu6j6Uwh.CeXSU1PdTvPMq2LMPlEIKS07wP._4q2t_5exrrwqrfxfif.0CfJDNEhfw9sLfAjVPptll44q9AdJY7kqkycDc4_mN_TzAk1c; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d70a305bde0a2cd5afb3d14c5055235","sha1":"97b47a1a205c9c3759e2aa0e7d42a8eb8c94a691","sha256":"62675e8d3f1ecf4c407ec5d846e07f842347e69f44835c5612d23c61f0b59577","sha512":"7fdd2042c9efb3fcec6b93704328103112be80bf2e10030227ab1a5906ba6d30f4675b89f025d8186353a9e6a72ff3c99e3941ff9260d1e90a46012db530ca37","ssdeep":"","tlshash":"d2f0c280c300250f8aa41d8ca74ca42e4360ab82167c712e03832eb473ed10822b0270","first_seen":"2025-11-19T10:28:57.200422Z","last_seen":"2026-04-05T08:29:46.865842Z","times_seen":825,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/upload-Slides-20240120140304.jpg","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/upload-Slides-20240120140304.jpg HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Aug 2024 03:14:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 477791\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oK1ntYtSbRK0uplmq34j1ZXbvD2Bizy0gg%2BmyyDgCkT8ASj0HEdGLEbfUUrfpKZFVQvUigRFoiP6g6ibvTDK5nw2iWNXKCbCi8qR5DfYCoY%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cafc1fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":477791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1900x380, components 3","md5":"1ba27105d574d67ae794b33a0baf2111","sha1":"77ba3740948b590ac269548fa219683b188514d3","sha256":"d559314a0c624acd4ffb737f957164629e6b17a078de2818aa749456c14f3beb","sha512":"8729f2abaa876b8eb66562eaaa54279e2cab3b6343a4dbfa70f8b9c4fb508d01a86246db68b0828c095c75240ff98a33dea59142d6ed4d21b4e206ec5156bf8c","ssdeep":"12288:ra2LdiEWZ3B9LOmwN+QOHdNKQTeKALlaj12bW7w:rxiEeB1OmwN+hNb4O7w","tlshash":"9aa4238258eb39426e2d2820e0139f174557d881eaff47cf9a7e26d037a21bd77ca5c4","first_seen":"2023-07-02T08:57:00Z","last_seen":"2026-03-19T11:32:13.726564Z","times_seen":87,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":708,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/images/transaksi.png","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /images/transaksi.png HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 06:59:07 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 218956\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xmpida1owFlm1PmOCi4vUS%2FrEGvWkycf9UuSgMUZPqeN1xXFyePdljVOjlKKu4zxjwGeFNHbC94jeoGFIBqVVUa4JjDABIpm7qSfzQRm5Hc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c75d8cb5c32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 400, 8-bit/color RGBA, non-interlaced","md5":"03ce22f06b6845b126003566c4b55a80","sha1":"b8c6630bf76a1e00e1d3d0f9a09b7111ae2c7b61","sha256":"30e1c5205987eb61c60d00f5826662814303555dbae1373a7dba34bd79c384d5","sha512":"a5d75c88c4cb340eb1c2dbab05873cddf2fe24d3b5e79c2c735fa0a868ea1e095374dec7604af778612c02acc5dbdc0b4872e6051f1d71feb8309cfbe6d78242","ssdeep":"6144:3V5YETujPZrC53dZePFe2+y7BYYvSOTEh:3VO5xu53dZyFeWJvSKM","tlshash":"54242342cd028f89f850bd35e1d8c796ec7ad7d935c9e1ae9221c4401fda89638eb58e","first_seen":"2025-11-19T10:28:57.311271Z","last_seen":"2026-04-05T08:29:46.798759Z","times_seen":711,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Feb 2026 01:17:06 GMT\r\ndate: Mon, 02 Feb 2026 01:17:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-04-05T08:29:46.788161Z","times_seen":1361,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":113,"dns":1,"connect":28,"send":0,"wait":46,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33068\r\ncf-ray: 9c75d8ca0d4eb51b-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230073-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 459165\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=foa6gBgCwwpQaCghA9o1qv1a%2B%2B%2FZ7O%2Bhb9ZxdBrh70wsqTisbFjzaEgmiYnLj8n7b%2Bc9DTkYskI%2BPunzt0mn9X9FmmCUH0InNPUPMaQ2t1VlH45vrVwKbDUxRFQJasYLo1E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-05T08:29:46.800333Z","times_seen":3646,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-gmnl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-gmnl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1892\r\ncf-ray: 9c75d8ca9d045ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6578\r\ncontent-disposition: inline; filename=\"live-gmnl.webp\"\r\nlast-modified: Mon, 07 Apr 2025 16:29:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=UQsChtOFsuChWAazFSbOluU_twNBq7FjKKfyiMUEoNQ-1769995025-1.0.1.1-6x4L2mpa_xL6lYohkBuBRNDfCx8VLLhYsQtROkPYLKHO2JxqlTq.kgS3FewGnE7I2Ui_kMjPavCyAWkAPbZoDUBiSO3X2pdAh.KlXBX0g2Y; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"033ae41c81e5664b5a14cf0327d6bc11","sha1":"a1a51d625b808570ced4eb38c66ce65b64a8d027","sha256":"e3ad658c0ae844fb1fd103a62f6be460f7816c3446afd38209d24a1550c998bd","sha512":"16ef89bc560dd25788f1f535bfb28d853d734cd74931050243dff0ce52927feff738b1f4cd8e8a3462d1835f40f0519eaaa425f1225e17c71a5143cf178a20c1","ssdeep":"","tlshash":"bf4119ee007123f548f93409caa19b55d08a938138b8cf716990a78ade8e19c5d0065f","first_seen":"2025-04-11T01:18:54.278204Z","last_seen":"2026-02-09T13:27:20.102009Z","times_seen":1364,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/capimg.php","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nCookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMTZzNCVX7R%2FA0rE519FE3cHxbymudhNP82vzh58YGunuGdY%2BtDC7FMu4YVcjUhod6CXsx0dK9%2FIUiXOENX3bvszCGoYUlcfg42gdqiMUOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c75d8cafc1ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"fc1da68a37d9f5f1db2d5fca0a27b926","sha1":"e93abae99a096ed25eef577dfd710f35695d53bd","sha256":"19cfcc14c4aa6fc880f8788f8846e28777d7fc9dbe9471d943067bb73b06281e","sha512":"cc21274cf80e29f1981727ac6dc24956a891511e7babb20dfb81ca3b5574e01b6e6e44a98e373f3668f81c0f70fda2dfbf1a1c3814fb0b385868ff65b5d2714c","ssdeep":"","tlshash":"921186d2129a7429845a91107188e79563332b4c7a91621fb15a2c42bd3c3e97c8ca37","first_seen":"2026-02-02T01:17:37.504854Z","last_seen":"2026-02-02T01:17:37.504854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//banner-telegram-icon.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //banner-telegram-icon.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7990\r\ncf-ray: 9c75d8cb5dec5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=15420\r\ncontent-disposition: inline; filename=\"banner-telegram-icon.webp\"\r\nlast-modified: Mon, 22 Dec 2025 09:30:09 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=k0LpoJ7uR7fjsYp63y_gfz0s_90AjLatOJiLmnYOX8I-1769995025-1.0.1.1-CrrQLVuj3pcVU6Dju4aXbKVmimROcyu1hbEJd8J3ps6j2UFZ1XZaWR5WcatVbJyzIUitEdKjLUjrGqfZf.6IVFkYlzNFib_FrpZZqgrhP1U; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f9f5553f4319eed0a3adb9ab6e78f0e","sha1":"0b1eab249a610936356db50aafbbc2222ec39ea7","sha256":"992e3c4bf05aa91b8c117a7c0629b76e34919ec5d493df8326ffa496bb264ce6","sha512":"97981220034a16ebe57e7e4b401348d57ff7dfc168b6749cc7dbc0aa4a74a0ee30e8c65b42a2c46147dc606190033b634c64f90532b2032aeaf2595feaa84ef7","ssdeep":"192:53ORatfCKyTuMo3J+uHWibDaIOLO3nOKI1ZcjFZpz7eEZRU:tKlTrYJ9HWuDICI18l7eEo","tlshash":"78f1af4e02027a4c581154aa5b9aa773f5f41d5ca93d2e9e6713fe822f0d443e30d57f","first_seen":"2025-12-23T05:49:57.742624Z","last_seen":"2026-04-05T05:02:25.793637Z","times_seen":268,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\ncf-ray: 9c75d8ca9ce35ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1584\r\ncontent-disposition: inline; filename=\"slot-fs.webp\"\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=tU5iB11zE3AtpOBjL2czGi62Hk2q.RM0PZ8c_HNxv3c-1769995025-1.0.1.1-QevYkmaLLOfjqcYyxoFuX.SSya6Gerf27X60uwyItzmVqsMNYLniJM704yZK.Zlk6e_z8OFJ84dsKTfWC7tQSg_23FIoRMynKIUjjbT8gFk; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-05T08:29:46.784697Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 9c75d8caad225ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"interactive-mg.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=WSfqrfJKa8TGBQIlS8Yga9XPXCDzkILiXwaAOP.Cl48-1769995025-1.0.1.1-BSHcAXLVQ1AdMqa92xbliIYVvnnFhQMkZfa1f4w6yw2.lixs72.iIMuHK2bz0VCuLAY4k93jRxfxNzws_K5cjJFS2iskJFUHMGX3nQ2UOzY; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.724714Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2assets.zopim.io/Ig3RJgDddkkMdLFP4FQ2xe9JD4LqvLC9-banner?1637822507274","fqdn":"v2assets.zopim.io","domain":"zopim.io","tld":"io"},"ip":{"addr":"104.16.200.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:11.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zopim.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 23:35:24 GMT","end":"Sat, 11 Apr 2026 00:35:09 GMT"},"fingerprint":{"sha1":"0F:78:1A:7B:C6:86:D3:07:FF:77:63:2E:F1:0A:C0:7B:39:52:00:A9","sha256":"9F:11:02:28:A4:16:38:00:00:51:84:2A:C4:9F:42:9C:28:06:CC:95:1C:B5:64:5F:60:AE:1F:36:88:14:0A:A5"}}},"request":{"raw":"GET /Ig3RJgDddkkMdLFP4FQ2xe9JD4LqvLC9-banner?1637822507274 HTTP/1.1\r\nHost: v2assets.zopim.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 243970\r\ncf-ray: 9c75d8f18e932efa-OSL\r\nlast-modified: Thu, 25 Nov 2021 06:42:00 GMT\r\netag: \"f0584edcc340c0d5b03a8fd072a479fb\"\r\ncf-cache-status: MISS\r\nexpires: Tue, 03 Feb 2026 01:17:11 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-robots-tag: none, noarchive\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243970,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 240 x 164","md5":"f0584edcc340c0d5b03a8fd072a479fb","sha1":"039a80a153be40a37ecc16097f1b85761e511824","sha256":"b41b45a9b3ac0691095af613aeeecb594ea8b4c56e3b056dab9e19193867d2c1","sha512":"9ba6b3d5510b8095ce305736103f3034c7a83db8aff41cf6c9ec54a617f0e8c17373b6284342a09dd920e6d3e5b42b5432dce8e0c3b26443e5db9ce7b5fdc3cd","ssdeep":"3072:aegqlV5xkG/ybGh7PZKw0Xvx8QAc8ZpcY7IHuuumuL451eM4/sW9KEkdYkIJc5WJ:R35xWChDZKtXvx8X3cY7CPJ6sW9KEkKt","tlshash":"3c34121906057a8cb097257ba95f285aafcfd2181f4d6c34931aef02c2fb9bdd85c6c4","first_seen":"2026-02-02T01:17:37.506411Z","last_seen":"2026-02-02T01:17:37.506411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":401,"receive":57,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\ncf-ray: 9c75d8ca9ce95ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2835\r\ncontent-disposition: inline; filename=\"slot-ps.webp\"\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RjHA3UD4k1nBEqYi6R2z0uALlhAEFvRqVWU0AG7BeN8-1769995025-1.0.1.1-NQOA7ryLXxby8Kl1jzH5xbU0PXoXYAjP._5awFY8PgLza8wfmtdA_yl_hlsyKP1ufFfJZRHsdo5sJ.YqPAb64s_cJDPqhK155giGCnBqV4c; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-04-05T08:29:46.740403Z","times_seen":2386,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\ncf-ray: 9c75d8ca9d015ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1589\r\ncontent-disposition: inline; filename=\"live-sagaming.webp\"\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=epOIzVakI3rR0spvRBPWzqVf7J2Xh4JJecwoQoCnrq8-1769995025-1.0.1.1-lpe6qsL.jZzJqEdkpdlPKxsPlKPd7nIG6kLrX408zI1nSVXYIOl2DmHrG4Y.0KdYJgljMOnxPSvvSruiEO_uD9aekrHaxe0F.MrTJcxKEkA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.824491Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\ncf-ray: 9c75d8ca9d0c5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2245\r\ncontent-disposition: inline; filename=\"sport-sbo.webp\"\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=hmODiwlXyZENbh8iSyyhjUZKubk4Nz9hP9TasIOJofw-1769995025-1.0.1.1-UprLnQE4OqMSMs_TYC8GhFDlkvfDQaio86iZqfsMyrRlVH73gafa.sIKHXlQmGfyLuxseffK2BH5qDvy2btB5I95eccX8ORxsW3U3uDyQDQ; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-04-05T08:29:46.755937Z","times_seen":2314,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\ncf-ray: 9c75d8caad2b5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2758\r\ncontent-disposition: inline; filename=\"interactive-wow.webp\"\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=F3ty.LHpmTJ_1GwRpYoQLyDBsdve9xIQ_abD2wgdCTQ-1769995025-1.0.1.1-blMqMROdSACDiJs.27EXhTyBe_2z25HTzHqTo_1FvU7.J.SpyeBhub6569gbccqSaOKtS.vhIn2CWKd93VeCPLZBfP_R1vyECenoxa8sd2A; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-05T08:29:46.743238Z","times_seen":1476,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\ncf-ray: 9c75d8caad355ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1402\r\ncontent-disposition: inline; filename=\"livechat.webp\"\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=q1xIiMXgWcWtW2fcItlMzwTRrVVZCV.I5vTiUb2I7Zs-1769995025-1.0.1.1-HqBs2S2zBzTAL3Qq.abN7VN.cLbzPjO8RIFWQnDUDGOrPmK_.JD_5Gqsc6SZtTY03_BzcD_2mgU3rWtPrDVEkFqCCsDsuzsCqPnrsixXz5w; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-04-05T08:29:46.786959Z","times_seen":1899,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159759\r\ncf-ray: 9c75d8cb1d925ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=170149\r\nlast-modified: Fri, 23 Jan 2026 11:14:24 GMT\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=g7ImFku.VLT86m1xKQeo6mELbi_Sr24EN7Gw4OALkVg-1769995025-1.0.1.1-gkfjHXzpQnfQ7qoJoEZSrzTcnCXvDxgEyYl.p8vLILQmxfNhG6dXa9F.MJfFPgmsMTYX1vQeLgMVq_czTB4YQehtS.8xAw4YpQLhT_dLmk8; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x200, components 3","md5":"8556d6dc310bf7bd6e709842c06c17cb","sha1":"276966b5dabb7ae82193a9cc570fcc547d54af5b","sha256":"1b951420cf1bd9fa9535bd94fe0d6815246e22acf87c22c566d7a27211db51dd","sha512":"4d547eee260e4d37d073d438952311756d33bc66c3315859a7e08476a8ab2aac9034205e033c0886fd72e314188846dfa99b71936832a4bc8a853d9853a16932","ssdeep":"3072:rJO19HLiC+dd6VZjRaSJQaAqxLoDj7aqqpB3u53Uem6KguR9sb/tBaEow:IFLbYd6VZ9x1LoP7aqg9amfnR9sDtBa2","tlshash":"1ef312f37e578256fe92a055ac909722b02b530b2ad31f2d1796c83cc753bd9cdc09a9","first_seen":"2026-01-23T13:26:41.536548Z","last_seen":"2026-02-13T06:56:55.246254Z","times_seen":67,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riangbersama.xyz/","fqdn":"riangbersama.xyz","domain":"riangbersama.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T01:17:04.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riangbersama.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 00:26:35 GMT","end":"Sun, 19 Apr 2026 01:26:34 GMT"},"fingerprint":{"sha1":"ED:E3:D9:16:93:A9:B6:01:D7:FD:6C:7D:60:CB:76:35:7C:C0:2F:2F","sha256":"A1:E3:EB:82:D2:68:3E:B3:ED:0B:92:68:B0:50:2D:A2:EE:BE:EA:CA:5A:E9:0D:7C:49:47:21:EE:B8:34:B6:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: riangbersama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=6436045f3e5ab02028cdfa6c48f501cc; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am8gFI6DyFmqNzvTjx3f9KOJKmCzAthBHh8FOtbp%2BySfQJ2clxk5fTLnLBAdJblNAoJuFY9jRtdJiT9sKBgXEghJKepwFYs7tjzz96ay\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c75d8c698fd56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"riangbersama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\ncf-ray: 9c75d8ca9cec5ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1284\r\ncontent-disposition: inline; filename=\"slot-av.webp\"\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=QiqtbGXgSQTxYoCYLX5g1IeWTs2CBw0ck4iJsR9VUuw-1769995025-1.0.1.1-wojGhhlT9d.vsPny8QhviW_xtQ9CbgWq0oivmMkUtv1w0xa0GZG6IMSr_30BJ1PmVmQxR9rQQU_d5IV81io37iNYXwfNQQEB2ZpVCv7zNIM; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-04-05T08:29:46.723425Z","times_seen":1817,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:05.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\ncf-ray: 9c75d8ca9d125ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5584\r\ncontent-disposition: inline; filename=\"fish-sg.webp\"\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 6238\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=uEfdFpJNyNfpiyVVDZOL1QC3wiEYNPn929rU63QDuHc-1769995025-1.0.1.1-fVjlU0uuCzt4Qnx14wV3QD7L8wxThRZ67fdTL49XXcy0qovH2O73lk1sKfNltLGk5bGSJbsBlklqhu0Mn9qg_7k103LRQfByiC9JAiRtQzg; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-05T08:29:46.779255Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 10:41:37 GMT\r\nexpires: Sun, 31 Jan 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 138929\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-04-05T08:54:29.209512Z","times_seen":12760,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":59,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"widget-mediator.zopim.com/s/W/ws/u996Pr3RTXoVeLdk/c/1769995028221","fqdn":"widget-mediator.zopim.com","domain":"zopim.com","tld":"com"},"ip":{"addr":"3.74.80.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:08.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zopim.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 10 Aug 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:93:B9:DD:13:2E:0C:EE:A4:26:B4:C6:D3:11:C4:2F:1A:05:29:01","sha256":"E7:75:E2:97:D1:39:4E:63:5B:58:38:67:C8:34:58:8C:F2:B0:46:77:0D:14:AE:69:EF:3C:EB:FF:68:A7:CE:75"}}},"request":{"raw":"GET /s/W/ws/u996Pr3RTXoVeLdk/c/1769995028221 HTTP/1.1\r\nHost: widget-mediator.zopim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://riangbersama.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6d20gxx1fs5LpVQdKYzWpg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 02 Feb 2026 01:17:08 GMT\r\nConnection: upgrade\r\nSet-Cookie: AWSALB=z5zNBxKwhJbcBA1zFjeWB7pGW7N5BfUBzJScVvDeGk4o00lBr0aJQ+jDjR6yMfsceuE34dPomLO8Bor/B+UrIRzrwO+nVzia4TCUaWy3Thw32nM2RQaWejAI/Nkv; Expires=Mon, 09 Feb 2026 01:17:08 GMT; Path=/\nAWSALBCORS=z5zNBxKwhJbcBA1zFjeWB7pGW7N5BfUBzJScVvDeGk4o00lBr0aJQ+jDjR6yMfsceuE34dPomLO8Bor/B+UrIRzrwO+nVzia4TCUaWy3Thw32nM2RQaWejAI/Nkv; Expires=Mon, 09 Feb 2026 01:17:08 GMT; Path=/; SameSite=None; Secure\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: lqe6XEjrzMm0Ah+oOW4i4ej5N28=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":113,"connect":133,"send":0,"wait":22,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/guidelines_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:06.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:13:07 GMT","end":"Mon, 09 Mar 2026 06:13:06 GMT"},"fingerprint":{"sha1":"01:ED:84:AA:5C:B1:EA:58:21:10:AB:7F:82:58:F9:0C:98:FD:A5:8C","sha256":"18:31:54:8E:C7:95:06:35:90:FC:B6:BF:AB:93:63:AB:F5:99:EE:F8:55:E8:75:A6:0A:9E:16:5C:E6:14:1D:DB"}}},"request":{"raw":"GET /assets/guidelines_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riangbersama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 01:17:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5784\r\ncf-ray: 9c75d8cb5df45ebd-OSL\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=11023\r\ncontent-disposition: inline; filename=\"guidelines_w.webp\"\r\nlast-modified: Tue, 18 Nov 2025 10:06:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 02 Feb 2026 05:17:05 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=X.gXRK1SSoyN2P5aEJ53iiM8aIIu_hRw26TX5AE_gQY-1769995025-1.0.1.1-hhH35.jNm23yatGkqDvZmbwfu8cx6H9N4n5m2IpsAyLRkfPOrS6eimGALMozY3S8fgwy9GtkwpbtabMEln8rK5l8zpguiYsh5A844zRRGIA; path=/; expires=Mon, 02-Feb-26 01:47:05 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7543aef645ce4dc56d6bf0dd3ec74696","sha1":"031c45ea8ca1e5189dfd8a20f831afaf06d22009","sha256":"fec9b9a1d71582fab42a96c1ad78513dd42752c3e646a2c76f32aa781306f4c9","sha512":"50a658008235a3b74da8fe0af03167271b297e69b30ac29c31cbfff474731babfe3f983e4c9db1820eb388f04698a4eee51428e22d81f0284bd48d990ab0396f","ssdeep":"96:5QmHt59cRr+EKDuSqSnp8k4CB0HqEX1g4qw1fkAtKv26VFIALTmNrWZqVpc6oUEX:5QmHt7ckdDP8Zm0zXpx564AXkJCjQv9q","tlshash":"f4c19e883cecdb49497e2b368cb3499add19c5a221cdd8dc0b5799291daa31903e6d0f","first_seen":"2025-11-20T06:31:59.765505Z","last_seen":"2026-04-05T08:11:55.858354Z","times_seen":183,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riangbersama.xyz/","date":"2026-02-02T01:17:07.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riangbersama.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:17:36 GMT\r\nexpires: Sat, 30 Jan 2027 13:17:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 215971\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-04-05T09:20:16.188321Z","times_seen":6986,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
