{"report_id":"461941f0-6e5d-49d1-8567-736cecc5ab23","version":6,"status":"done","tags":[],"date":"2026-04-19T12:15:47Z","url":{"schema":"http","addr":"nagalangit138.com","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":0,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"nagalangit138.com/","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"title":"NAGALANGIT138 : NAGALANGIT 138 Uji Kreativitasmu Di Roblox","dom":{"size":189698,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42605)","md5":"9ba3725b077a80c731b01ed49dcdcc43","sha1":"694ce747e013b827651bdb6eb790e017fc121c09","sha256":"de47ce8f74e12585ebe84468c4588d18c55b89a139f37d3aa61b474ae0222b41","sha512":"a533e8c57b39ff147740cb4e43dc97f92299f3e279afd16285a0bf4cb097edc542cf350e35adef0d71ac27bb9ad6bbdd248a450f8828a5e65de7fbee252697d1","ssdeep":"768:9hYWk5F4g5A4WR2vm+V1HtyQj6zhi2VMnUYvtRhFU5JZCruC7LYZFU4mzLzxZxEu:AZ5F4g5A4WR2vmc6EBQoPEXoy2","tlshash":"3804c662684d015f6557c341a1f8f6ab9d54cd0fca319a89f8aeabcccb40f42767a31c","dom_hash":"domhash27e485371d07b37a24529cfd5bade9ab","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nagalangit138.com","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":0,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T12:15:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nagalangit138.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-22","domain_rank":0,"first_seen":"2026-04-19T12:15:49.74041Z","last_seen":"2026-04-19T12:15:49.74041Z","alert_count":291,"request_count":97,"received_data":2087011,"sent_data":47435,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-04-13T11:11:59.825186Z","alert_count":0,"request_count":5,"received_data":340593,"sent_data":2322,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","size":12361,"data":"","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-04-19T16:35:03.097232Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b12ea4a5e5ddcefab1d262fbc0d8b2","sha1":"bcc63b9b719ee9ec94c0859d4e9876f05cef77a7","sha256":"e8a02555e6fe00cf4382691d569b602f62a67b6fffa922334f4348f2782b61e7","sha512":"bf62b120d5b5ad6b8dfb44e98ed42b9cf9f04719b18433aff98fa4b4e079f4a9c2bcfd3dc5d611710d184f32cba77187a56370ab76815ca4c7f8e680db0f7281","ssdeep":"","tlshash":"4971b8b872c5b5365bd63cd2446b5405fa3964363407c868b168dfcf293a85624b6f3c","size":3802,"data":"","first_seen":"2026-03-18T09:15:17.862394Z","last_seen":"2026-04-19T16:29:38.41029Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","size":228175,"data":"","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-04-19T16:35:03.090519Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"378e19c639fc5eb26999204f145d6e87","sha1":"3967539a257b804710a39f669733ccb0653c16ba","sha256":"d3cb5ea23badbae7dcde8f720c7f8af543ae561eca84afe9f87936920aad9a42","sha512":"1abb62b8a831f13ed1ba0a5069207ea5bec77eed2e353c4b7b216e3a52179bbb728516499d0ef4ce0320ebfa9a24d18b477b723717d11de7e2e5942b864aad70","ssdeep":"768:OXCnqZrZK6LtckYVUCKeTDTfr8UrZLHc5Ql0p43fHLt+9TlVcAPnK07+hN0ZXrda:bq5dqLAUVjcw3zVKpJ40zQyU","tlshash":"a213d9b17282a43647d608f684367016e32d2956340ac8ecf1aceec77c77955b2b9e3d","size":41951,"data":"","first_seen":"2026-03-18T09:15:17.846899Z","last_seen":"2026-04-19T16:29:38.408501Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Anime%20Mecha%20Megaways.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Anime%20Mecha%20Megaways.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-casino.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-casino.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"2116-68fc85ad-27cb068;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2899\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3f6db64f19005491ec2f3ccec8a4957","sha1":"02cddda4df6cafa00b756eaa9094b808946a98f5","sha256":"1682180332236ff6d603316b2d09d1c467523dca0729d7653ef121518f3b2d29","sha512":"340a586c601ed1cba203e45ac120d1b21e0d29ab1358dcfb4a1fa5fdfaa682e582bfeac42056ef08df7ed07e2b7d5c70b568744348c849e7b0bffbcefe26315a","ssdeep":"192:dYpgRwmUX9gg1nlu7f7sQD2HPP9nSvBjJ9h0N9jeG:dAh7qWu7fjD2vP9EjQJD","tlshash":"1a0206170302dbdafb9d4628a929148db5d0dcdbd4b0e0d0ab6b3416e58d8e5be4c7bc","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.391989Z","times_seen":1324,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Dragon%20Gold%2088.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Dragon%20Gold%2088.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"138e-68fc85ad-6916fe4;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5006\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7837fcf1578874dc842961b524b29f13","sha1":"d6085a94c2aa7c79db78b48d98003ebcfd2f3223","sha256":"c876dc159134cb3e2439650a7a071f34320fa9521049df5a1a715442a8d32c68","sha512":"f5085963a0f2650c4555c59b6f4fd1231134fd83a0688d744a6be380f0320a65f00a93a0bc1858e0b93ab7576d15e6f801e9466a2bb78b9471cd7d9091ef052a","ssdeep":"96:Z6Elbw+idczVHCWeo/D+zAmA7tQor+bqBAd8tUOxBK/HjgNmkYM8S7hCTCwh9VH:ZfwpcpHC9iD+zlbqB4EUoBK/H8g5qD+f","tlshash":"c8a18ef162330736d68b3abd878b524366e93d01b527442e81890b779f637c92d4f68d","first_seen":"2025-02-11T07:00:30.788696Z","last_seen":"2026-04-19T12:15:56.393918Z","times_seen":151,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Rooster%20Rumble.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Rooster%20Rumble.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1b60-68fc85ad-48bab19;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7008\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b98f2d464af3a9acf1d2ef2106413bc2","sha1":"55b85bd82cf7c54429715b458adbca516df9460d","sha256":"b0226ab531a2b035a82b5dbda4046d8607cd71fe5a95278f56762b560cf81c73","sha512":"e21a9aa9800eca1aac274f37446cdd59f7783a268c415086d4bb166f19e66f66101e9228234e7435ffeba289839430af33a303324d52979b29d099a1ceabadbc","ssdeep":"192:jfwd/snBW/J+tN/XrAjv1+yJIh77hUXB5IavuCD:jfw5uWxc/bG06SFSI2ue","tlshash":"bde18eb7d6865600c48b82f490c267cbb35235aba552ef0bcfc8482a75296cdf34f941","first_seen":"2025-02-11T07:00:30.783714Z","last_seen":"2026-04-19T12:15:56.395583Z","times_seen":214,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/cq9.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/cq9.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"ede-68fc85ad-48bab1c;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3806\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"bf1d52938982261ddcc79fb95c2a67f4","sha1":"f51ff53053d641f7cf4bde754fc958e48d682656","sha256":"c919e7e1680f99113b1a2d673dd57218002ba9ca1b020c51d5aa035778038ff7","sha512":"0d5e74d3d48092626a8c2cee6fea119b29efab3fdf5aebcfa3a61c26dc02cd7ccdbf9e7655cfef3b9effa0fb9497338516bd8e03a85680f100bc286aab7eae7f","ssdeep":"","tlshash":"85716b68e6422841968cf5d6a4a81c637d2f00400b90e930c4dfc46a3eb6ab14b9d6cf","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.396967Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/sexygaming.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/sexygaming.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"14c1-68fc85ad-48bab25;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 5313\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"c5aee88302f1236b8cc069d281a05905","sha1":"048d3123ca73c3f9f4e432378ea4cfcf467de417","sha256":"ab8a18edde422524883a5beb8842c4008f032de7f45601c2b37d7e40be19ac98","sha512":"7a18e0b8691f451f47dd0cd7a91052abddc353e332a9a19fd00dd2e01ea45a2565bf23eb170fd940e989f12adfb78a18cc8cb9ce9d8c136665eebf3e7611fa7a","ssdeep":"96:aqQqwG/92LyPMnYMuvdjEnGg4aD4Hn468sZTbZCzN6idRw:aqNrwyUYTdjCg468vdO","tlshash":"22b17d99eb1b58817e6aeca23cdb0bc385069082a415768b3ff784af1ca5155074f9ca","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.398397Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/sabasports.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/sabasports.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1269-68fc85ad-48bab24;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4713\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"1f3020b661a06afe96a458859c3c7cff","sha1":"1a2bdc2e90543265d04d42670522c53105f5acbf","sha256":"ff82fe6d37d4c0a8714b16d18ce5d08f75968e686e1b71c30a783124f7dedc59","sha512":"2da36480856b22b46cc5b39f81ce86787b0ba260b9ebece4a715075c9bb48dbb90acd45b524ed317564f3f9060071ed0ff1ed454aa86a3ca935d018e015541eb","ssdeep":"96:aqQ+8/tARsjA+dRXr2zC0kyUh/jIDuseHh46WMy8HOM9TORnAy:aqz8/OejA+bXrO3ky0/jseCZMy8HOMmh","tlshash":"c1a17d0cf75eac09354268c230f9914399500df4c86a902af504ecdb2ab83f9ca9e5ef","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.399548Z","times_seen":1161,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/uploads/2025/10/cropped-Surya-Favicon-192x192.jpg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:25.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-Surya-Favicon-192x192.jpg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:25 GMT\r\netag: \"21c2-68fc74cd-257a68e;;;\"\r\nlast-modified: Sat, 25 Oct 2025 06:57:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8642\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x192, components 3","md5":"ec4088cfbdf36fed1efa07e3105bcd92","sha1":"79bf62b27c3b2c7b5bf56c7c3f80ddd547e9156e","sha256":"08eb42a615011af3b6517bab08982dc03e30d51f4bbb72f1c6949af9093e5c51","sha512":"97bcb01bc626c6ae9e924b9d1f8f74c06c13353bc789e43ebc39bd72620547650049acc18668d5664cde415b4b08f1d8816118be0a7b67d03c84c8212e62903d","ssdeep":"192:TqyGuE2Be/6Rk+/UcpSEgHOYYNHeaV2RA+o1Os1wxgAC8fkIHC:6uEFmXpg4NHoRA7Os1wxgQ5HC","tlshash":"37027d499bf36b4bd809cc3aa432bba47741e8986017bea45130dc6d92b5ccdc60ab35","first_seen":"2025-09-20T21:55:27.833576Z","last_seen":"2026-04-19T12:15:56.400661Z","times_seen":71,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/digital_sans_ef_medium.woff2","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff2 HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"427.6\",amp_style_sanitizer;dur=\"261.8\",amp_tag_and_attribute_sanitizer;dur=\"139.0\",amp_optimizer;dur=\"24.4\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15971\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}],"data":{"size":163522,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"71126465e518b4dfecd576dc35c76880","sha1":"7a4d51b558029314f06ef4bf165e910d74663675","sha256":"691617737dc24d77876ede9412030530b408d823c96980e8d155730cbc6fc036","sha512":"319375ee639f617892a91a61cdf626080d97e7f0e3644756b3645b743a271aa5d495c1ecd01565024571fc33131207c4f050bd2df7c9ba0dcf6011aa1d36f776","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUhcp5SJ6xjEXlWmAMAEMmYG+UP:PZ6RqoKfsEXQyT","tlshash":"a9f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.401577Z","last_seen":"2026-04-19T12:15:56.401577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Chest%20of%20Caishen.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Chest%20of%20Caishen.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Nexus%20Koi%20Gate.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Nexus%20Koi%20Gate.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-whatsapp.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-whatsapp.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"501-68fc85ad-27cb077;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 685\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20b4ab5a4777e715525f59915120cc49","sha1":"e2433d4b70dd2c1636c613fe5d8e9c019423ef29","sha256":"0db788251d2558d029d2873096b3faebb0d5c8381d23e67b12926fe4032b2751","sha512":"c155bebea1e2e02d911e68d27130833473e493df80aa74261a43e449af53b36bf2d362f23644a07010e16996caa2049809ccbc34ca952034d7a8e4b1d5f7e440","ssdeep":"","tlshash":"aa21bb59c3550b32abae075454d4186435848dcc64e835fceb2b84a1f46cff960563ae","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.404808Z","times_seen":1044,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-populer.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-populer.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"dff0-68fc85ad-27cb06f;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 43237\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.406268Z","times_seen":1235,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/fa-brands-400.eot#iefix","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/fa-brands-400.eot HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"359.0\",amp_style_sanitizer;dur=\"206.3\",amp_tag_and_attribute_sanitizer;dur=\"143.1\",amp_optimizer;dur=\"32.7\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16132\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":163511,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"79817534deb8289f21915873e5f5ad05","sha1":"6228a82b19890ead496597e7fc912913cc8521e6","sha256":"43281fb018893a92a33c2a725d665afb6fc42e5e3bec6fd5f575b7d4ec16e9fb","sha512":"20b58e1b896383b99242a7cfb78ef6d5c934a10b0eab6c96688c41f8e78e3af9876fcd4c5bf6e4b81374a75a4fabeae0ac37a65f1d85b317ca22e10714af7bb8","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFU8cp5SJ6xjEXlWmAMAEMmYG+Uz:PZ6RqoKCsEXQyv","tlshash":"b0f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.407439Z","last_seen":"2026-04-19T12:15:56.407439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/fa-regular-400.eot#iefix","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/fa-regular-400.eot HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"382.6\",amp_style_sanitizer;dur=\"248.7\",amp_tag_and_attribute_sanitizer;dur=\"106.3\",amp_optimizer;dur=\"69.4\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16029\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":163512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"d485abd4ef4027063e01281e1821497c","sha1":"4253a483a2032571fb3e7ac4c14872f33d60c9f4","sha256":"605ee481b0387bc7eafa0a3a118cfa8c4c1c5cbeb233158bde615df99fe30d17","sha512":"8c0329a2a3e3581c6e05ecf8c22e5f53484c70e31d2fdae10cd2ce0c98f79fa53717ebbc73f894c9770fd312b2013509396771f852d21b574890becec9087019","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUqcp5SJ6xjEXlWmAMAEMmYG+UP:PZ6RqoKgsEXQyT","tlshash":"31f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.410956Z","last_seen":"2026-04-19T12:15:56.410956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/digital_sans_ef_medium.woff","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"306.2\",amp_style_sanitizer;dur=\"148.2\",amp_tag_and_attribute_sanitizer;dur=\"149.1\",amp_optimizer;dur=\"22.3\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":163521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"2b39bb77b6f66f55ea415757a8cb8b3d","sha1":"53e4a5259e736ab194bb91b8293261d6bf30ef93","sha256":"32d8a8d1b5c4376353592e48495e62d31a21dc73f9205249c383992f36f0570e","sha512":"a492d01bb00d32a2a7d54e429f91b0fbaedfee52f312c63fe6ecfc1ff6da727b5aacd3520b8a51c088048b03fd8807ac3f5193c5ea33e6635fb25baa81b8b6bd","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUfcp5SJ6xjEXlWmAMAEMmYG+UA:PZ6RqoKtsEXQy8","tlshash":"29f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.413262Z","last_seen":"2026-04-19T12:15:56.413262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/joker.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/joker.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1173-68fc85ad-48bab20;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4467\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"d6046ada089141ed514a2c248ba348a9","sha1":"ac6af3ec4c8d0025c3498501f0b5ff169f50fdab","sha256":"a5894ebe20a0a276641ce8fe77f073ea3127a35e307937d00d46606a6d07e5e1","sha512":"9bec604475449cfffc72317d9ece25fb7ec460b1f463d288052c6a436d26848116b60832425da59d040aa1f43ed4964d575442480231030d8e797a89daa3a494","ssdeep":"96:aqQRGY0xUhfkh08d2luU5IqeesF93z/mc1MYtWum:aq+0xUS2U2lueny93z/mcyYtWum","tlshash":"fe918e58dd037e0e5d5e0a9230e85d9688bb8502deb4b81e78d7c2cb42f8166c85f6f7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.415436Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-togel.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-togel.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"6d2-68fc85ad-27cb074;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 670\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7dd23ca632225a90b6125dbcba400e0","sha1":"1938013a08d268e18e53fbe0529e0753445d1765","sha256":"452d0d167be6ebc49bbd48f064efd89fe8e47c5e153df1fb0689264f46ed90e7","sha512":"2ff7a8a2e3bd2de789f7b36e3700d533b5edd89b8fc1888391fafde5396536f429ca0b3a4df1a859ed0fef25a2893780c1c274a05159950a1e39247892cdf202","ssdeep":"","tlshash":"0331543aebaef5cd5b8fc7040a57524007cec1fa3276e5b28e4e9934c1539b2d2a7940","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.416404Z","times_seen":1325,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-new.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-new.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"7ca1-68fc85ad-27cb06e;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 23782\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.41731Z","times_seen":1491,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/shopeepay.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/shopeepay.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a19-68fc85ad-ea351b;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2585\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"410210f0e9a527ac10a6edce706a3e52","sha1":"41ac0fbaf4e303490de0da44bbcc2ddf0957d93a","sha256":"b546d30527e6237059995da8fa60d0ee5b99a8a1beaf0d9ca885323926d9dbf2","sha512":"7e6134ee07e54cd0800c5302d78a289b304b13641649ca46f4faad5df1966a49aa0202390cc06398a7c7a740fc84bf41b17b26a098d11b2d19424412241703e6","ssdeep":"","tlshash":"a3513acef606a90263dfed0834d79413c9036ec4d3f6e072d58ad44614a82f9a9e99d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.41983Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/jenius.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/jenius.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a1a-68fc85ad-ea3514;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2586\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a526cd682aa74c97bdb4e9062dd3bb47","sha1":"9a576b670aa5ff27c5377431444a5b6e6fad059a","sha256":"887520873e323d8af25fc9ca54158e474139b38d78f0ae1097ba0bd27c09084c","sha512":"bd14d5c0424148137d6093f709b8a22265701ebeae2345415449e022c52f28e3f01e1709c06df9becfbf8af1a28539c6d60ddb0d0b828a4d70762e408f24ba02","ssdeep":"","tlshash":"5f51e729d445af023a0ce44724fa817baa0785c0cfe2f12bd58fd5372d647d999991cb","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.420802Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Trial%20of%20Phoenix.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Trial%20of%20Phoenix.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-gacor.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"1def-68fc85ad-27cb06a;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5154\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.421768Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-livechat-gray.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-livechat-gray.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"32d-68fc85ad-27cb06c;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0af3bfd49ffc5ae11ba860786cda75d","sha1":"c598e7d6678d0fc928d2c6eaeff83f0b5311daff","sha256":"d1e72ffd39a829fe41c1a53795d8418fea166a070252308ea1098b0b7c2f74aa","sha512":"c65e0fcccaabf7def73e8618cfaed9eeecaf4a47698b732c3d185fc7397c9572d1375600545deddf2bd57aba69ef1049ff28142d2aeb861a3774ad0a0072f356","ssdeep":"","tlshash":"e8011ea8cb38cab0e14c1b004be8271335b10422daba9c0c43297d85e853e902005cae","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.422581Z","times_seen":1207,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Piggy%20Master.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Piggy%20Master.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1a7c-68fc85ad-ea3522;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6780\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9913a5cc3412af6c79b4aee9adfaaaea","sha1":"fd29767f27f033d8467b588e0402b5940eb70e7c","sha256":"8ea647df01d95bddd2cbd6f7311b32caea9e176ab6c477ad54c88ef1b3b2f572","sha512":"8bb30f19cf96bea59ae93d432f725ba3712d83d1266fd0c5004c12c650a72c3a259a2b4cf4752e54727bcb7c7ac842fa9cb6790806a5e9a84e35006678895741","ssdeep":"192:6fws/B8cOGUX7108RBX2AbFlwLpuFoPxrg+i/OS7D:6fws/KclUX710+ZrcLpuQg+yOOD","tlshash":"9fe18d783290155ce35d0bf6c5910a2193e7b86382628f5ac6b0b293cbdc3d6239db22","first_seen":"2025-02-11T07:00:30.793488Z","last_seen":"2026-04-19T12:15:56.423311Z","times_seen":158,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/habanero.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/habanero.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"b6c-68fc85ad-48bab1d;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2924\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"6fdcf2c4077e1a01c1387becb47eab76","sha1":"9e644b73bbfbd059798cb3f38a50afbb6d51c947","sha256":"063b0b0af325dd011bb3cd4f69e62c3ebb3e2a8033a9f255552a1ee6a47cc842","sha512":"0519f574e77eeb96f2b534b554d6e52300fdaa50c27711e3674e8b22400534ddf89a3a2e2d029b3e455f98423d4a1433964cfc05abb7ba29d32425256e1fa9b1","ssdeep":"","tlshash":"8c513e4cbb83da0ca18c7b521cf65106a71385869c81b8b4ed4fe40f4c70aeb5d5c9cb","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.424038Z","times_seen":1180,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T12:15:21.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://nagalangit138.com/wp-json/wp/v2/pages/13\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://nagalangit138.com/\u003e; rel=shortlink\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"361.4\",amp_style_sanitizer;dur=\"223.3\",amp_tag_and_attribute_sanitizer;dur=\"123.7\",amp_optimizer;dur=\"40.8\"\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 17051\r\ndate: Sun, 19 Apr 2026 12:15:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":166179,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42558)","md5":"c3689d241336480cbdd742418991268d","sha1":"ea1f7987bb6b07ac1d6e77a9761d7a3a9a409cae","sha256":"d4ea1c0a9dcabfc9758a652abd11c451095830a9e4aa11e29e3aabd284f69cf3","sha512":"2059797881972223cf02f7443f40a0f063e6ccf8258bfc90973556914f959b48bdcae6103b72fd7871e2c63cb01352b690cf54b6da71c8274db3243e733b73a1","ssdeep":"768:EhYWi+u/UXyCj6zhi2VMnUYvtRhFU5JZCruC7LYZFU4meJ6xjEXIWmAMAEMmYG+h:7Fa6EBQoHEXNyy","tlshash":"7ef3b563284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41e03763a31c","first_seen":"2026-04-19T12:15:56.426341Z","last_seen":"2026-04-19T12:15:56.426341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2490,"timings":{"blocked":967,"dns":401,"connect":277,"send":0,"wait":278,"receive":278,"ssl":286},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nagalangit138.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63621\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nexpires: Sun, 19 Apr 2026 12:15:23 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"1fb0813db2f9ea66\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228175,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-04-19T16:35:03.090519Z","times_seen":411,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":149,"dns":65,"connect":8,"send":0,"wait":41,"receive":32,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /v0/amp-anim-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nagalangit138.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1675\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nexpires: Sun, 19 Apr 2026 12:15:23 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"abff27f00e178db5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3688)","md5":"55b12ea4a5e5ddcefab1d262fbc0d8b2","sha1":"bcc63b9b719ee9ec94c0859d4e9876f05cef77a7","sha256":"e8a02555e6fe00cf4382691d569b602f62a67b6fffa922334f4348f2782b61e7","sha512":"bf62b120d5b5ad6b8dfb44e98ed42b9cf9f04719b18433aff98fa4b4e079f4a9c2bcfd3dc5d611710d184f32cba77187a56370ab76815ca4c7f8e680db0f7281","ssdeep":"","tlshash":"4971b8b872c5b5365bd63cd2446b5405fa3964363407c868b168dfcf293a85624b6f3c","first_seen":"2026-03-18T09:15:17.862394Z","last_seen":"2026-04-19T16:29:38.41029Z","times_seen":212,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":144,"dns":63,"connect":21,"send":0,"wait":30,"receive":1,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/ttg.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/ttg.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"c56-68fc85ad-48bab27;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3158\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f177a8c24f7d00627f779b1544f26d7b","sha1":"1f88ae42b70427e917294beb790bda84321cd08c","sha256":"2c7aa701640a5b7503e3ace14124357537d5698ad832c1217a7c3290ccb64372","sha512":"dc8232386fc9dc22e3cebe562d6c708aa078294ea16f30b4d0d8bf1349e0fe743d9a8b3a7f287732f46e8eae0a60e2f2b4674298bcbf78b7fbbe20d4eb5d02b2","ssdeep":"","tlshash":"66511b52f65a6c4255eda08478f294338a3305120a54f0a5d67b484b8d8b3ea77cdaee","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.433914Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/ovo.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/ovo.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"90b-68fc85ad-ea3518;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2315\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c651afdf017b6e14b8ccf644fffb90e3","sha1":"cdefc9ffd4d0a101dd34fa8d0d72f31e20c203be","sha256":"860d314b9b8e36b5b22a81e02ea6d13290d85203ecb2e0ee3803ff5115ded872","sha512":"fc639ac833e9f4f15c6238d0c39ca5753acf20769db0a0a204a1554cfaf5fdb6bdcd75ad8f4fbb3643e9b11a9979548f9d4d6794eab648a875a202e86a293c59","ssdeep":"","tlshash":"d0412b46e6929d06079cfa9164e702bad6610f90e4f0e82b749ed40d0fe42fc6a6d5d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.436229Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /v0/amp-bind-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nagalangit138.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13885\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nexpires: Sun, 19 Apr 2026 12:15:23 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"9983d640b1fca272\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41829)","md5":"378e19c639fc5eb26999204f145d6e87","sha1":"3967539a257b804710a39f669733ccb0653c16ba","sha256":"d3cb5ea23badbae7dcde8f720c7f8af543ae561eca84afe9f87936920aad9a42","sha512":"1abb62b8a831f13ed1ba0a5069207ea5bec77eed2e353c4b7b216e3a52179bbb728516499d0ef4ce0320ebfa9a24d18b477b723717d11de7e2e5942b864aad70","ssdeep":"768:OXCnqZrZK6LtckYVUCKeTDTfr8UrZLHc5Ql0p43fHLt+9TlVcAPnK07+hN0ZXrda:bq5dqLAUVjcw3zVKpJ40zQyU","tlshash":"a213d9b17282a43647d608f684367016e32d2956340ac8ecf1aceec77c77955b2b9e3d","first_seen":"2026-03-18T09:15:17.846899Z","last_seen":"2026-04-19T16:29:38.408501Z","times_seen":257,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":161,"dns":64,"connect":21,"send":0,"wait":57,"receive":2,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Piggy%20Master.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Piggy%20Master.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-beranda.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-beranda.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"331-68fc85ad-27cb067;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 444\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae4748bb18effb78dc6d98f8d909790d","sha1":"fafd86eed959576a9175425578568aaccc0b4a71","sha256":"e674d994d3f0106f9d9603e4649fcd1927778b37542752c43f087c01b21fb008","sha512":"dd72ef50dbf2156f2b976b4b478e018d92d88c0005b6fdc394ca443fa3feb8aec149d10c28808442673d58e2c9326fd8cf04eca38372da27180c305524f785a7","ssdeep":"","tlshash":"4c01ab3343c90e39c9681718d5f419513189ccfae2b0a5e8ea83681ad94dd6120626be","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.44076Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/poker.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/poker.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"d22-68fc85ad-27cb079;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1325\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b47d6c3d3d9869f7a93148f2bb1c7da0","sha1":"be17a0cb99f9962c049f0c7700933170acf83dfc","sha256":"fcc48a6b712772a6e13ef3cc8d424ed90762dcf9c41333c396e40a8ffcc355e5","sha512":"5d19d0789fd42e9eacbf8421f894dfa7269b8289018c0712e66e711fcd090e915afaeab197dc35517964a320ba4d8e3df657a709151ca1bf29185b6a3ff78d51","ssdeep":"","tlshash":"c861e66703169bdef79d4624a924148db6e0c8cba4b4f0c0fb2b3416e4cd4e6bd5d3a8","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.441527Z","times_seen":888,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Badge%20Blitz.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Badge%20Blitz.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"f10-68fc85ad-6916fe2;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3856\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3387b5d64e98faae4de3c128c538765","sha1":"656b8639e66a1a4aad6ce334cdbb00b7c3045ac5","sha256":"d7eaa3588effc3b0997cf54318f83d7b696ddaaecf26458bbf667dba2cc93327","sha512":"8461d31c78819e527ea96f20ef0f96f21f68819b3cc72463ce8854b3fef6501d4f12ec2612f2af4b72fefae98b061655624256975446e897208a58dea5d813c8","ssdeep":"","tlshash":"9d815c68a76ce3dee3663e7471c40bd33174cc395bc3668e5143021e152beead4ae582","first_seen":"2025-02-11T07:00:30.785852Z","last_seen":"2026-04-19T12:15:56.444309Z","times_seen":151,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/xl.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/xl.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"99a-68fc85ad-ea351e;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2458\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"84094baf12f6cd3d4d8cf7557478370f","sha1":"6adfff2597d1986ca93211709d92364b7f31994f","sha256":"d64a7c2b38bd2b08c842b2f714e402f0ee9ed9884171a6e1e95f57cd57ccf748","sha512":"dc262d4198e9b38b9cac4987ac803b9ec8e2466510793608869213a56110a44f696935d767fa4ddebd00873886715bb784ff039fe24fae0c166530cb14e90849","ssdeep":"","tlshash":"9751f80da68218158beb99c106ea40224f064f44ce84e0e7b44ed4665ab42ec6dad9d7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.447761Z","times_seen":1067,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/advanced_dot_digital7.eot","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/advanced_dot_digital7.eot HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"353.4\",amp_style_sanitizer;dur=\"233.4\",amp_tag_and_attribute_sanitizer;dur=\"88.5\",amp_optimizer;dur=\"22.8\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16137\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}],"data":{"size":163519,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"1fa32e963f6eacad888f56a139031417","sha1":"341a711e5f08d231a0f2d635f23119102f4648bd","sha256":"bdac9e54565f3c5c4a74e375b5298824ac3eeeb2db63cf3c274e84f82efac13d","sha512":"43d0c04f5e530882845b605206a4b8f3ad565f1651901c9f2fa3eb05a8e89ccc7a06cac4c080adfa5c04bef80aa5c91ab1f27ee33735badd641461436589462c","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUlcp5SJ6xjEXlWmAMAEMmYG+Uz:PZ6RqoKHsEXQyv","tlshash":"dcf3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.449875Z","last_seen":"2026-04-19T12:15:56.449875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/Lato-Regular.woff2","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"409.1\",amp_style_sanitizer;dur=\"245.3\",amp_tag_and_attribute_sanitizer;dur=\"137.5\",amp_optimizer;dur=\"29.6\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16131\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":163512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"55e7089ccdbea1ef51fe2178b5eeb500","sha1":"d134fa8d3bc283d13c916124d4ed467ddc9ba1fc","sha256":"9df111484826419f1cb37689c2654407e7c99c7be617f7eef671580672d7c27c","sha512":"5962dcb120e5d9dea8d274dad9d4bfcc78948ea68bd4ede92da0177b679d6ad1f0955ceda80065142917dc614ab8af3bed9379f56db81ad343796a3ee1172fc9","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUMcp5SJ6xjEXlWmAMAEMmYG+Uz:PZ6RqoKasEXQyv","tlshash":"91f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.457962Z","last_seen":"2026-04-19T12:15:56.457962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Revenge%20of%20Loki%20Megaways%E2%84%A2.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Revenge%20of%20Loki%20Megaways%E2%84%A2.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-telegram.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-telegram.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"22c-68fc85ad-27cb073;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 333\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"193daadedfb7fb6a571634dee8c819f1","sha1":"8d5cf7a9247264f324a01fa1d29b6ce6581a2622","sha256":"b1ddff6d40894a418ca2c4742a6e467562d92162fe293cc72e227063f6def10a","sha512":"ba10d810af36d70c542d5e23257f03eab91eeb11acdf8308a0da23e9c0cbc60d7d42f0289978639ff6fb4bdcfdc38b1b34898de36ebae5b1ec933c4ab770878c","ssdeep":"","tlshash":"71f08b29d2080a33a74f06b96bc0b9a524c4d589e8d83594b0572972b42efe1702b3ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.460765Z","times_seen":1044,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-slots.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-slots.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"872-68fc85ad-27cb070;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 846\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef0e4e782cc54cb0d60cf0527e048f93","sha1":"c500e4073082982156fa0be7ad7bec3bfdad87ef","sha256":"8815a05be68a8b3badb9c9249133856d872cd28732fb31f413281d4fac259aa9","sha512":"49a3ef902d5bae46b6a7a99d60fad3a021ee03b3104e8463ccd8fd4509400a3a73f8427168a7d0fae46363285d71ea819898ea8e328ff072fbc0e426acd45d2e","ssdeep":"","tlshash":"fc414a3b03039ddaa99a8f605a39258875e0dccbf87595d4ef1b3826e18c8c27d6c394","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.463691Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Nexus%20Koi%20Gate.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Nexus%20Koi%20Gate.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1f92-68fc85ad-ea3521;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8082\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f64ebc5445f4132f1066b4671bbccdcd","sha1":"c2ba3cc9acba75526b64ebde4d015f6e1958e4e4","sha256":"88043d8125e1014d4ce09ad6c493b55156b09c05918092d23c774e11f9b706a2","sha512":"9ca4cec7da2781d7ea93298504e2e4d7fe79b4c9c58d4d057c90529358209cd003b456daa212afd66b4576bcccda2de7fd248f2b8d4f303ae19db0edd249b388","ssdeep":"192:ZfwnW5aJcesX+TjzOBHSaez0J/xDIdAqy28pwn0d3zk3ZLdU:ZfwW5scenjziEz0Gv0pwnezedU","tlshash":"69f18eba9b10cb36e5ed1bf460e14f53653cf832e1b9b685f459004bad884f262dc6d4","first_seen":"2025-02-11T07:00:30.780358Z","last_seen":"2026-04-19T12:15:56.465389Z","times_seen":171,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Mr.%20Hallow-Win.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Mr.%20Hallow-Win.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"3df0-68fc85ad-ea3520;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15856\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53d45cec9a39c5055f31852445da38d9","sha1":"5617da28035f1a5659b7acb9b40fa838b51d8ca6","sha256":"5f803b8857abdbc38c2c5e1064993a00b7bccd52ac6bfc028cdaa830f6d2e207","sha512":"de82388e637d85183cec7910b328b70df9afa2c5a877cac2a196d0dff504035823a79400e6b35d168151b0a3f904e2ca53dead2b2a60693561fd933d8aac5d76","ssdeep":"384:1FYNg7wFLlxFvYg+bLmBUU4Es4qYZ0zQhkOOORlN:1FYyUCfmBKG8ZOOOR","tlshash":"5e62e13b97daa79bf4c3fe744a603ba423537338872365193bb49632475119a1acf017","first_seen":"2025-02-11T07:00:30.795352Z","last_seen":"2026-04-19T12:15:56.466819Z","times_seen":155,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/maybank.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/maybank.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"b4f-68fc85ad-ea3517;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2895\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ca7aee98071b2d3880f94ca3dc8842d4","sha1":"eee1e7f874e610c4facdd9a8e3002b31a90af582","sha256":"77173f10f7b5dad589d402a81d207260826935ab02ae7cc52f7d9298f6a38eb1","sha512":"6a4850a3964c179cb5b567ed7e616330dd83581f2da688c8345274a25f93d195607f104da1cd8f6f10e3ecf1f3b5856fc33ec05d31ae454300ce89955a2aa583","ssdeep":"","tlshash":"43512aaceb10ac44936dd54019caa63eba334ac0cae9e1da314fcc045b911fce41f2c3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.467867Z","times_seen":1056,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Dragon%20Gold%2088.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Dragon%20Gold%2088.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Le%20Pharaoh.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Le%20Pharaoh.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1d28-68fc85ad-ea351f;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7464\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b03e76f0688b902f067266753ff1253d","sha1":"4cdb3f6fc4cbc5cb5c11a4848a0b18393c4cd549","sha256":"3d69bb8fef409a90cbb5e5e36ab087b0498a487bfbd0c577e520375a12b38070","sha512":"bbcc103a5228f30b8931f76294240fe3e9a60547945cf6d76a37b0044e81e4f162b89aaa360503850307a4c1245b106cccc552ff0097c209f0e3bb2801236b11","ssdeep":"192:dfwjaXfiT82D5W5yUvin0sm+IlWyCxoYaTZVhrZTVe+:dfwWXd2D8520sa5CxoYaTndZpe+","tlshash":"02f1af64631cff6cda2077f4570d0e0780adb038deda8aefd60be54993c58a2996b147","first_seen":"2025-02-11T07:00:30.792482Z","last_seen":"2026-04-19T12:15:56.468676Z","times_seen":158,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Royale%20Expedition.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Royale%20Expedition.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"19c2-68fc85ad-ea3523;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6594\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"375201b84911bfdbc1e52460f9683e57","sha1":"79bfcecdb4cfb64f7c6f3769910e41faa3ed8723","sha256":"af16c9b1f5ac120e8b1e52c0f37a91e46d874209c56cd9080db34c80b500feb4","sha512":"bd7c60e25725a96989a73ef7ac0cdd4991b18398062e0eed74c079b2a9ecfb358029e3c848863fb61cdfe200808b483c3bf79b96cdbb16861864229a0ac1bf4e","ssdeep":"192:ffwqXECmQ9QpbdAQPvp8Me2Rpog28Gm0zEEKsCWvc237dP:ffwEEO9sd3vptJGlmEdfPx","tlshash":"72d1ae000d0843e1e201ab354b1e1f3ccbe9a88433ad5a613c51e65676adfc5bacf74b","first_seen":"2025-02-11T07:00:30.794539Z","last_seen":"2026-04-19T12:15:56.469423Z","times_seen":154,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Heist%20Stakes.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Heist%20Stakes.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1396-68fc85ad-48bab16;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5014\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6fd0de562779f9e854ecc1aee33e4e1","sha1":"a6b218c23afefbbfe8c8cf5e17d7b6abb876b771","sha256":"ca75890dc2b92ddea127d5aaf61ff26bd7c956ad0d968bc67773cabb766adf91","sha512":"820328411c6c2f769c7fe342e437654781e834b4b9dd48d73eaa5ffff7272997d7d5da6d2e4371ff3b1ed459710bf040441d2a7c3df72bb3f34ae19711ce036d","ssdeep":"96:h6Elbw+iDB6Vp7soVbyTODAXZooGFj+/KYqzYmXAw12PYLkhG8rC8ZRGXIxhV7x/:hfwfgTooVb2JPGqvqzYmXArYre4XIB","tlshash":"6da19e27e33e5f09e452ff71640a6955eba4883cf19ccb194a1813870f247c68bc4bc6","first_seen":"2025-02-11T07:00:30.797557Z","last_seen":"2026-04-19T12:15:56.470289Z","times_seen":332,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/pgsoft.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/pgsoft.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"11d5-68fc85ad-48bab22;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4565\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"07fdf68f6b80703be8dff396a5a89029","sha1":"20f259c2d1d5d61f611079cf2a0b9d15166208b4","sha256":"9c318ff5d70915d892c4f289c1e2e8c7008341feca61bb191df37cbfcb43a28d","sha512":"1e3dd3c89973d138ea3706b02b76f9e8c1450b01b01a9c6e51b055b445cfdcd154be5080004028b53a6ac3d7e629aa54ee74e12191081d287620e89cda2c96e1","ssdeep":"96:aqQ5GZ6y9rpNUfJRttoj7YA9IF9s/IPqeW+ygQdnvW:aq3p7YkkAqF9QIPi+y/e","tlshash":"1d915c4df002842536c6ea93c4d3f026a8d34dc1a5d5e72602ab881aaeb71a75d5dbe3","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.472081Z","times_seen":1179,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/bri.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/bri.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a54-68fc85ad-ea350e;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2644\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"33b1568e97e2d3eb1f0e1fc24c13844c","sha1":"e76fd8087d2b1c706db27e318e728dadbb7cd2d9","sha256":"da04be9d1425d3021cff275d345cc1528863d6f93b48068f7867145424211039","sha512":"730731d241b2dbb9b740b8a592327904f7474fc8038e11b500bca4ec2d240766ef62b97288497765c85fb605a9f70746bcae1a67ab6b75110f9071c3fc0da164","ssdeep":"","tlshash":"25512b9de5274d41a3cddc403874e165c9639dc0cbe1f4a3fb0ec58a5d226e494591d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.473261Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/bjb.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/bjb.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"af1-68fc85ad-ea350c;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2801\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"0c352bba8c9f63f53360785ea6b0b89f","sha1":"b69681d8e5dc381c3c716a0eff800c194865ba29","sha256":"cd619749431bdcb7d09e5a62bc4cd4ed17119e8ae6fe783cfe2b4ceb43d95993","sha512":"bea94e91a2dbb8cd33273be1222ebea8bfe1db00febe2d055a436fc5f5a5ecbdb23d2a61ff6e377215684024a8d2fae9b254c1cdc88835b002639c40d0780863","ssdeep":"","tlshash":"0f517c0de5853e079418c6927dfe60221c228980c6c0ea57281fcc06bb701c94f7bcef","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.474154Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/dana.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/dana.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"952-68fc85ad-ea3511;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2386\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"0ac7748e31189f27ac5971efcd30a7eb","sha1":"dd29489b4fcd79567d7c278c3eaf6388a76c77a8","sha256":"5c92696fd590f184864bf00db29cb20da1b443dfc93f8377f14461f35b09f547","sha512":"b62c34f57eefae9fd1754964e314dfc792c7466baef2b08c7331889b47a222f0d981f8a03de2db56fa97083e90bed1d011cd9c655fffe7e5f0d84ea82057a3a6","ssdeep":"","tlshash":"2b410ac9f512bd2166587c825dcb81378531808448f1f922989ef04dbe782eabd3cde3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.47472Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Fruity%20Treats.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Fruity%20Treats.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/logo.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/logo.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"9551-68fc85ad-6916fe8;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 38225\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 62, 8-bit/color RGBA, non-interlaced","md5":"36ba8532b27f4003dac2c74ed405c834","sha1":"d6b4639929ef879934fe248a17c8f135140c7352","sha256":"111095200278180c0a22048d97c721f27bbe4ec6206dfde74555b4518b15060c","sha512":"3d62843a99c051589833e3454ed8985677933baabb1c501143cf65528414f8925b67243eead67b07031da72f1ea547dcf2a8b6289a783c4608de1137c721c689","ssdeep":"384:dHFLFJUOxryoURyUT8rrJ0KSxIYV4724apGdQHfaEFCsGKiLWoOlM6NkjiZcmJFd:x5wOnB48HNWGacQAQykLJ3niSk2","tlshash":"870302027d4cefadd59fa8e5916ae2c52d86ce4983c6dc1652903e7dc5107650cf2c4f","first_seen":"2026-03-16T00:09:29.540886Z","last_seen":"2026-04-19T12:15:56.475473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Fruity%20Treats.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Fruity%20Treats.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1394-68fc85ad-6916fe5;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5012\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d65dcd9204b9d2317e0e2be1ee091a5","sha1":"1fb0d4329eca05738cd788a5269893bfb30d96c3","sha256":"949b7952430113ef2bd7db69ca06581bfb7c7571f632c5812e59a27c086221f8","sha512":"82ff0c750e76ccdec9bdbc6b4a1d15d644efafa2e7a3f3a16dc7ef299684a657eed5ff956f986e291ce2f91855b587d2607b8f75d76d675a998401e1c6be9e8f","ssdeep":"96:f6Elbw+iXXot78G7poFuBP1/1NfWl+XRD7P32Xxn/2fXdRP++CcExd5jS2oXbdf:ffwzXo3poFMhLfVRvqxn+ftRP++3ExdU","tlshash":"49a18d2d13310f4ad5045a3450f8b6febe6038274b9749abe39a7fe39e508d711650e9","first_seen":"2025-02-11T07:00:30.786705Z","last_seen":"2026-04-19T12:15:56.477284Z","times_seen":151,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Anime%20Mecha%20Megaways.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Anime%20Mecha%20Megaways.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1642-68fc85ad-6916fe1;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5698\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe2c141b95a9a6f87d3e7afc68021b70","sha1":"d7d61c133d5d367b8ed6fbf12638006be2cb4a0c","sha256":"6b5720bc3da04ef23b3a17f0f06ee5bfb4712da126754bba4b8b2bf340e64395","sha512":"abe90b0c4747ff602766ec5d009ed2a81ca01ed06323b926e9f67dd19408d8d48a0b2ab4a83b1855e70564e6bd48b5d650ce6974521baf7b51aed98777c566e3","ssdeep":"96:M6Elbw+iOMYCZCitxR/n42XRr8xjdJDOQGt33KgTKz8Rlsl/KdHzCFr1LrN:MfwiMgYPXXRr8xjPyQMKaKwj9HzCHJ","tlshash":"fcc16e5ca334f269fe11c6f801691fd5b3eaa7bd915189e148811b3b174a4cc4d172bb","first_seen":"2025-02-11T07:00:30.787575Z","last_seen":"2026-04-19T12:15:56.477962Z","times_seen":151,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/spadegaming.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/spadegaming.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"c52-68fc85ad-48bab26;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3154\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3154,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"320cfbe4a80279d60708101c0b0e43f4","sha1":"944fff69fc23e6acf1abeada1854e9234805f5e4","sha256":"5737cdb9d5e20e199690ce65b1477bf50e6d76e6ff3af2ae1a3916eb52277f6b","sha512":"cd06cd28bcdbf5a094d9bd2650e182cead0348ae5e904529ade137b00e57261b3b48b4de5ec2801cf5f2ff3e820e2764b9b83d7e3e057e4b3a2ea42f13e83aef","ssdeep":"","tlshash":"99514d5ac712dd80508e8d0738e1e976e53574004b71a938bed98dde391c6e3cc68ee7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.478505Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/ioncasino.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/ioncasino.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"c94-68fc85ad-48bab1f;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3220\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f52b79a28e4fe23c2d7034200ec49243","sha1":"9e7090b05b1e04a59609aaa74023d254829c9b86","sha256":"2f413a04bfddefa9057a4a1c09ffebb389b048bff9a62717f64a292f2257d288","sha512":"a869da32caf575eed45a705779742b96901ea431bc4722131c930c0909359141abaf346ae6d43bf29a67235d8f8ff3f4c2d8a6eb86932aa52671175129dfa8fa","ssdeep":"","tlshash":"1b611a5e9e119c0d785ad94138f8a09bc632c144a870e905bad29d2bbd342fb9495cff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.479017Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/telkomsel.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/telkomsel.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"aa8-68fc85ad-ea351c;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2728\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ccfef8b817b38862ea38cd51ad5eda48","sha1":"7bc6d8db79a495b725ad203aa9228e9178b8ac0b","sha256":"1efc5dce3145bdeabd5c9549aa768207802f3d94f85af872e74e936dc6c6e32d","sha512":"dcb90a21a291fb3d2bafb121ecadd54cae3dbc1972a5058f943c9e3335fe40efd0684adce586a469094a3e9bbeb73f89942c2da48a363ff6e9ea8351cf168002","ssdeep":"","tlshash":"ab510ac8f9856811b2556d9728f86037ce095880cdf0e09669d7f122687c1fdddadcf6","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.479519Z","times_seen":1068,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/axis.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/axis.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"775-68fc85ad-ea350a;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1909\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"8a33ceba37cba67565691bad0b376d11","sha1":"524d0127ba8fb90930c258d1f6dccc2e021596d4","sha256":"da7d51e54f2ec453b76dde1951be25a7e76d2cbd19ceb53b07bca4a09d950c94","sha512":"a3ecb95fc952a21271163c09059df357a3b3b0e94dfdd98f676b5edd4fcc20456e26f384b796acf63f6fe925919c8056b479a95833b1bd6962881993f1298d82","ssdeep":"","tlshash":"6641f9cbc0c3ac01f5aa951028f711229d1249449fd1e46ab9dfd81625b45f59d28dd7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.480073Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Royale%20Expedition.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Royale%20Expedition.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Mr.%20Hallow-Win.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Mr.%20Hallow-Win.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Chest%20of%20Caishen.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Chest%20of%20Caishen.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"108c-68fc85ad-6916fe3;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4236\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fb71eaa1a8bf2a62677f3ec9f98a990","sha1":"3474dd8395aceffdb694957538fba36084e3b58e","sha256":"125403f622c94f0c2a5092e47e6347cea7b90f1f7831e11bf5035b4c1276beaa","sha512":"4273c6a22bd972c7b8a27af451586765216611e039e84072a88dacd6e9e89e819fcb01f8fbff07fa899a56260460a0407965567a6f4e8fe044bf6a1da9e1b7ca","ssdeep":"96:46Elbw+ig1l3QQWTrIp4Vmrt1mPrQJXikRFmm:4fwM7gDHA44rtcsXFMm","tlshash":"31914a411a81a30cd0127f3cd88486e5e1303a12fe8372a9da35232bbf89398198c683","first_seen":"2025-02-11T07:00:30.789742Z","last_seen":"2026-04-19T12:15:56.48058Z","times_seen":151,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Bali%20Vacation.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Bali%20Vacation.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"17ba-68fc85ad-48bab14;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6074\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"747b35d2a61f8919265f55ea7377ecd4","sha1":"254d8dcb362db3cd8206e7a72c35d3bf9dd9c54e","sha256":"46e26ab49c003e844a4374955a2c923b6c7705d5424a775ac9a102c5202ae91f","sha512":"7882e7f561da714b6ee8f467919cf4f5e8d0b54880467c616f35dad0722d6b2b6923b8d4cca3560b512ceb70f2a4ca6eff4603979faa821f475c4276b49442d6","ssdeep":"96:56Elbw+izQjCUsX6k2+XqV09YytS4IuJ1d1qloUqkRmyo2rlBZjqaklOmzXT4hAe:5fwlXd2+gAYyrb1ATpRmQpL4smjTSZBj","tlshash":"94c18ea2323003d0e039633a50dab5856529fdfc4643cf4a834e6e751f899a6f2495cf","first_seen":"2025-02-11T07:00:30.782771Z","last_seen":"2026-04-19T12:15:56.481163Z","times_seen":166,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/bca.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/bca.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a25-68fc85ad-ea350b;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2597\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"7218454f8ed20e47c89c49f43dc865a8","sha1":"b3fe2c42a0ef40da7db91efd05fb16be761bbc7c","sha256":"a0effe9a2c5b748a827c592cff324be42a330b94f053bd596dbe4b45f2c18152","sha512":"843f06f1b1bfaad41cb112a544753066f22c40738164e790231f0e4bc10c1f1a0e9b804a15149a538779556a00dd303098ded75d9892e7c246219aecc694104e","ssdeep":"","tlshash":"2e51198ce8525d40b61ee1a03ac2057f92128dc0cfd1e90df8adc80e13353e497288d3","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.481709Z","times_seen":1057,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/mandiri.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/mandiri.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"98a-68fc85ad-ea3516;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2442\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"e81bd4992f0fe10cad81a83263d92ef7","sha1":"08b015eb1504581d3b9c858fd6770047b3698f70","sha256":"6b00a56d5961243a4cf2e0c59cfae414a8b3b528c7778eb3fae99e52a64913f9","sha512":"f9654ae9fb05790b84233d161227d0838eddb5225e3ea730dbdf67f15c1b2762cd06217e51faafb769c3f1fc38dbced9cb982f015cd6f5fb7a8037cfc4e329b8","ssdeep":"","tlshash":"b4510b8bc1d78d4147e5ca9131f2505f0d5246a0d7f5d029f98fd051a6f82f92a148d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.482251Z","times_seen":1056,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/gopay.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/gopay.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a06-68fc85ad-ea3513;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2566\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"b8771de54536e9d754dc58a51d9da827","sha1":"5740b8950fb4137da7040b6e929fef6a371504d1","sha256":"450c5693b4a594e025753ada485c95646f6f9b95434887a2b9be52776aad1397","sha512":"6388ef540f6228b2423372814408aaa0bdc01ea66dc9dcaee162c9b0813677177fadac544b34ac7f6b3b472bfd186b9f1d6a86921e3f5794a6b2fa9fa8a06f9b","ssdeep":"","tlshash":"fd511a1dfd04bc43315de2671ce15526ca04acc0cde1da2bb65fc417aa746d04aaa9ef","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.482777Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/ww.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /rtv/012603032146000/ww.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nOrigin: https://nagalangit138.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13071\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 10:32:03 GMT\r\nexpires: Fri, 16 Apr 2027 10:32:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 265401\r\netag: \"d1df5c7bf2e3a902\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46270,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46150)","md5":"a58da1d57698a1cc695b99dd54509103","sha1":"0f4f3468d3b795cea101223f7f5b881683629e15","sha256":"8c54a748bcbd623b9faad8d3c1ab22c1ccd0f7be17b449102908dcc6f2a2ba7f","sha512":"31d006028f6ccd9723c5239a0e04ae70abd90f30e6a5546e1a55640fb949527d97ff3de51c7521658c8177ac14f50906006c3acc27e039ee31a078f1c9fd4a5c","ssdeep":"768:bCIFh7NY3GBGJ87rpB67WhEAyn8fUVCjkzQbyFpPcsKdN4emH+bUwTKtgyb9Q:h7aCV7zfUVZepQ+2gOG","tlshash":"0f230bb433a6546f839284e5005a3009e67e2c663006d8fcf678eed77cb199795b6f34","first_seen":"2026-03-18T09:15:17.837253Z","last_seen":"2026-04-19T16:29:38.385846Z","times_seen":257,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Badge%20Blitz.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Badge%20Blitz.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Mahjong%20Ways%203.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Mahjong%20Ways%203.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Heist%20Stakes.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Heist%20Stakes.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/permata.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/permata.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"a3f-68fc85ad-ea351a;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2623\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"806f1354ac8e117d1752f9b2e317c551","sha1":"a989006a1c24fd9c5c5cc8eaf48be64a9eabcffe","sha256":"71eb5481c8ca4c22d6723f161b36d8a333ff30bdd2c90018b2b3cd2f5a5ce315","sha512":"b7633840558abf2a4145b874c4c00e4b57c3f9eb3043a0ec2d5b4b94b4ea426c8a6bb661808c86565090f03185aae964fc0584059d54beb12eead460f1a8766d","ssdeep":"","tlshash":"61512b01f9044c01e489ae8134e38569d83b5582e7f5f036b19ae8672b645ba4e7e9c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.483934Z","times_seen":1059,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/bni.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/bni.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"968-68fc85ad-ea350d;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2408\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"f974c6e54d22a2874c8bd0a5e0dd6280","sha1":"c155e13074e0908eebceaebed81db17d3e67f366","sha256":"1c0d8f733026c0d9d8ea471bee766e2398937de1b9c02d023c015757a425cea2","sha512":"2db584e2104003fc6ade26feaf40e73661cfa04128071ce9627865e57006b7514a025ffa7265a6d206aa53d44c39e9d7ff7bb2e8345dc31b9dafd6b26a9e924e","ssdeep":"","tlshash":"df410a4cb786a480e1cda69310ea4223c9154540ced6f56b541ee80b89681f8ddee5cf","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.484498Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/linkaja.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/linkaja.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"9a3-68fc85ad-ea3515;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"aa19546f0fa57ec054f592623dde7e62","sha1":"19fa186480ac2121f2647bfa6446c6a9a88f3fdd","sha256":"800b3f95f81e845bc3bc92ecf7880f2c7f57a15e0dc3f855bfd3e591b783c7ec","sha512":"13c85136e6887167c1be424dc4b18b1f4773a67c4495e3f83884c6bc1fb143d02c9b0609940661a6e1f26f953f581e1fa128437b0a314bc00533fd9549065af7","ssdeep":"","tlshash":"7b512b14fd116c42829ceca544dbd2a289175b44dad8e47bb4ffd01209f12b98b311c7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.485043Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/webfonts/fa-solid-900.eot#iefix","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /webfonts/fa-solid-900.eot HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nagalangit138.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: https://nagalangit138.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://nagalangit138.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"472.5\",amp_style_sanitizer;dur=\"276.1\",amp_tag_and_attribute_sanitizer;dur=\"166.5\",amp_optimizer;dur=\"35.1\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16138\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163510,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40380)","md5":"c01de942ae29c53d997ea98de5616b1d","sha1":"282772e8f28a6dae7977b08c0daa9898e3a43ee3","sha256":"ea5b920b34ba8eb741173bdb13d82a108a9662fb7f4d0d6c4b60a5ad27e1b314","sha512":"57f5ae6ce07dfc898751f445a195dae6c9548c925d11c46a7b12ccfad746ca6795bf6ae88c02d0297f22a4cd6d12bcdcc0ccf06d7a353adfdbee02084550558a","ssdeep":"768:sYWE/UXyC+l6lTzVMnUYvtRhFU5JDCBuC7LYZFUKcp5SJ6xjEXlWmAMAEMmYG+UP:PZ6RqoK8sEXQyT","tlshash":"f5f3b462284e006f6557c35162f8f6ab5d55cc1fca329649f9aeabc8cb41f03763a31c","first_seen":"2026-04-19T12:15:56.485584Z","last_seen":"2026-04-19T12:15:56.485584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Le%20Pharaoh.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Le%20Pharaoh.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-fishing.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-fishing.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"4fab-68fc85ad-27cb069;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6146\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20395,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1819c49d6da1dcf13dc861e71944c5da","sha1":"92665c967c880845012703d29f7f2ae40142bef7","sha256":"633c84abdadbbe425c75326d7f008a4934225ec8b18b1913331fbc63617433d4","sha512":"80d5029a9305bd7d3f984dd7c41fc792a49f56c98b0f5ef775ec66160e013ceae0a95ee193487dcfe479fa511dcb1efadf74d1e483613a2d672507a65b435427","ssdeep":"192:NZe0uWLKbMkpbqwG8UYMao1X90CAoasSTHdpvLX4AxFl6fY9ZFudw6TJoGiy5d+o:be0/LKbNmApcTRaxfbdl1udtTJuy5d+o","tlshash":"bb9285320b104ae4a76d755c7ce65f9b7f6a8cb9a080418283f6bdc554b3ffb200895b","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-19T12:15:56.487612Z","times_seen":1382,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/New%20Wins/Revenge%20of%20Loki%20Megaways%E2%84%A2.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/New%20Wins/Revenge%20of%20Loki%20Megaways%E2%84%A2.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"122c-68fc85ad-6916fe6;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4652\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a296302ce823df8894de33e9b10c98a","sha1":"2e90a9000e7fe1b755fc01e0d6031daed637b2ae","sha256":"19431eeda6387a8ea3abbc55eea11f57d3599569047b8e786f971f70d52852f6","sha512":"a3e71e66c5290a02a9a3a1b6ba4c46c411f11422f1c2ff4357bce87695c7eb828cfac1c9b7e2f30d08d17390b1e5c30b3d0ef259341944377b524df2dcdd56a3","ssdeep":"96:C6Elbw+iNpI+XiQD0gpiU+penZwaZDpnWxMMxj/17yM2:CfwLjZwU+pyZlQMM9/1eM2","tlshash":"66a17f129b78052fc4133c7da4502f999b327f43947ea17543900126555cfbb6d6e1c3","first_seen":"2025-02-11T07:00:30.790826Z","last_seen":"2026-04-19T12:15:56.488378Z","times_seen":149,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Mahjong%20Ways%203.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Mahjong%20Ways%203.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1a7a-68fc85ad-48bab18;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6778\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea97349dbad504315bdb9411f2386c0e","sha1":"c97b654bee235f4c61fb8184860ddcd031990bb6","sha256":"d215e1aa24a3f17ecd1c7c8d5856181e382c93309f6b8e996e76f9750ad532df","sha512":"34681752930e5c2fa189945ece502a3affc35d2a2ce1260b0e7eb9cfbaecd3d0b2d317181ed4b939e10f93767e0d657e2b7e0b31f8c7f6a9996c7c2d2169980e","ssdeep":"192:ofwMjN/boS2kgzgdosgsWD1bT+pbH0KkDHv:ofwuxboSfYgcv1bip4KMv","tlshash":"04e1ad22323b37cdea88b675a166cba343f43b52b3478450a7e09129370d4cbf92c087","first_seen":"2025-02-11T07:00:30.796486Z","last_seen":"2026-04-19T12:15:56.489027Z","times_seen":332,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Almighty%20Athena%20Empire.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Almighty%20Athena%20Empire.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"159a-68fc85ad-48bab13;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5530\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"619b9d3661975db5bfe1fbc5aecb1ba0","sha1":"bb92b99f5180d3101e92d80ad43fa9144c5c9d03","sha256":"8b6f2d3b9b9faea41d56211946ac916939d48bbc6034079234bfe026464717da","sha512":"0c4853c2493974d53184d29b3c607874c5da7a227656ef701a0e660fd0f3be2767c5354eb7164d7a884f6c5db42a85c743dc34e86fd7e9cb5611a05dbf9a516c","ssdeep":"96:T6Elbw+i5bLnbLUXhsrE/Ds/gPi/ZEdDrF3L8tbZpYV2AX5fNK36v9uS:TfwxbL07DoimZEdDqHpYV2Apf0qvIS","tlshash":"c4b16da7637553bae40c03fcd0d9a7539728f8118264e90895c2022dbe3ef88395e64a","first_seen":"2025-02-11T07:00:30.798452Z","last_seen":"2026-04-19T12:15:56.48962Z","times_seen":167,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/idnlive.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/idnlive.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"9ea-68fc85ad-48bab1e;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2538\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"57238310e793f343a2749339be32a3ac","sha1":"95bb671a06008427ede2e08a5463dcca1562a644","sha256":"620a982845b3e7a490990f96b64c2c594bb4d418058873c2a3691e2d86b0cb07","sha512":"233da09c46f08c7b3c28d84317b19761490a6f28aebded877ac5941638cff99a7ec7ab61dcf2de28e71904a131a3333d1f4a8eee2e1f07fc80be9b90cf5a1ef4","ssdeep":"","tlshash":"4d512cce9a129a428aa9e54724e80011862b0a414860afdcf54bdc972d7617f416b7de","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.490232Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/tri.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/tri.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"844-68fc85ad-ea351d;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2116\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a9332787c6c2381c0a4a5d6211e61883","sha1":"8b7837da9a9f5ac5a05479d256620f6c106e8235","sha256":"86a466018abf53f7175f4909de0826d5a8d405082ac2355b55d7d196fd47d2dd","sha512":"b7493b3a7b53cca8e2f63e5d6788d26b3b8c5af4adedc51d9db25fdfcff9a84d44af024762596b98e0ebd79278bf1d653cfa1e70b5eee6cf2c2ac3b1622b8f1b","ssdeep":"","tlshash":"2941e998d5631c41578ae98b28e14b278a0249c0d5b0c55771bbc04f87341fda8ae4db","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.490845Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Rooster%20Rumble.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Rooster%20Rumble.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/slider/slider.jpg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/slider/slider.jpg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"27d97-68fc85ad-6916fe9;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163223\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":131036,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x613, components 3","md5":"6f0fd6a11a07e2f65e3811042ebb9f65","sha1":"2fb29de2806fda2a3c76465fcc17aaaaa792ac27","sha256":"98732be662f6ec92b24a24f226ce49aaca1c0eed8437bdddbd6de71d57d23e5b","sha512":"d8fba872786adf7ddb5a14c0bc69d03c0e25d786a71d494a8ff53f0ba1c8c0df8771584fca4ddd45b77b65141978c5c4712f2b82565823e6c7d9e3b07be3d39e","ssdeep":"3072:ypuLoockX35iMLnzE3KK2M7GhdK176JZ/N:ypu1ck5zLn8KK9d7e","tlshash":"7ad31231839e6ec86e2dd9fcca0ca059519be1a8f149f7df29128ce4daa7c6d014d1dc","first_seen":"2026-04-19T12:15:56.492486Z","last_seen":"2026-04-19T12:15:56.492486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Almighty%20Athena%20Empire.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Almighty%20Athena%20Empire.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-sports.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-sports.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"d14-68fc85ad-27cb071;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1296\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3348,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0de92a71fbcd1cfe5594f9b569c655a1","sha1":"17f920aaff1dfd8bc5ed654dc95e881ec9885439","sha256":"bb0b9d56610645ce9c731054fbe64f5ef0d5a7925e5b7ba2ba954954ed61f5aa","sha512":"8e4d110ae80609974b584c7d2439a0a96ae2ca0710bcf0625a79fadd14a81e640a820e339ef583ad869b4e6d45017e7b8d00903d9ffffd6de01e8f95743e9441","ssdeep":"","tlshash":"1b61ccbb13fd511daf8f4304895a1683179d94ea3269e9f5be0df830e0239b0d16be94","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.494047Z","times_seen":1292,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:49 GMT","end":"Mon, 22 Jun 2026 08:35:48 GMT"},"fingerprint":{"sha1":"64:36:03:BA:E6:36:1D:72:CB:98:C7:11:D9:8E:7C:1F:6A:03:40:33","sha256":"76:A3:36:B6:E9:D6:FC:48:B6:5F:E5:E8:12:BA:E2:18:57:74:80:40:92:BD:73:3F:C0:FA:D2:FF:77:5C:20:44"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-loader-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nagalangit138.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3921\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 10:52:09 GMT\r\nexpires: Fri, 16 Apr 2027 10:52:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 264195\r\netag: \"43c0c1e3818fdba7\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12245)","md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-04-19T16:35:03.097232Z","times_seen":350,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/slider/slider.jpg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/slider/slider.jpg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"27d97-68fc85ad-6916fe9;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163223\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x613, components 3","md5":"8d572281403162233e733add477e27b1","sha1":"dfd70b47f2a33331f8bbfb01fb40b13adefba696","sha256":"65296f8dbf0753ed43518d14b0a08c37e885ae752df1503e36e07d4cf091f9c1","sha512":"088b03b6687fed41e4f2e623edb2ff9ca84f5e76209265266652303f843c96a978b99f9e9fd9b937a43c3ea21308c466a5197957e496583aa101d80983a032d0","ssdeep":"3072:ypuLoockX35iMLnzE3KK2M7GhdK176JZ/AdKtDpdB:ypu1ck5zLn8KK9d7mJpdB","tlshash":"c2f31231839e5f88bb29e978c50ca06a11a7d1a9f286f7de15138de5c6ffc5c054a1cc","first_seen":"2025-03-21T07:15:19.494249Z","last_seen":"2026-04-19T12:15:56.495405Z","times_seen":141,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/microgaming.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/microgaming.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"2315-68fc85ad-48bab21;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 8981\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 4-bit colormap, non-interlaced","md5":"35024fae2032dd7b3dc0b010485f7a0f","sha1":"dc34e370159f57dd72a3dba7651fd32830b06134","sha256":"a378192e0e408800f48c068c8b2b88841fe8dff5214c81f0f5bca386ab155794","sha512":"ba24370710fc7075072300b1c47bf4cca12de32e0dd24272b6961c19319d8b1701f8e1ccde37822f9e1d062e8d756319f14a49485f3722d1e7c705c363ea69ae","ssdeep":"192:M1eSS3IF+3ASIJ4vcwEZ2y9Y4eEcBXRhv9uY12RD2xUR5ZBe:y+3IF+144vcwAXm4MR9scULPe","tlshash":"4902bfd7bd432528d002f4f15aaf417a9dcd62436fc0664f400db9d07acaf9981bb182","first_seen":"2024-12-22T07:43:19.401885Z","last_seen":"2026-04-19T12:15:56.496059Z","times_seen":531,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/allbet.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/allbet.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"183a-68fc85ad-48bab1b;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 6202\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"65385a0b00807c78e9ee11e5e845f395","sha1":"856fc5558ff9ab52c6393ae0cbf830cae288d13f","sha256":"9339336ebd83063c8f03b0572ed4a5c91f3c12452145115387cb78d51980ac37","sha512":"452b8c645cbd6a457b2da98743b2de9e07b022e67f503f716946bf5bdeca3a5ab37b7ec759593679485d22ecee3747f48616324fcfec1e8ed569e7eeffc7dca7","ssdeep":"192:aq/ECTu1GWg09EuSqUrf6RxlO8not0Ww66P7g40Hv:aq/nu1GWRaORrLj9L0Hv","tlshash":"bad1af25ef83053188a9ecb095b226b7003fc7841d30d63579eadc995d319bae4fe5c9","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.502979Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Zeus.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Zeus.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Bali%20Vacation.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Bali%20Vacation.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T16:59:54.919164Z","times_seen":13940304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/icon/icon-livechat.svg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:23.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/icon/icon-livechat.svg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:23 GMT\r\netag: \"32d-68fc85ad-27cb06d;br\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Apr 2026 12:15:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0af3bfd49ffc5ae11ba860786cda75d","sha1":"c598e7d6678d0fc928d2c6eaeff83f0b5311daff","sha256":"d1e72ffd39a829fe41c1a53795d8418fea166a070252308ea1098b0b7c2f74aa","sha512":"c65e0fcccaabf7def73e8618cfaed9eeecaf4a47698b732c3d185fc7397c9572d1375600545deddf2bd57aba69ef1049ff28142d2aeb861a3774ad0a0072f356","ssdeep":"","tlshash":"e8011ea8cb38cab0e14c1b004be8271335b10422daba9c0c43297d85e853e902005cae","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.422581Z","times_seen":1207,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Popular%20Games/Zeus.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Popular%20Games/Zeus.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"1930-68fc85ad-ea3524;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6448\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be29d0eb4cdc3d24e71b1f1635484d10","sha1":"36d97ab34af81c939338dda8dafb2e565c2b790d","sha256":"22a28197f792660c860a28cca39173b32cbe3ac4b96067b5c9962b214e8c69a5","sha512":"515da1fb9e8753d79dd11d61365f76afd6e1760e79ce71e668f62a927cb702ad0882e6c854ffac4a4e8dcd2f44cf2bc491f7d5cf06c7d3d1858c542daec171b7","ssdeep":"192:ZfwXL7ZOfaaIH7I3HtzJ/EcQFqJ4WS/5oo:Zfw77ZIa9H7GHBJKI4Z2o","tlshash":"48d17df10a388a48e7cc8e7631bd2767f7567d60063c4e78859c94f20a05589f28daef","first_seen":"2025-02-11T07:00:30.791616Z","last_seen":"2026-04-19T12:15:56.503827Z","times_seen":154,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/provider/pragmatic.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/provider/pragmatic.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"f70-68fc85ad-48bab23;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3952\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"2b7c9803856443d10c0ec7ba404448c3","sha1":"02dd3b31dd3934519bbf7f06335e556c66d3b3b9","sha256":"63aca758fa264a3c3ef204bac37c08e30dd8d06a308bd77194884a343a086dbb","sha512":"ca1492e4fc6743741ae13ced3558bc2d4d136021ccb39d425d0ce73f42ae27fb9715960c740b98ae643c7068f022262c349c231cebda78c2991d050250a0a6ba","ssdeep":"","tlshash":"c1815c29f2c05f059194996258fd293791f25e50d5a08e3e8bebc47408282fa897ccff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-04-19T12:15:56.504598Z","times_seen":1179,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/danamon.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/danamon.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"940-68fc85ad-ea3512;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2368\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"3838d4b8102304883356ccf668653507","sha1":"65c93b99f83f22c41e339cfee892f80d6a0c1294","sha256":"73b1a331ae0d571fdfd8fd37b2d8b61d7bc40b7d5da1cfcedc36bcde48483f75","sha512":"edd8c2d85ed9345f153ba92047cc995fb15c720a6f7e7d8caee162e70c519d021abddf5abf988c5ba54c66702fa8fcb64397b9bac1c01223f555ca8052fd5099","ssdeep":"","tlshash":"b54108acd562d801964fad4030fbc33d8a614b409de1e10ae8adc16625a40ff6c5f0c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.505283Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/btpn.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/btpn.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"8c3-68fc85ad-ea350f;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2243\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"976c8fc9ca31651f1c1ac1a0bca5f8b5","sha1":"475e902161a298719789a4ef4d23c2a873c599ac","sha256":"45482f8a293b7acb55f6a149ecc4854bb2eec381edf7ea5e470a2d8941cf1afc","sha512":"8538e4af5b9d5df88cdae37c2ce17d76091b11697e908eb4ac3da485ba8805f0dc66fc49f29cf9736ec14758000e383734b7827cfb03c17108b28c5a14b0bcf6","ssdeep":"","tlshash":"6a41f788da018d0253cfc96b3ce544464d22a940c6e4e6b7538a80890dbe0fdaf6edcb","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-19T12:15:56.506048Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/bank/panin.png","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/bank/panin.png HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"9d5-68fc85ad-ea3519;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2517\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c73d8ac115c9d42d48b2a3184c198271","sha1":"d86449166ea1fa2d8581516a68f1d720ff16233f","sha256":"cf7cf632c75859639c5e47534b6760c9ac44013dcd5d7bfe4c045cca5414432a","sha512":"cf89a4ed50cc1a7cbdf02c6589df7e55b7c49eb3f31208d41e288fe46cee5de39379808280ccae7052fefe9a892cb1d78cbfc54576f0a2981b67e2a352a4e4fb","ssdeep":"","tlshash":"2f5109cbf842ad11a24e848624e741398f07c960a9e4fc71714ec42e1b386f6e96c9df","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-04-19T12:15:56.506741Z","times_seen":1057,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/games/Hot%20Games/Trial%20of%20Phoenix.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/games/Hot%20Games/Trial%20of%20Phoenix.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"162a-68fc85ad-48bab1a;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5674\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f2e59da37315261ace019c2a522f92a","sha1":"f4d3ede2579b2a183327f67cc0ff1607fe5d944b","sha256":"0c46c7354f85e263ebe9889be491278b58e991713426317daf226a83351e95c7","sha512":"77818d937243f9f0b6ec493ed64df2cb2a2bc3a3320711945f4d88c1409969db60e4b2b1208b84b8b94d2e5a77820d20e90420b02c597b384ee47f06f9d6929a","ssdeep":"96:06Elbw+iq+AFe1WqXgbF6ut9nplqT0HwTexNEzFT59Ge1dppLZbrwbl1w:0fwW+jWeAPt9nbC0HgeXOUeppLZEG","tlshash":"9bc16c24b7602b78dc4b0535d1aa1779ce8b3c0f4d55aa622012427d1f65ac9ebcd8da","first_seen":"2025-02-11T07:00:30.781662Z","last_seen":"2026-04-19T12:15:56.507442Z","times_seen":167,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/themes/merah/images/jackpot.webp","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:24.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/themes/merah/images/jackpot.webp HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:24 GMT\r\netag: \"750c-68fc85ad-6916fe7;;;\"\r\nlast-modified: Sat, 25 Oct 2025 08:09:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29964\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f891d7fb3da76cb44a2c8a70bd3f8cd6","sha1":"d4e3810007ae9c9b69e14ca29552f543ee5fbbb2","sha256":"781e7e7e5499b12e1d43c93a17d12fc6f925a43900931dcda06b626ce4213309","sha512":"f0daa5bc627801f10b32f395ea07314ae60e6808e5ae4014af28e164ef985df97ac7a42cf5a5b1f5bcf9abef452466707da2502f046ae2e3fc6fe1d0175e0197","ssdeep":"768:C9uWgTiY+BCAo825P9ePRZhg1g3ETWZMX0S58lizxabj64G:Q097AH2t9eP5gSUHXxda/jG","tlshash":"55d2e16247614fc4fda28737d1fd911ee44589ff4371aaee4ba7f10420d6a2b3226246","first_seen":"2025-02-11T07:00:30.849335Z","last_seen":"2026-04-19T12:15:56.508152Z","times_seen":155,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nagalangit138.com/wp-content/uploads/2025/10/cropped-Surya-Favicon-32x32.jpg","fqdn":"nagalangit138.com","domain":"nagalangit138.com","tld":"com"},"ip":{"addr":"38.54.119.91","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nagalangit138.com/","date":"2026-04-19T12:15:25.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nagalangit138.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 15:23:44 GMT","end":"Sat, 20 Jun 2026 15:23:43 GMT"},"fingerprint":{"sha1":"E4:23:53:78:7F:C8:A4:A0:63:F5:8B:BA:86:C5:EF:18:1A:22:A3:2C","sha256":"20:03:E5:F0:A7:63:DF:05:46:C3:CA:7C:17:E0:66:B1:4C:23:04:AC:03:A3:72:A4:CB:2A:54:4E:31:96:4C:09"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-Surya-Favicon-32x32.jpg HTTP/1.1\r\nHost: nagalangit138.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nagalangit138.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Apr 2026 12:15:25 GMT\r\netag: \"327-68fc74cd-257a212;;;\"\r\nlast-modified: Sat, 25 Oct 2025 06:57:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 807\r\naccept-ranges: bytes\r\ndate: Sun, 19 Apr 2026 12:15:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 32x32, components 3","md5":"ce4aaaad3caf15d8a4698811cb03935c","sha1":"fbb348dd6dc6c8d4b0011360bfbe8323e368fb04","sha256":"7d0ac259c82cbd1bc45f989abe923f9782a009e64ea683384c9304e4ac638f15","sha512":"568a5c8bbb83d15c479ae989276fd41ba5b717b8aae52abfccf10ae9d13884cc6641a4320fb480e0844b6a1df9723b8cebec0d9bfd5bc9c143de385606ddb6e3","ssdeep":"","tlshash":"1501659a5938a289ca005f3586afce5cc74f3a96e836ae066132c51314368d59850c30","first_seen":"2025-09-20T21:55:27.769316Z","last_seen":"2026-04-19T12:15:56.508822Z","times_seen":71,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"nagalangit138.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}