{"report_id":"5badd8e9-96dc-44e7-8bf0-7472fca42891","version":6,"status":"done","tags":[],"date":"2026-03-27T13:07:03Z","url":{"schema":"http","addr":"konf1rmasi-hadi4h10jut4.help1.site","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"title":"𝗗𝗔𝗡𝗔 INDONESIA","dom":{"size":20019,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (567)","md5":"4ed1fc09b0b9d25a8a63c53dc224a1df","sha1":"9c721f5b5ad4916749139ee77c1eb6e7f63c204a","sha256":"9c821be6350920acbf9c62fbd8d241b24b85ff111f315aaff4debbeee66f42c3","sha512":"67725464090f373778d11f0bc1a4e65c11d061f5a47b2025f1d72db3c78c352d7ada8471e642414c1d4361783534a9c9f76675ffda3a74716816e690f7a8bd60","ssdeep":"384:TxFn/sen6SxSESfBsmVFXDt37sqmyjMB/p7XGB4qCR:56ot8mmVJt37bYB/p9R","tlshash":"d492f896a5d52404622381a17bef534c333c8103da0acd69b5ee34d6cfc6bf841b7b99","dom_hash":"domhashb869f2cca1210314556f53c4ea833fa2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"konf1rmasi-hadi4h10jut4.help1.site","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T13:07:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.dana.id","ip":{"addr":"23.214.96.70","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2017-07-14","domain_rank":103065,"first_seen":"2018-07-06T01:48:16Z","last_seen":"2026-03-25T12:33:35.536442Z","alert_count":0,"request_count":1,"received_data":14519,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"konf1rmasi-hadi4h10jut4.help1.site","ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-06","domain_rank":0,"first_seen":"2026-03-27T00:57:56.954584Z","last_seen":"2026-03-27T00:57:56.954584Z","alert_count":12,"request_count":2,"received_data":21746,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"owlcarousel2.github.io","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":432782,"first_seen":"2016-07-01T09:59:41Z","last_seen":"2026-03-21T17:55:01.594248Z","alert_count":0,"request_count":4,"received_data":184043,"sent_data":1959,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-03-25T15:48:41.595926Z","alert_count":0,"request_count":2,"received_data":24716,"sent_data":1038,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kementrian-daerah.c1.is","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-06-17","domain_rank":0,"first_seen":"2024-09-18T11:35:50Z","last_seen":"2026-03-25T12:33:34.469551Z","alert_count":4,"request_count":2,"received_data":0,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":2283,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":1,"received_data":23782,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.m.dana.id","ip":{"addr":"43.159.95.39","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2017-07-14","domain_rank":152439,"first_seen":"2018-02-04T21:45:12Z","last_seen":"2026-03-20T17:26:47.8522Z","alert_count":0,"request_count":1,"received_data":263559,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-03-23T18:24:04.407461Z","alert_count":0,"request_count":5,"received_data":2058652,"sent_data":3498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":1,"received_data":1773,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3c34f4cbae69d9668658e1f7a07ab7d","sha1":"a3781798542542af63c50d70db656b5c362d145c","sha256":"eab684e6b0a1c2ded39eaa503ca9d1e2bf5dd272a8d9f3b4e04de302cd6cfc55","sha512":"81faffcbffb404b3a0654c955ce3859e7ade75b4a11fcbf0d61f51ac3a10a8cd214abbf0d15107a6d59b4828e820799927913d8572eb717d9f8719730436fb3c","ssdeep":"","tlshash":"90e05559269908a8c9e6438b3f4663231b2043ca900c85c42c2acb890eb6c2a1563ee3","size":426,"data":"","first_seen":"2024-04-11T06:37:02Z","last_seen":"2026-06-06T13:38:31.614293Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21777b4d80ff9901152f1741971078f5","sha1":"4cfd8480b9a5f1f477d2cb75a8d7c87cce73923c","sha256":"e59bbeb480fe181ad65d851c4bdfe132a42119cdd98430d3a9825fdae6eae00d","sha512":"8ea4cefb056b031d23a0bb2f35e98dfe0edfd33e0a0b1d4c69f3fa45f861632f00ab2f9ed8fda9da176416a1147f307c29969310f4416fd23d84087948bde8b4","ssdeep":"","tlshash":"63d0234350743021d84e230145f46603571d1913c403bf45f46d17411f05f0a197dbc4","size":217,"data":"","first_seen":"2024-04-13T06:15:13Z","last_seen":"2026-06-06T13:50:20.939413Z","times_seen":1237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f05b9a4c921f1df354a45ec9343ac3c8","sha1":"6d25748b381dd663a754467e30a863bdc4d88325","sha256":"0db12f42d1debcfa5180eaade77f60bd9a4680297870aee84a6cdc7ee26a7dd7","sha512":"70b52c5fa1f857be03399f19993c3962bbad566685d231f2e483c5147156506b189639c6b03201426d28ac53b22d364d60fb1d3652c4660193599d50759f2141","ssdeep":"","tlshash":"ff01d09a776330b1864b74b96b6fc1aa39a0450f1509d6413d0fc1e04ff3e38e1a66e6","size":795,"data":"","first_seen":"2024-04-11T06:37:02Z","last_seen":"2026-06-06T13:38:31.615515Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/vendors/jquery.min.js","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-08T23:17:18.022917Z","times_seen":134033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/owl.carousel.js","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-08T23:21:05.749194Z","times_seen":11055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b53f6fc7a63c5d94c652b333e3723a95","sha1":"8f84945e123e6aafbb4ebb64a0e6569d79786b55","sha256":"f71cbfdff3ca91729a765e3324d15b75058c3694edd148141fec720b5a66d3d5","sha512":"c2e50a825bc104de3f8e036b96e305b3b0d596199f60e7281ef437438fcd10c24ec8af354c44678e8695c72e1ab9c685288db0699df9308ba41b25aad946156d","ssdeep":"","tlshash":"57111655f7a7791dc97b26fbfafb478c3a7452433882ca04340c55c0df11b21e969868","size":929,"data":"","first_seen":"2024-06-08T22:58:21Z","last_seen":"2026-05-17T03:10:20.28769Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"754a2d1fec9ddbaf2bac95f0ab4d10cf","sha1":"540a06732c5f52a5b22372b5ac2af8dc60d7a79a","sha256":"a51401f84ed04fe60cabc3c43059a6e322accf20cf870c657bc7a59d700650d8","sha512":"44e1256fc79342c7173e77313b5e5b1107bafc88a3f62ba598510ff7d183759683c57bb9310ad33a7bbf009d2e40ae3f05dcee96905cd2363d6616d9dd66021b","ssdeep":"","tlshash":"76c0c04833e32803c23ff03335370148243501077a0fc380b80c83c00f435002c8a2c0","size":184,"data":"","first_seen":"2024-10-06T09:20:52.44589Z","last_seen":"2026-03-27T13:45:19.418172Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ce72575f47a08684a7c449c44239f91","sha1":"9339bf387083d1217a981783c2e282dc9e5fcaa2","sha256":"d86ef65721b621924721579ee0578ea0b17f1d7493f2b17cf3670c735e8881a7","sha512":"43aa059c3189b2bea0c64b4f5c0557feae6eef6881be8d2fc26b8823e9e5ff6ed49703c083ff715f2cf06b474084ddc9f91fd93b334ba41d2e9dd044a96694a4","ssdeep":"","tlshash":"6bc08c0cf17a334212f320badae7200a24bb20243504ca94327a88520f2533f2d2b847","size":158,"data":"","first_seen":"2024-07-07T19:48:06Z","last_seen":"2026-03-27T13:45:19.419186Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/style.css","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help1.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 22:56:28 GMT","end":"Sun, 31 May 2026 23:55:11 GMT"},"fingerprint":{"sha1":"26:E0:B9:21:7E:95:85:55:F5:D7:65:1B:36:C6:41:A5:B2:0D:52:E3","sha256":"77:8C:1E:CC:1D:28:AD:61:98:B5:55:11:6C:06:19:4C:1D:08:3A:A4:81:93:35:52:A2:87:63:2D:45:A3:CB:B4"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: konf1rmasi-hadi4h10jut4.help1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Mar 2026 13:06:43 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ju7WGK8pO03DJEabfI6zlmH%2BWXr91gSX5V2UurVz8KfLfUhb3kh%2BSyknPM5C2HvjX2jx%2BN0mTtOvrrSNL2EvR5%2FQthAmHaRIYq0CsCpMtgWk%2BrOlhAm7fAmpoj1Ip2FdGYG%2BD4hH70avCvwOG6BuOziRHV%2F0\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2e9d289ba476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T23:15:55.178465Z","times_seen":39341,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/assets/owl.carousel.min.css","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OwlCarousel2/assets/owlcarousel/assets/owl.carousel.min.css HTTP/1.1\r\nHost: owlcarousel2.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 20 Apr 2018 13:22:52 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5ad9e9ac-d17\"\r\nexpires: Fri, 27 Mar 2026 01:17:31 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6C06:2039B9:16B1986:16D5E27:69C5D853\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774616803.734406,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: dfbab8e065fe0f4c6d9de0180428cb5728fd9d23\r\ncontent-length: 1068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-06-08T23:12:12.186018Z","times_seen":38630,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":62,"dns":4,"connect":26,"send":0,"wait":148,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/vendors/jquery.min.js","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OwlCarousel2/assets/vendors/jquery.min.js HTTP/1.1\r\nHost: owlcarousel2.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 20 Apr 2018 13:22:52 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5ad9e9ac-1538f\"\r\nexpires: Fri, 27 Mar 2026 03:34:49 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: F6B2:3437E2:10AB59:1100CC:69C5F880\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1774616803.733953,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ddc5fcf4fcec76b4904c570bf288f0e5819968d4\r\ncontent-length: 30544\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-08T23:17:18.022917Z","times_seen":134033,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":58,"dns":1,"connect":26,"send":0,"wait":154,"receive":4,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/owl.carousel.js","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OwlCarousel2/assets/owlcarousel/owl.carousel.js HTTP/1.1\r\nHost: owlcarousel2.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 20 Apr 2018 13:22:52 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5ad9e9ac-15f88\"\r\nexpires: Thu, 26 Mar 2026 01:14:36 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4C34:303C2D:D673A8:D88DB6:69C48624\r\naccept-ranges: bytes\r\nage: 315\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1774616803.710631,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d2aab5fb9e914b021e95a52b0aa688a59835dc79\r\ncontent-length: 20465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":89992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-08T23:21:05.749194Z","times_seen":11055,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":33,"dns":3,"connect":17,"send":0,"wait":15,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.m.dana.id/resource/danaweb-v2/hero-personal-bg-back.png","fqdn":"a.m.dana.id","domain":"dana.id","tld":"id"},"ip":{"addr":"43.159.95.39","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.m.dana.id","organization":"PT Aliansi Teknologi Indonesia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:0E:DF:54:BD:17:9B:5D:5E:8B:65:B7:F5:7E:68:05:BA:96:29:2D","sha256":"4B:DA:24:48:A9:57:6C:42:70:11:52:D6:2B:09:EE:86:48:8E:4A:91:7A:A8:9E:CB:CA:D6:15:9D:40:C2:A3:A8"}}},"request":{"raw":"GET /resource/danaweb-v2/hero-personal-bg-back.png HTTP/1.1\r\nHost: a.m.dana.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 04 Sep 2023 05:09:04 GMT\r\netag: \"8897CD690A456D4772969C456C4B3618\"\r\nserver: AliyunOSS\r\ncontent-type: image/png\r\nx-oss-request-id: 677C6608B7B3B43036C479CD\r\nvary: Origin\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16645004155246917065\r\nx-oss-storage-class: Standard\r\ncontent-md5: iJfNaQpFbUdylpxFbEs2GA==\r\nx-oss-server-time: 24\r\ncontent-length: 262679\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ndate: Fri, 27 Mar 2026 13:06:43 GMT\r\neo-log-uuid: 8472684003134141733\r\neo-cache-status: HIT\r\ncache-control: max-age=259200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 840, 8-bit colormap, non-interlaced","md5":"8897cd690a456d4772969c456c4b3618","sha1":"37424fedf0cf5f87b501c65ee26316da17b40b4e","sha256":"8d7aef89df5aa26fab6f1049d29067638b044525ff6738d4b5893b814129b162","sha512":"cfe2f88c35d5c9dfb943861ed5dabf53c5b068583711ff36d19b99e947dfe7e3c9a1a6e5de98283ef515b01f4bdd740b3b24177b8a6d2603f243a3a6476b7d1f","ssdeep":"6144:fyMXOikvtfAJVGQI4x5udvUf652+HeamIj4RQWWfvX97m:fj+ikvmVzXutUC52qeaR8RrWfpm","tlshash":"844413fd44a9c64aee9859a69817e9b3ec12d35f1f432ff0eeb56a6744460d4cc8c20c","first_seen":"2024-06-08T22:58:21Z","last_seen":"2026-06-06T13:50:20.938421Z","times_seen":1146,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":144,"dns":96,"connect":20,"send":0,"wait":25,"receive":50,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8hbZEfutKvr9pkj0-mkJYWt-1SBtt3gw-HFOEZc0172okrp0SFHLaW3PRGVDm1U0P7WWEMELIw4nlq1_1gCgyZBo3cxf-OJNpguNamdJryCkGU-hTHiW3RyOv5JD9eIjXTFtrJFCVn0ae4RxG4Oi-czAP20tEaJI3OstxFAbtOwtFxp6RvOHc6NZL/s1600/load_bg.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi8hbZEfutKvr9pkj0-mkJYWt-1SBtt3gw-HFOEZc0172okrp0SFHLaW3PRGVDm1U0P7WWEMELIw4nlq1_1gCgyZBo3cxf-OJNpguNamdJryCkGU-hTHiW3RyOv5JD9eIjXTFtrJFCVn0ae4RxG4Oi-czAP20tEaJI3OstxFAbtOwtFxp6RvOHc6NZL/s1600/load_bg.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v60c\"\r\nexpires: Sat, 28 Mar 2026 13:06:44 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"load_bg.png\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 13:06:44 GMT\r\nserver: fife\r\ncontent-length: 7768\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced","md5":"73e8db089b44db8c0d3d94a08a79afdf","sha1":"d26bacfa0128237d7c40396dbd2b36e6456cb9ab","sha256":"9f2f502509f3cdd2e98dc540b4f7dd57a7962524012e0210e1ef64cee17d79ae","sha512":"dcc40660bfcc5ad0487f0b4358162df994fe2d2f0595843e2a23f50481b0c84065679bee7b9b91c14577be307ad8a174fb290e1fff19ab4ecb90e8865c95bd8c","ssdeep":"192:gAmxmMNMVyKcf5x7XYiM092dkDKG5zRNNWdz/FwxqO:gAmx3MYbxx8iMzGF1RyFo5","tlshash":"91f1bf5b007e949622c0174999588c5082ece3df0153b0ce15d0de7a295f7befe3daa3","first_seen":"2024-05-04T06:31:24Z","last_seen":"2026-05-27T07:15:56.366582Z","times_seen":1526,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":121,"dns":8,"connect":37,"send":0,"wait":331,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 11540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 00:57:35 GMT\r\nexpires: Sat, 27 Mar 2027 00:57:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43748\r\nlast-modified: Sun, 15 Sep 2019 17:10:09 GMT\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"45525a4e10b53535c2f0a134aec2d0fe","sha1":"8689b23fb445fab7c8f3f92f91eb8606a5a51959","sha256":"0546f98f9019a3d2afbe9372ba08aba895e2aa716bd0fec8e78ff5879162f134","sha512":"9065c80f6d41caf354ab957f724ab2e3102fb1bedddfa9503d76f2c19c418695ecfbcba1d54be82359b2341b242d746510241fa6910b1dd4f20c727b63845311","ssdeep":"192:I1PWG4+OxCPAq2CWPfxoZ3s3G2fJOz3PZ8IrfD45R:IlF/OxCP/2BFtwrR8Ir745R","tlshash":"c6326b6bff43a122cd08d336ddeb56183b3355ad815c0582d78d426094ab7a7eeae4c0","first_seen":"2023-07-12T15:04:13Z","last_seen":"2026-06-08T18:15:27.256918Z","times_seen":2081,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":1,"connect":31,"send":0,"wait":9,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/meyer-reset/2.0/reset.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 333\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03f23-305\"\r\nlast-modified: Mon, 04 May 2020 16:13:23 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 185206\r\nexpires: Wed, 17 Mar 2027 13:06:42 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdRE%2FGl325hDjScDlrWj7Ee6Bl0E8lo12RoC2D6Sus5ay0wfCF2pU%2FSE0rAN3s36ckl5BI%2FOi5HdYIwv%2FeNTvFcc7Ls6IeE8kIH%2B0HuiZir52O6MpvZhUWjYoMRDGNOgZTgIrg3h\"}]}\r\ncf-ray: 9e2e9d28a819c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":773,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (773), with no line terminators","md5":"93e42565f156d067f72108759177a957","sha1":"19b2c8de419fbd69c38971ac4923e7636edda182","sha256":"82f1278f66b192a223e306d884f8db595ef3b6d829cc1544807b9bf40019403e","sha512":"3662e40c85350bf0bcf308b7db81c173e4b690b862d3c3cde460de5155550bf055b7ff48cddb1cf5255e55f0355196d8dec1d49434b2457842cc77ebea198f3f","ssdeep":"","tlshash":"ba012078532135d48fb747756704d6a1c0214302980446f8f426c21b9ded07fa8f0fe8","first_seen":"2023-04-06T08:41:04Z","last_seen":"2026-06-08T22:03:09.367477Z","times_seen":2686,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/assets/owl.theme.default.min.css","fqdn":"owlcarousel2.github.io","domain":"owlcarousel2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OwlCarousel2/assets/owlcarousel/assets/owl.theme.default.min.css HTTP/1.1\r\nHost: owlcarousel2.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 20 Apr 2018 13:22:52 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5ad9e9ac-3f5\"\r\nexpires: Thu, 12 Mar 2026 04:15:56 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: 3AE8:B7C64:E23651:E4D63D:69B23BCF\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774616803.719674,VS0,VE132\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7f83b6ecaf36548bd50ea5ef726e8ec32a665e0d\r\ncontent-length: 479\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-06-08T23:12:12.17588Z","times_seen":23679,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":45,"dns":1,"connect":14,"send":0,"wait":147,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dana.id/_nuxt/img/dana-logo.fe46647.png","fqdn":"www.dana.id","domain":"dana.id","tld":"id"},"ip":{"addr":"23.214.96.70","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dana.id","organization":"PT Aliansi Teknologi Indonesia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 21 Apr 2025 00:00:00 GMT","end":"Mon, 20 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:42:83:80:F8:4B:59:F5:0D:5A:4E:BA:71:E5:B9:A9:8A:61:75:24","sha256":"6D:7B:BC:7B:5B:3B:00:22:95:91:84:1F:37:1A:D6:68:51:EC:31:E6:03:79:60:B8:5D:EA:92:3F:1D:B8:39:63"}}},"request":{"raw":"GET /_nuxt/img/dana-logo.fe46647.png HTTP/1.1\r\nHost: www.dana.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 12786\r\ncontent-security-policy: default-src 'self';frame-src *.google.com *.youtube.com a.m.dana.id bytedance: sslocal:;img-src https: 'self' data: a.m.dana.id analytics.tiktok.com;style-src 'self' 'unsafe-inline' *.dana.id fonts.googleapis.com *;media-src 'self' *.dana.id blob:;font-src 'self' *.dana.id data: fonts.gstatic.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.dana.id app.link cdn.lr-ingest.io cdnjs.cloudflare.com *.google-analytics.com cdn.jsdelivr.net static.cloudflareinsights.com googletagmanager.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflare.com unpkg.com *.go-mpulse.net analytics.tiktok.com;connect-src 'self' dana.test *.dana.id *.branch.io *.zendesk.com *.google-analytics.com r.lr-ingest.io stats.g.doubleclick.net *.instagram.com *.googleusercontent.com *.google.com *.gstatic.com blob: analytics.tiktok.com;worker-src 'self' data: blob:;form-action 'self'\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: origin\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 Dec 2023 15:07:17 GMT\r\netag: W/\"31f2-18c44d19c88\"\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 0, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\ncache-control: public, no-transform, max-age=7776000\r\ndate: Fri, 27 Mar 2026 13:06:43 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=544, origin; dur=0, ak_p; desc=\"1774616802806_399869508_2079531691_54327_19210_0_74_11\";dur=1\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-grn: 0.4486d517.1774616802.7bf322ab\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 382 x 112, 8-bit/color RGBA, interlaced","md5":"6fd5a7d18a8f7c04bc5effcdc5235987","sha1":"c4852c577f44fcdf78fb439a30ea2c6c6983b140","sha256":"c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853","sha512":"13e05a6f89b8110f1867efbbc6a7bf216471ff5cad3739ac3c34e30aaed670844ed8de5b220eb449b174a272bcabef07a96f13f936a34aedd754e6a8ed3cc991","ssdeep":"192:olyA9pk9pGYsPVMm80Y0xf43FmSqf6x0LUYMTo2OZ9:olyA9pk9kYaV+0t43Tqf6KU/82Of","tlshash":"2642cf03f9de13005f6a367eaa2500be41aadd795a8905a2666c6c2ec177700ff988c9","first_seen":"2023-06-26T01:49:46Z","last_seen":"2026-06-08T18:15:27.260545Z","times_seen":3523,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":123,"dns":52,"connect":1,"send":0,"wait":565,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhW-3Xsq1r5wVb5r0tfUzFr9KzB9hy1r0-W4GkBcDTnYujbw_NNeMWw-l8MZCk4RYNJpcSZRf5tv-TPa5HnYvv_x-EzticmLwx1vO4bIlqTJAiyk4-i96QjCFlPHT8BMy9nF15ISyjxVVOz2DAv8osBBR9onrE3lJf96Vw5erolKuss9ZrTFAFhoJAU4Js/s1080/1704436332522.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhW-3Xsq1r5wVb5r0tfUzFr9KzB9hy1r0-W4GkBcDTnYujbw_NNeMWw-l8MZCk4RYNJpcSZRf5tv-TPa5HnYvv_x-EzticmLwx1vO4bIlqTJAiyk4-i96QjCFlPHT8BMy9nF15ISyjxVVOz2DAv8osBBR9onrE3lJf96Vw5erolKuss9ZrTFAFhoJAU4Js/s1080/1704436332522.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vdf7\"\r\nexpires: Sat, 28 Mar 2026 13:06:44 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"1704436332522.png\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 13:06:44 GMT\r\nserver: fife\r\ncontent-length: 92417\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 257, 8-bit/color RGBA, non-interlaced","md5":"308e72b3c3aa9f905512213b7401fef5","sha1":"24841800ed2f3001374a33d8ebca69dc51ab5c14","sha256":"00126c88e5f527e92a6095ca9dc1daa3cde773531debdd68257550f1eb99b638","sha512":"bc914c8613cd8fd4ea13a0e13ff8458d6356747de6cce2da96e8a6aa637b3cd8ca95899666521a06ee86f4a5b948bb90f389cb49d8c331c77ee06cc151c30662","ssdeep":"1536:VlCQIhAKjBq4mzq6XebYeytX88gIadI8BHTeUkkxvKztncueSIp/cMNOb2V3z5nQ:Vlh+x5jkfS2s6kEF45M2xzDRg","tlshash":"5a93029772fe8407142462d8f60e8fca62949c73b5af46573cedd85842a3f9670af211","first_seen":"2024-05-04T06:31:24Z","last_seen":"2026-06-07T07:19:38.166175Z","times_seen":1357,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":111,"dns":5,"connect":37,"send":0,"wait":254,"receive":38,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 11540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 00:57:35 GMT\r\nexpires: Sat, 27 Mar 2027 00:57:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43748\r\nlast-modified: Sun, 15 Sep 2019 17:10:09 GMT\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"45525a4e10b53535c2f0a134aec2d0fe","sha1":"8689b23fb445fab7c8f3f92f91eb8606a5a51959","sha256":"0546f98f9019a3d2afbe9372ba08aba895e2aa716bd0fec8e78ff5879162f134","sha512":"9065c80f6d41caf354ab957f724ab2e3102fb1bedddfa9503d76f2c19c418695ecfbcba1d54be82359b2341b242d746510241fa6910b1dd4f20c727b63845311","ssdeep":"192:I1PWG4+OxCPAq2CWPfxoZ3s3G2fJOz3PZ8IrfD45R:IlF/OxCP/2BFtwrR8Ir745R","tlshash":"c6326b6bff43a122cd08d336ddeb56183b3355ad815c0582d78d426094ab7a7eeae4c0","first_seen":"2023-07-12T15:04:13Z","last_seen":"2026-06-08T18:15:27.256918Z","times_seen":2081,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":8,"receive":2,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kementrian-daerah.c1.is/sound/danalover.mp3","fqdn":"kementrian-daerah.c1.is","domain":"c1.is","tld":"is"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.714Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sound/danalover.mp3 HTTP/1.1\r\nHost: kementrian-daerah.c1.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Varela+Round\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:42.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Varela+Round\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 13:06:42 GMT\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7030baf9622c0b3199d41d569f40e464","sha1":"43bb431ac4463820acc2d454391adbbd9ac04b23","sha256":"82fc687436a6cfe6ea556a48f3760c7be5a5de4d908dfed33a0dbd69b5bb207f","sha512":"ceedd567e433447e39f4ad218bf4f1ebc09a703b5618f27df4c89fe46e0b6dd003ebf6b8cb6186bff66541d74827d8a016d9bb53232f4c31e232357e4b7edc7a","ssdeep":"","tlshash":"d531c1a01417a504db930ce523ce7e359d4fa2506460d5796ffe2c9dacaac29731570d","first_seen":"2025-09-12T07:40:43.547603Z","last_seen":"2026-06-08T18:45:45.585091Z","times_seen":1157,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":97,"dns":4,"connect":20,"send":0,"wait":43,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl9xJVYWF_a9vAhgW5QQgozvZVADTaJgIX64iO7a5sQuMpSoPBK3zfKjvT6xc9fZPfxZz39mjk1H_oZOOOtYvO1l7DkWNqiD5LJyGYdwDNyHuyqLk_Ix6eFs3aLCG2yUXVwtsnj0BXTA40WZmecyLyCIm_ff0xNkkOvkuKBOl6yfS-QjI_EJrIyGtU/s1600/load_spin.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhl9xJVYWF_a9vAhgW5QQgozvZVADTaJgIX64iO7a5sQuMpSoPBK3zfKjvT6xc9fZPfxZz39mjk1H_oZOOOtYvO1l7DkWNqiD5LJyGYdwDNyHuyqLk_Ix6eFs3aLCG2yUXVwtsnj0BXTA40WZmecyLyCIm_ff0xNkkOvkuKBOl6yfS-QjI_EJrIyGtU/s1600/load_spin.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v60d\"\r\nexpires: Sat, 28 Mar 2026 13:06:44 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"load_spin.png\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 13:06:44 GMT\r\nserver: fife\r\ncontent-length: 4995\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced","md5":"a8ff786dd9e1d343f6b9249aee28c65b","sha1":"bdc8d6d4b906734a8df8850dc1a1ca8a0680fa74","sha256":"f386554dbf390b4ab08123fb5466f5d833c12de955344ce9ea722e1182cc473f","sha512":"8e4802d1b9f971facd7f1cf0a07379dc04d95e3963e508b80f176a7b1f040c507e45f75cd29c59778a478d9090398e91a8b0b52eaba91e444d0de66ff7315df3","ssdeep":"96:SlGAZchlFgcQWvWt3a+iJqYyv1GybaWutijKiac+tUilcX:LAZ8vWtqlA5wybxuvYgcX","tlshash":"eea18ef3afbd82376b37d4d118bd1066a0874481248b5780c1a892f7b58e427b6e4b9e","first_seen":"2024-05-03T07:54:04Z","last_seen":"2026-05-27T07:15:56.36483Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":127,"dns":7,"connect":39,"send":0,"wait":310,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konf1rmasi-hadi4h10jut4.help1.site/","fqdn":"konf1rmasi-hadi4h10jut4.help1.site","domain":"help1.site","tld":"site"},"ip":{"addr":"104.21.24.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T13:06:41.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help1.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 22:56:28 GMT","end":"Sun, 31 May 2026 23:55:11 GMT"},"fingerprint":{"sha1":"26:E0:B9:21:7E:95:85:55:F5:D7:65:1B:36:C6:41:A5:B2:0D:52:E3","sha256":"77:8C:1E:CC:1D:28:AD:61:98:B5:55:11:6C:06:19:4C:1D:08:3A:A4:81:93:35:52:A2:87:63:2D:45:A3:CB:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: konf1rmasi-hadi4h10jut4.help1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 13:06:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Nov 2025 20:19:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14rRo3guyA1kdenCBvEnvvm5iTeXpW%2B%2F8WWQaiwhztlVf4AgVsOoMUzp3PTnxZ0VPhAB5YsFSqocyX1RkdHk4OiDI%2FoiGArhlylhvyEeAyqg84d34qnDrWjov4gF8ZusyUYnUyG%2FDgdeXrTgv%2B1tA7DtL8pR\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e2e9d22aba70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":20107,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (541)","md5":"d71b99f73034d2ffefbd18c5f6d7c065","sha1":"6b28b67f5765235d930da06a0aa09d19377a6268","sha256":"f8261566c63fea0245b4336c3cc093c572bd155d5d76cc9c4df810d7ac2a1df8","sha512":"6fa3a5dfbbdb8bffe70db97f565c0b62d52f236b43ba0d9dde5d4baa2d46e2d5456b09a13c90d096f3399ecc9b186f6323b2cf5ba964d9a669d0801377d98577","ssdeep":"384:ZxFn/se76yWqfsmVFXDzS7sqmyj2aY/pYXGB4qCv:r6yWqEmVJzS7bzY/pyv","tlshash":"ab920896a5952404622385a13bef534c333c8103da0acd69b5fe3496dfc6bf841b7b99","first_seen":"2026-03-25T12:33:39.209289Z","last_seen":"2026-03-27T13:45:19.405376Z","times_seen":5,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":65,"dns":47,"connect":1,"send":0,"wait":750,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"konf1rmasi-hadi4h10jut4.help1.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/varelaround/v21/w8gdH283Tvk__Lua32TysjIfp8uP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/varelaround/v21/w8gdH283Tvk__Lua32TysjIfp8uP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://konf1rmasi-hadi4h10jut4.help1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 09:43:31 GMT\r\nexpires: Fri, 26 Mar 2027 09:43:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:05:22 GMT\r\ncontent-type: font/woff2\r\nage: 98592\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22948,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22948, version 1.0","md5":"43868dd7e63c31ae25f8d773cfdb7a3a","sha1":"9830ded0c45de18a5788051a7f3b0feb0e10d78a","sha256":"03871f86c86fc776f89d0cb947502f3957181b63327fecaec724bc39d082319f","sha512":"5e9658d210f7f014d01f5172f4991f3e74ab92cf388e2ebed096acc5433971b4208cfe4b1c557bf0682afe12b32c30953cea3c3cb2a61e8883154d04c20691c5","ssdeep":"384:JfPEir4qwsJ/VUGPRFa0g2eakI+LuL+I8CAdDPshYEC2tOo8jAjO:JfPEPsoGYjakD+ZQAOE+1KO","tlshash":"bca2e12dba19bea54fae36ed22d71619009e1dadf118d01cd99d29b30fb4733930c994","first_seen":"2025-09-11T18:45:47.841169Z","last_seen":"2026-06-08T17:56:22.521632Z","times_seen":7252,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":83,"dns":0,"connect":19,"send":0,"wait":16,"receive":5,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kementrian-daerah.c1.is/sound/danalover.ogg","fqdn":"kementrian-daerah.c1.is","domain":"c1.is","tld":"is"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.532Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sound/danalover.ogg HTTP/1.1\r\nHost: kementrian-daerah.c1.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kementrian-daerah.c1.is","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPOUbJXwCM2k8a4aIdZBLfvHp6DomaeAfcu8lj8_bJmZYf0fTcKnLSn-Jm1RYl6-B_i356o20zRHpKSszDEDllWMqNfWk9Q-rGSbmu218ToZRjKQbTpCp7tLTWvLuKLbGbuW3mEy13sEZiew682cgPTgruXDR134lsr8Soaa3dE0VEZDNPVCDNz3v-e1u5/s320/Gambar%20WhatsApp%202025-11-10%20pukul%2018.01.19_f74da231.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgPOUbJXwCM2k8a4aIdZBLfvHp6DomaeAfcu8lj8_bJmZYf0fTcKnLSn-Jm1RYl6-B_i356o20zRHpKSszDEDllWMqNfWk9Q-rGSbmu218ToZRjKQbTpCp7tLTWvLuKLbGbuW3mEy13sEZiew682cgPTgruXDR134lsr8Soaa3dE0VEZDNPVCDNz3v-e1u5/s320/Gambar%20WhatsApp%202025-11-10%20pukul%2018.01.19_f74da231.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v9b\"\r\nexpires: Sat, 28 Mar 2026 13:06:44 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"Gambar WhatsApp 2025-11-10 pukul 18.01.19_f74da231.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 13:06:44 GMT\r\nserver: fife\r\ncontent-length: 41966\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x249, components 3","md5":"aa965274c3e0f61e065ec2f1310a1eb8","sha1":"50547219cf8350086fdfb327d48ca15aa83382bb","sha256":"0ff4ce1e2557e5ed5c10ed430fc6a81cafddcce4dfbd960c2b360f362fab5b04","sha512":"651bb2eaf37a1f1a7529e6a12fba711534a38c478f74d6a958c4ec28bf9a4b1b7f97a58804cefb3256d9cab8f99c170732bd8c02c7f9e72495c744e59fdc7841","ssdeep":"768:hBwova291YnnJvPSzB8ucqSEXct/+wCB1jYB0bix:hBdJYnRqzB/cqSEXw+QB0bix","tlshash":"aa13f293f59dac159681877c6a2fac50aa2280fe333accbd5dc1554041c0a62c77cedb","first_seen":"2026-03-25T12:33:39.228075Z","last_seen":"2026-03-27T13:45:19.412845Z","times_seen":5,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":107,"dns":9,"connect":22,"send":0,"wait":662,"receive":17,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHG8bz71IvIJl3PSWe5SPQf2uqQRQd7iX915m31vSQDrIrovNA6ILfIsJj7ePkpIAgn7SBUDGkNctPgm1V0Wj1g1NZCq50Ayw-2r8S0ekfxNwrUpaZ_3rDwwk46KJ8T6ro1LZDWKkFXKdQoV-TGaaFrytMF_60ahkXcBghNf5oSjwqA01os0L4TqOFPx4/s2000/AddText_04-03-07.31.42.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konf1rmasi-hadi4h10jut4.help1.site/","date":"2026-03-27T13:06:43.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhHG8bz71IvIJl3PSWe5SPQf2uqQRQd7iX915m31vSQDrIrovNA6ILfIsJj7ePkpIAgn7SBUDGkNctPgm1V0Wj1g1NZCq50Ayw-2r8S0ekfxNwrUpaZ_3rDwwk46KJ8T6ro1LZDWKkFXKdQoV-TGaaFrytMF_60ahkXcBghNf5oSjwqA01os0L4TqOFPx4/s2000/AddText_04-03-07.31.42.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konf1rmasi-hadi4h10jut4.help1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v138b\"\r\nexpires: Sat, 28 Mar 2026 13:06:46 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"AddText_04-03-07.31.42.png\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 13:06:46 GMT\r\nserver: fife\r\ncontent-length: 1909109\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1909109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1077, 8-bit/color RGBA, non-interlaced","md5":"9323f42faf0ebfaefcbc91cd4b00a77a","sha1":"8eb7cdb8b4eece0d5c5b1e97a6b9cb9723cb5a14","sha256":"49a9564d70374822bce7b35c91f92fe47771465ff5e50381453ba067b1ec5e8a","sha512":"3ef94270d72e59a335827549b608cf966036a6b0645df870e69886ba8562458654dc5e4f2ae7a4fa14770653ee566cde4e26ee0390716f8c94f872c35e4269f8","ssdeep":"24576:nBs0gRGrK5KWr2Oono+GcwX0I62eRGrsHsuSklPg:nqkrl62OqoZrX0IL2GrsHsuSGPg","tlshash":"cc252302c4da1a7797120ce2bf30dc14925280b949f8ab706e1fd6b875964de2d49fef","first_seen":"2025-07-26T23:06:34.1514Z","last_seen":"2026-06-06T13:50:20.938862Z","times_seen":137,"resource_available":false,"data":null}},"time_used":3006,"timings":{"blocked":157,"dns":2,"connect":21,"send":0,"wait":2519,"receive":165,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}