{"report_id":"5cf316b9-db5d-4a5c-9096-9c2ffbe831be","version":0,"status":"done","tags":[],"date":"2026-09-16T19:43:54Z","url":{"schema":"http","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"title":"Kode4d - Area Game Hiburan Online Banyak Peminat","dom":{"size":24821,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9925)","md5":"342c54dc438e1afec37e7acb69bdd447","sha1":"4fb225227d86b66b9ba215a11e39914b126678eb","sha256":"9dcc52ed000d3769349ddba5a4e4244bbe6d32b2d2b4eafaff4c45593ca5be2b","sha512":"da96445648319d37c0ce1d209ae4c897849544af581ccdcc3d99b7eb336e0e1a2a6a8bfb238bb38b761aaae9a1df2499bf406a53b6808226c6e85de5598f7d5a","ssdeep":"768:Ca4fyjl3V1ucWSsuyjgKigu9vKYEgYkGN3z:74fyjl3V1uzhuySyYEgYkm","tlshash":"dbb2e073a8031c6b660be4909923030eb176d607d6074e157bfd6398efebc61944bade","dom_hash":"domhash96e81e7c4d0d56d010971405647bd074","first_seen":"2026-09-16T19:44:01.892651Z","last_seen":"2026-09-16T19:44:01.892651Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:43:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ads.mythad.com","ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2021-01-27","domain_rank":101206,"first_seen":"2024-05-27T02:50:53Z","last_seen":"2026-09-10T07:29:36.073942Z","alert_count":0,"request_count":7,"received_data":7255,"sent_data":4201,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rekemonedasi-facebook.org","ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-09","domain_rank":0,"first_seen":"2026-09-16T19:14:48.750507Z","last_seen":"2026-09-16T19:14:48.750507Z","alert_count":66,"request_count":22,"received_data":2368816,"sent_data":12479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"logsdk.kwai-pro.com","ip":{"addr":"23.214.96.85","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2020-12-05","domain_rank":100304,"first_seen":"2021-05-12T01:15:52Z","last_seen":"2026-09-10T07:29:35.591036Z","alert_count":0,"request_count":3,"received_data":985,"sent_data":1770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-09-12T23:01:51.506796Z","alert_count":0,"request_count":9,"received_data":47094,"sent_data":5271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"s21-def.ap4r.com","ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-04-02","domain_rank":393345,"first_seen":"2025-05-24T06:53:35.70276Z","last_seen":"2026-09-11T19:17:11.279033Z","alert_count":0,"request_count":3,"received_data":388633,"sent_data":1574,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"assets.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2026-09-16T03:21:06.002449Z","alert_count":0,"request_count":5,"received_data":664670,"sent_data":2654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fkupon.com","ip":{"addr":"172.67.161.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-17T05:54:40.927007Z","last_seen":"2026-09-11T23:26:00.879586Z","alert_count":0,"request_count":3,"received_data":50515,"sent_data":1566,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"sorkale.online","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-11-04","domain_rank":5023068,"first_seen":"2023-11-04T08:51:09Z","last_seen":"2026-09-16T19:14:49.426626Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":9,"received_data":236800,"sent_data":5357,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.viva88athenae.com","ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2026-09-11T05:42:52.878644Z","alert_count":0,"request_count":85,"received_data":1479174,"sent_data":47562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":3,"received_data":43760,"sent_data":1644,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.sportnanoapi.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-06-26","domain_rank":1797884,"first_seen":"2019-07-05T21:54:51Z","last_seen":"2026-09-12T06:09:19.759403Z","alert_count":0,"request_count":20,"received_data":0,"sent_data":11880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":7,"received_data":791997,"sent_data":3804,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hambagugel.site","ip":{"addr":"104.21.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-19","domain_rank":0,"first_seen":"2025-07-01T04:29:27.876955Z","last_seen":"2026-09-16T19:14:49.423268Z","alert_count":0,"request_count":1,"received_data":34917,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-09-16T19:44:01.917926Z","times_seen":1978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=668731d4e0077a03b40f0b5e","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc66117f4cfc0ff65fbe3d1f8d31cfff","sha1":"4b7b5f06e17714404fc57ed6823db04c02f1fab1","sha256":"2100021002bc5c92fcfe5a958b4aa222f2fecbefbd9992537c694b6a41dc9bac","sha512":"5344698116a246b110df1c3db69fc1981e01949cc90afe1de4c1dc8aa322612ec4c8b5a47d3d864f30ab4f620fa0f25c6c7e191a06f493f939d40c5c3af058b3","ssdeep":"","tlshash":"2ee06105d6c50a964f20763a6f0727a6786f53224b40ebac7871d9202416c8011a4c7d","size":383,"data":"","first_seen":"2026-09-16T19:14:57.524417Z","last_seen":"2026-09-16T19:44:01.950402Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f8c78e627ba32289bb6d1d56041e83","sha1":"2dd4b719e2a7343c7c86489695a6a96542ad6b63","sha256":"7d9cf702cbbf9bda1c7da54e35c441b3fc98c554896764e9e8e7fdbffa002a85","sha512":"c3fe3d84d21902e25675571480cf7ad679cbf684e6da539bebb3d6748c35d97760879d5c7ee79ef7e7358467f52da026f5858ef9a15dfe00416e111e6e8a2642","ssdeep":"3072:4AmErvTbau2SgDfKjcqbvyD5h4rnTTx3nulpgWc4hm/Mq:4A/75gzKjcqbvyD5h2TTx3aSWhm5","tlshash":"fb64e8c9b6d6b02143a7a4b9803f210ab33f7a19744c8450f666d9d17c79a4fa223f7d","size":320533,"data":"","first_seen":"2026-09-01T03:17:15.44051Z","last_seen":"2026-09-16T19:44:01.932456Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/checkPixel.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"523690b85542492df36bff5dc5e1ded1","sha1":"73583f8751e3dd15bc0e5c688e4633780d8b8ad8","sha256":"b0387e30bfcc545403e6fb7f4c9ee2b46261776396a4290a7fc9f24848b32888","sha512":"8943a9275afa000cab34eb188fc655ca9040f0bb781805f939a958ab2ada29ed073353b6fa91154112b7d4a0200f6645879d21df90c9b5582dc90248a0406c1d","ssdeep":"768:NxKdMQ3j4uVO8Rb86RxQChIR0R4aPssREGLbVcUdlRJmGoHRu:zKdMXvK9UcVce3D","tlshash":"543319cab686b06503b774f4883f210af33b7d29b40c5541e65aced16c68a4f9127fb9","size":54078,"data":"","first_seen":"2025-09-05T10:42:12.064864Z","last_seen":"2026-09-16T19:44:01.909926Z","times_seen":3510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-09-16T19:44:01.946302Z","times_seen":6139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","size":20322,"data":"","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-09-16T19:44:01.960335Z","times_seen":1249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/jquery.marquee.min.js","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","size":9052,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-09-16T19:44:01.901675Z","times_seen":1859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a391714a676f38e5dd665b00c45ba34f","sha1":"730846e16190da63d2a707de660c76131f86e8b9","sha256":"84668baec88ac1a7d37a7a16d4a79f4c94812291d02ab5427823df92fb326f92","sha512":"316efbf779579a8a3da2f3a71165705e360c952e586d1a3f97dc152a483298252c1a7a5f0b91ae4df42b03a2c9dd7680778fd21a7f4db2b77cbd80eda353cff1","ssdeep":"","tlshash":"91219772d1619a32049398f98e731b2e36ca820fd9038a491bfc475c4fcae98fc66184","size":1267,"data":"","first_seen":"2026-09-16T19:14:57.650247Z","last_seen":"2026-09-16T19:44:01.996998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f85a4d69a53a90271ce9da9332774444","sha1":"89cfb1a2dbece88d63b1d79934b5ba37c8f0cbc2","sha256":"73627aa69603a7e06fffa509b127dcbccd85b1990e0f108332645417e24b401e","sha512":"9450f186a1443819ea3e344d131a10428f79c1545d18fc6bfc6243824e3f12469a7d85bff62fca87175f62b38d7c4192af854d44f5e95980cfa1631574dbcdfb","ssdeep":"","tlshash":"5951764d3dacf45617a72435423f890ef23a143a086de88193a5ccf57c1ad9f4092faa","size":2536,"data":"","first_seen":"2026-03-12T11:18:55.196812Z","last_seen":"2026-09-16T19:44:01.997722Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2419d3d0089299c5180a8444eee0607f","sha1":"fdb05dd63b63edd09906954d455d6f9c070f67ff","sha256":"acb624bffd303268158eeecc1b12412d825fe1fe9c519a137fd206e96160c9f2","sha512":"bba57790ba85dacc2dc910cde82c9e7cdce27f992f9cbec09d0feaf2ac58bf4b47c5b82fbe1d685911e56ef4f759de3ae78fb58b23ba48c64d7baa49543183e7","ssdeep":"","tlshash":"fa90040750c544507170047f7fc4070011701fc7355431145405cdc5f433531fc13514","size":44,"data":"","first_seen":"2026-09-16T19:14:57.652142Z","last_seen":"2026-09-16T19:44:01.998316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfccbc10eb82ad629d9a7eb823b0362f","sha1":"66f386e62acfbed7aad8ece99c215b82fca6dbfe","sha256":"d28e773b90cc8cca40ac627c1dcb420d05ded3ebf4ede02b5b07e59bb8b17666","sha512":"df469f7d9774bc7e1096e9479e0fd003678d664deed7649ad63d4d66a4924fa676061e74302e3153c47627e86563ba48ab78188e5165bf514304057f2222b8d1","ssdeep":"","tlshash":"3a112e34e151063c2c57598e33e7819c76b880a7638ac92639ac9bd74fd1e413dbd5ac","size":920,"data":"","first_seen":"2026-06-26T16:06:12.080548Z","last_seen":"2026-09-16T19:44:01.998925Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6b9606dbf17c73925e2b9b1be0dc672","sha1":"3c44a9439ac74bb69ffe1ff647010531a3c81fcb","sha256":"bc4c026537a5f939b3bb4d7bd375f2d44f5946b0b61e80547a1ab23345698fef","sha512":"285519a422cd05fd6feb824f0069a0f866b7c1d7f2a0c3937c86df02cd0e7cdfee2fb6c08f9b61a61632ae19e963ec745c107ea339cf6889689f26e4c3763dd3","ssdeep":"","tlshash":"6bf0234c3c52b42337f93538c223cb6f3395070135839524c607cc2478604860856d4d","size":442,"data":"","first_seen":"2026-09-16T19:14:57.656596Z","last_seen":"2026-09-16T19:44:01.999591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6945775fd422a63038a501cfb2a107d2","sha1":"8cceefecc73f7e7c378c27ef7d772acb3a6f25fd","sha256":"17271d2b75bf794d3c7a23256f39e2d0d09abc58c3547e3eae1188423991c113","sha512":"4835b13d86efd399e2b16eb1cad07d92e35515d771d66dc6a616f358f6f10b6daf27c58a8ad52e27baaf94bf9f1344343d11a7771476416e603dae244f124a0c","ssdeep":"","tlshash":"7b1126241bb10220010af6869bc95750a23c416fa444dc1a7d6d56aa6fa2f1a22fceb9","size":938,"data":"","first_seen":"2026-05-25T18:44:48.045692Z","last_seen":"2026-09-16T19:44:02.000163Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aebc7df0b43ec66cd0b88b688ab6b8d4","sha1":"64ab7d42ade1cf7748f831984fbac32becfe7aa0","sha256":"d4837ef7a120e453d68b7b4722314ea2df2b0bc97e6a49b7cc69a8856a19a5d2","sha512":"8a4fbbe21e05579a0721e52af15818931ee665ae3f9491602c2fc8a2ed88fd680e635fe173668e2562af9acafa05a08921ca4a7ec26de2ce1ef53f8e1d5def4d","ssdeep":"","tlshash":"d641c52af1db0dd34027ace229fa8b5037584157644686123e7cd54d6f63d1b6c634aa","size":2131,"data":"","first_seen":"2026-05-25T18:44:48.046694Z","last_seen":"2026-09-16T19:44:02.000682Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04bf34dc81fce086262551479007cca1","sha1":"a11727628d476f7784af78d3d3ba28de5dad1bc8","sha256":"e29020a3bf787e35875b469b12e5aa3f787f31d2ec7b8575c2e4c09c3c2d33b8","sha512":"4a00c1fdb7d5c52fe3ee6f03dc7998ae05f95fb9e81d9330c5ba4025616f4a9a4a32bc3d0aea987353f0a7ec00dd283e21e5873830850443dd8e99b2666e1e39","ssdeep":"192:MdLXEAB7K0tHXdFVEm/38KwqgzLDXV69LVSyQgkc+HXSixyeNfuUMc+28fzmJZ6v:MBbttEm/JsbgHuQkPS6JE8rI6/e","tlshash":"4562ae9975b3706b4523e0fd4bdf8015a3248817210ccd44bf6c9706bfa6b64cef5a9a","size":14754,"data":"","first_seen":"2026-09-16T19:14:57.658786Z","last_seen":"2026-09-16T19:44:02.001552Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74df8fca7b4a6b069721f31fd1c296e1","sha1":"b069161e5ea882abcd3f75d402dc48c2a67bf5be","sha256":"543acdb3975d394e3f0125d19550bbb4fd38fa978740aa718223268d355710fd","sha512":"2740afb2ef84fb59504d243f09d020b3b095bd74f1ae38c422e5d6ed27325eecd61d6c2372b4bab650df92b92ea72f65cc6e8158db238790e7af033be15cde06","ssdeep":"","tlshash":"0dc09b5b637515314567555105eb41643410d18b1505581d3d6cc7724f338550756a84","size":140,"data":"","first_seen":"2026-05-25T18:44:48.048921Z","last_seen":"2026-09-16T19:44:02.002301Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"872e6511d6757e90f369dab2c880f578","sha1":"8a59d0ff2a09b3cef83157b8ddfc99b1b16fc5d5","sha256":"16283bf0109753392fa7dd7a0afff99c752474f3b107493e9532bea5d798c484","sha512":"5b80cc0acd460379a33ebf3fd050d9a97e843f340c20ea45e7707e158e1b94883721048aa8ee1f17353bd066fba38412e8e8815c0f88ee98d89cf6c27080cef2","ssdeep":"","tlshash":"76f0dc6d2c00117726463038a3fbc908b16fa2581345824585adec086d66ceacc08a2c","size":457,"data":"","first_seen":"2026-09-16T19:14:57.660432Z","last_seen":"2026-09-16T19:44:02.002819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"329716436da113d2050cc70a6a343c43","sha1":"0421d6aa39b6cdfd369386b49864ee69eae7e5ef","sha256":"42f703283baa244c801689e1382b87a8a87724f2bd22df4234e1bbf9b453c085","sha512":"49618da7deb8c76feadaf41133be6e25be9c278107379651e7ec06aaae432bdefdc6208658e266132218f8f5d68acbb548341c862e1f58dc4f0de5ed8c8434a6","ssdeep":"192:L9w28Od6wtvIEMViKSNilCMio7ifSWls0Zf:ZuEmuf","tlshash":"d5f18b2e41b71972486371f99b8f244431765003700dce993e2e5b016f96a2d9be2bff","size":7805,"data":"","first_seen":"2026-05-25T18:44:48.055365Z","last_seen":"2026-09-16T19:44:02.003497Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f14d215e3a010b535cf36231a6576122","sha1":"93842cb820683049cd3d75c0000024aa1bf1cbf9","sha256":"a22d756e9dab405063a75f694d0c7527fa398b8e2854b68ca1e8cff89dabb90c","sha512":"89826f800462e6645deb1cbc85a24125e9b65d3967cc21a7e052d9d1b9792a9e90bdf5b682e3002329f77a79f7e06595959e6a59f1362e020af41ffa354b5d8a","ssdeep":"","tlshash":"4871ef1af25705220acf69ba27e3078535b08447a504ca073d2c56656fa7fa7263abfc","size":3672,"data":"","first_seen":"2026-05-25T18:44:48.056367Z","last_seen":"2026-09-16T19:44:02.004225Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"184c2760f1a4a46c43499b0291123213","sha1":"ace8c50a50fb41a685a007a1ec28f0c71d54781a","sha256":"871a2af48a2b3d2bb194136682398f84bff809fce019735c49ee0741f0d55a62","sha512":"c690d8e14f4e98117bca5b8fbb0af9b5e44298e2e362052ed9df26ef605b1d34a5fe59e6817ca84a04a80baf2dc77cdc50812952967053641ff25ff7feb7257d","ssdeep":"","tlshash":"3c5140384959093110b3a17e2a6b8345a3ef906b141dec20febf47906f4dc1e47f29ab","size":2915,"data":"","first_seen":"2026-05-25T18:44:48.057271Z","last_seen":"2026-09-16T19:44:02.004724Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7b7e971f4e1297e0c6ad67ad2603d5","sha1":"858c6ac6c4a276b5f8e650455536176eb7ea53d3","sha256":"27d1ceaf74e5d68d32112cda2de5a96a3de6e74915655116d36e5b4eafe2b25d","sha512":"dc2dbb5afe0ae644eb1bd28c3f79ab034d5565c4fe512b8bd639134626f8bc3ee06429db7668e2bbe6bb13ef55251cf4a22943fbe3c3817dfdec350dab948101","ssdeep":"","tlshash":"61f0d8af36a1202581033257ae5ea80c306790072545cd223eec84816f90c363b39f6c","size":467,"data":"","first_seen":"2026-05-25T18:44:48.058442Z","last_seen":"2026-09-16T19:44:02.005283Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d944b4b541f75e4ae85c568214369c9","sha1":"b4544ee4f79975e1e4ba2c6ab35922a4a85e586c","sha256":"1fdd0eb738de830758a388aa930ad859fd7f26ae8c70ac338251da8785290565","sha512":"af42d6fce34594fd83232127d9a11f1ddbac58850d27782ae1b6a91c36845fd983c7ab337a9619fdd0079fdc176223a9ce7412c85bd36bd4c4b4a99b156176d4","ssdeep":"","tlshash":"10a012dc60b9a10402242b80495b415c301e5009310e3cb2000c0f04471045400c5114","size":84,"data":"","first_seen":"2026-05-25T18:44:48.059247Z","last_seen":"2026-09-16T19:44:02.005788Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/events.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3329a5ec1b38a59075ba8f306e2eb241","sha1":"2ffc991974976153830739483ba55a09fd820fe3","sha256":"295b10e04cf5ea7d4e35f3ea4e76016e92fe72f367065ee8aa741d47621662b6","sha512":"8dd23d108855e8b9d2a0b96d93c107a5217c33e0634df0dcf7dc0a8adf2296be7731f2bf22318314fbabd7dc64253b8c5913f8e9095c96902d24b700994b7db6","ssdeep":"192:3XAi3l4rl4/79Ox6XvyBQsE0BtFJ7ANpiAixlBOIDy8BPjkW/DK:3Xv14yVXXWJ7ipqxTE8xoSDK","tlshash":"1a320b9b34a5fd5413b164e01d7b760ab237666b064de310d22dc8e09c6cbcf622be76","size":11911,"data":"","first_seen":"2025-09-06T04:14:17.636582Z","last_seen":"2026-09-16T19:44:01.938015Z","times_seen":2170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/new2-webduo35.js?v=1789386874","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6141b3a762682ccf2c7542caab076526","sha1":"51cdd83fe752f708f63bc8e2931d9d4deae6f404","sha256":"f99373eca55238be9600ffe98ab94c537265f5efbe7ea13ffe8398c46b9ec395","sha512":"a27fefdc4c6f2918659eb18073bdfa4f5398b5f0707d46715e80a3866f08738a33f21ddde1586228f9229d01f4e9ec0a397821c10679fa22d495cfbbd8c1d9d8","ssdeep":"1536:BWBiYT7WqiYD/R4ihiYT/PniYT/tgihiYTX8Q8Y8o8sAMgmMuYUQ6cX:0oyR3ntv8Q8Y8o8dMXMJULcX","tlshash":"66539609fed90b831a7735a94a3f9040662d482be20fcf01f92d55c47f46665b2b2b9f","size":62643,"data":"","first_seen":"2026-07-30T00:37:18.670223Z","last_seen":"2026-09-16T19:44:01.992343Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"172.67.161.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d4fac90f1ae2655c7fe88786e48723f","sha1":"9de2d976a4516e1aa318393f2190da135c8f5906","sha256":"0c310f3043b3904e0c0e51371ef35e43faf73398492e2958a11f4969a3487770","sha512":"0cc67f1d0786a09f993efbce1c1d3707aa422f3d3d344846ec11be2bcd40715cf6fbbde9fd3080cab2d4caf9b7d7ce1f045a59a58c585044b622cca8d3872a08","ssdeep":"192:uueuH2zVnuKYEgYkGN35ZyhquNVaLrVaAt0+m:pZHOuKYEgYkGN38q4","tlshash":"91d1312eb9b310b6a973303d5baf510839725603210bcd347e8ea1984fe8816565efed","size":6206,"data":"","first_seen":"2026-05-25T18:44:48.060298Z","last_seen":"2026-09-16T19:44:02.006371Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","size":83508,"data":"","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-09-16T19:44:01.963202Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65cbf911501a0de13afb9d1cb71933cb","sha1":"e9236ab09f15becfa6d86aeb5995fc896f1aab1b","sha256":"e92027b36a47b6e3c2e1c084ac31e8e7e6a4b904bbaa42d241ccf7f4e48d7a62","sha512":"a619c7409dd01aa33de6a1eb397188a42da076126f727c119ed69455158ccff9421daec4d8135dfee4e719b1d62aa70bc767f4430238da97714805c43655cc35","ssdeep":"384:Brt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSLcg:MwXkPGdg7HnqhSTGlnLbcqwg","tlshash":"70c22c48b7e17d54435a34b3223f4a063bb51652545a3240f016c2e9bf78e8b91beeed","size":27399,"data":"","first_seen":"2025-09-01T08:05:49.861005Z","last_seen":"2026-09-16T19:44:01.927862Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/jquery-3.6.4.min.js","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-09-16T19:44:01.93081Z","times_seen":4234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"ksurl.cn/csHfgepO, radar:202","filename":"https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq","line_number":2,"column_number":206681}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v22/t5sEIQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4bxTDHg_ugnAakp8ubq8BIo1pdkkXZj4j1dvKMDV-NHWsOCA0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.633Z","timestamp":1789587794633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/googlesansflex/v22/t5sEIQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4bxTDHg_ugnAakp8ubq8BIo1pdkkXZj4j1dvKMDV-NHWsOCA0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 19:14:43 GMT\r\nexpires: Fri, 10 Sep 2027 19:14:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Jul 2026 17:07:13 GMT\r\ncontent-type: font/woff2\r\nage: 520111\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38316,"size_decoded":39129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38316, version 1.0","md5":"fb2b340e5d74a7d24758d5f6414c057f","sha1":"6acc51ea82fdba9de18dd7ea1b5e371e0203edbe","sha256":"6657698f2b72dfcef5f6b2a437051a575401d3cae4a3c8344b5dbd6ab07b8dd6","sha512":"152890bc4d3535a319e23c1f7c540214ac66775471cc6485776babd5e746b909fe118464f68a93812d7972f0c540fef1ed5214076ada31e9a9c9d79ba99b16a2","ssdeep":"768:ItfIwovw8MUdjLj+/0y/CLyKh1LtZBa2f1fhAlYdvSBYeBtbcWCJQinodtzYzM:IyS8MC/+/FwyKLc2ZJdv5eBtbc4ingn","tlshash":"fc0301cafecb9cb0ed69bb5268e2fe757e5cf3046124da242014b175d312d850c9ee16","first_seen":"2026-07-31T01:07:30.252454Z","last_seen":"2026-09-16T19:44:01.894841Z","times_seen":130,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/log/common/co/api","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.766Z","timestamp":1789587795766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"OPTIONS /log/common/co/api HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rekemonedasi-facebook.org/\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 0\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":424,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//banner-telegram-icon.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.505Z","timestamp":1789587793505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //banner-telegram-icon.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7976\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Dec 2025 09:30:09 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=15420\r\nset-cookie: __cf_bm=6oGaBoVAWSAAtzN7AcsgEyPBwxtHrvvetAWcfoaF0I4-1789587793.513226-1.0.1.1-BHstbWFTelZMKns7Rly1ZSgfaubumw9BnUINFNoIf9DPGWAaEnnv6I_ddghaUzKMOaYwH1VPm66LFVU9LKX5ixoy1sSXikfonpWBLg8kj.okQifubJiHvp_yUSVftQ9G; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2410\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd5e885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"6oGaBoVAWSAAtzN7AcsgEyPBwxtHrvvetAWcfoaF0I4-1789587793.513226-1.0.1.1-BHstbWFTelZMKns7Rly1ZSgfaubumw9BnUINFNoIf9DPGWAaEnnv6I_ddghaUzKMOaYwH1VPm66LFVU9LKX5ixoy1sSXikfonpWBLg8kj.okQifubJiHvp_yUSVftQ9G","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6oGaBoVAWSAAtzN7AcsgEyPBwxtHrvvetAWcfoaF0I4-1789587793.513226-1.0.1.1-BHstbWFTelZMKns7Rly1ZSgfaubumw9BnUINFNoIf9DPGWAaEnnv6I_ddghaUzKMOaYwH1VPm66LFVU9LKX5ixoy1sSXikfonpWBLg8kj.okQifubJiHvp_yUSVftQ9G; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7976,"size_decoded":8824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e588408298e0e7a9fd2e45c4e2c5aed6","sha1":"ea931c289857502fb811467ec6d0657bd780e2e5","sha256":"9607a2ba4e62a57317f6fa801fa328eb6839d4b01a3301c4e174061107124467","sha512":"8a4f9e85bc7647a0b8668d027cb01384fb7fecf9c486a93c555dc3d1da8e0f2988d7d7dcfb8d125d23fe99f7ad21ae4546142e9db007ae89f3e00896ee44ee8e","ssdeep":"192:fh3S32pVlH2FkDVnx1IsGAHHXAqkwnbDSQeIJiN:fDpV1eQn8sL3AbwnbLz4","tlshash":"e5f19f68670d2720954caf4e1d44ffc7abb01d2b4e6981a9f0d72a601d77ef6f001a58","first_seen":"2026-07-25T07:44:54.52275Z","last_seen":"2026-09-16T19:44:01.897024Z","times_seen":82,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.578Z","timestamp":1789587794578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 19:43:14 GMT\r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31524,"size_decoded":2862,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4f2640570b19cd02e230a1e588353b57","sha1":"18e3a79eecc4e94a12d7c21cf1731d902ad595f2","sha256":"e262742d339861016c891c917fa2f6dee41ae083cc013edb0f81a7e3a4c8291a","sha512":"7b1afacb69d5955b8a1c9192a421dfb97ffa00d5a2a24f22c3cacd5521730fa96bebb2ea1524b1bbf25edf1720485c320620f6d8a7ce2f4dd56d93d78f393224","ssdeep":"384:xLgkLgOLg0ELggLgcqY9LgB2LgjyuLgwLg7LgZRgkRgORg0ERggRgcqY9RgB2Rga:f8Y5gGoApxEM4","tlshash":"96e250d291165014878b58e133dd7e3ae90e41817600e17e3bfd1a5feccaea522f63ad","first_seen":"2026-07-31T01:07:30.239321Z","last_seen":"2026-09-16T19:44:01.897754Z","times_seen":120,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-kupon1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.352Z","timestamp":1789587793352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icon-kupon1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 536\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 09:12:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1461\r\nset-cookie: __cf_bm=f4GadHT0K3cAbWr6CLU51Q03SeXDGJdwkJyNDiCioQM-1789587793.3575616-1.0.1.1-ywZIi6_XfP3l5F_UraOKuyQSmW59nZKvGxdqBzfveUYB9O744Rv_aI2H4NW95TWLuNZwVRRBGIgtzqUcmoBkxEwd.z5a8p2Hp_Lotm60iCDAEPfh2Knmp3VM2N0OAsEd; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 4448\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc4a185a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"f4GadHT0K3cAbWr6CLU51Q03SeXDGJdwkJyNDiCioQM-1789587793.3575616-1.0.1.1-ywZIi6_XfP3l5F_UraOKuyQSmW59nZKvGxdqBzfveUYB9O744Rv_aI2H4NW95TWLuNZwVRRBGIgtzqUcmoBkxEwd.z5a8p2Hp_Lotm60iCDAEPfh2Knmp3VM2N0OAsEd","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=f4GadHT0K3cAbWr6CLU51Q03SeXDGJdwkJyNDiCioQM-1789587793.3575616-1.0.1.1-ywZIi6_XfP3l5F_UraOKuyQSmW59nZKvGxdqBzfveUYB9O744Rv_aI2H4NW95TWLuNZwVRRBGIgtzqUcmoBkxEwd.z5a8p2Hp_Lotm60iCDAEPfh2Knmp3VM2N0OAsEd; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":536,"size_decoded":1383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"675ca5eea33e82d22440358d48559ffc","sha1":"badb30484397d883881ade5782e22940b2cd4005","sha256":"10d939985e8cc3eb3aa7cde6b348ea339f3a320237c06a2d022031fc4f374cff","sha512":"2aa186d1268dc6c98b92cd6464fc9095fe06f1aa1fbc6f13b7e73936c695b3deba49dc88c317df78aba255c6741c23c06b0b8d148b72845d1a76f8e0750746f7","ssdeep":"","tlshash":"16f0202e37aff841df69e4045abacab3128881da860a6f3a52819baa20a0b00441350d","first_seen":"2026-04-14T04:32:54.911594Z","last_seen":"2026-09-16T19:44:01.899084Z","times_seen":1337,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ams.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.360Z","timestamp":1789587793360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-ams.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1260\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 05:20:07 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2282\r\nset-cookie: __cf_bm=pw_Jadk4h1MSyPS16r8nBv2_j_iJ4oHkP7NEVfxSAtA-1789587793.3727171-1.0.1.1-KQXlJz7qVP9efBWz5CMI6fbFQ9SFpayfXtiDEiuftIvgXmnb5LN7bGBE_MkZ1HzBAv4s4n3nMt738s0la57T50ruy2vByJ8c8WzrlCN5J8mKuF7oHBMsX3ffqlRvGrYG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2301\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a7c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pw_Jadk4h1MSyPS16r8nBv2_j_iJ4oHkP7NEVfxSAtA-1789587793.3727171-1.0.1.1-KQXlJz7qVP9efBWz5CMI6fbFQ9SFpayfXtiDEiuftIvgXmnb5LN7bGBE_MkZ1HzBAv4s4n3nMt738s0la57T50ruy2vByJ8c8WzrlCN5J8mKuF7oHBMsX3ffqlRvGrYG","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pw_Jadk4h1MSyPS16r8nBv2_j_iJ4oHkP7NEVfxSAtA-1789587793.3727171-1.0.1.1-KQXlJz7qVP9efBWz5CMI6fbFQ9SFpayfXtiDEiuftIvgXmnb5LN7bGBE_MkZ1HzBAv4s4n3nMt738s0la57T50ruy2vByJ8c8WzrlCN5J8mKuF7oHBMsX3ffqlRvGrYG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1260,"size_decoded":2108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"549e586865ff061d574bda1150908ff9","sha1":"53774eaee0a23a30344b9738ea2568efea45bace","sha256":"f4c3c0de5dee0a020927e5aedc66298efc34601dd1931b0f3549596853bfb247","sha512":"dbe0604908477cbd974dbb77bd2f025e31c9a16613fb0970faf59604b6414e80727a9befd2723e8130e7ef24b3eb80f7f81f39de99d874ad376ac3ac3130df43","ssdeep":"","tlshash":"ea211a4f443dd8c93eade769b8717211fa0e60783cd940417221efb41aa21b0e00d862","first_seen":"2026-07-13T06:10:37.467187Z","last_seen":"2026-09-16T19:44:01.9004Z","times_seen":314,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.393Z","timestamp":1789587793393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4064\r\nset-cookie: __cf_bm=nzOLS3rr6D8O1FWndkCxL9orjS4CDwquVq9gSrS.Ev0-1789587793.4027-1.0.1.1-mQCbS2rrVLhRwPYPLxKDQtY255c5leAlTg3vjjsKuCDYmwzjzCchwuU9TFEWxGLbRx8DfGN.0vSq9deQP6kLZDZZ5gOO5kRZa7pVGvVamzEOloafQC3_Azrvk0APHWdP; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2783\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab705a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"nzOLS3rr6D8O1FWndkCxL9orjS4CDwquVq9gSrS.Ev0-1789587793.4027-1.0.1.1-mQCbS2rrVLhRwPYPLxKDQtY255c5leAlTg3vjjsKuCDYmwzjzCchwuU9TFEWxGLbRx8DfGN.0vSq9deQP6kLZDZZ5gOO5kRZa7pVGvVamzEOloafQC3_Azrvk0APHWdP","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=nzOLS3rr6D8O1FWndkCxL9orjS4CDwquVq9gSrS.Ev0-1789587793.4027-1.0.1.1-mQCbS2rrVLhRwPYPLxKDQtY255c5leAlTg3vjjsKuCDYmwzjzCchwuU9TFEWxGLbRx8DfGN.0vSq9deQP6kLZDZZ5gOO5kRZa7pVGvVamzEOloafQC3_Azrvk0APHWdP; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":1937,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.901085Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/jquery.marquee.min.js","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.292Z","timestamp":1789587793292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /js/old/jquery.marquee.min.js HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCVQQ0oEfYms5%2FvbSntlTvmY8vGRr2vJTLx8RCQPi8jeRBZnrveobk9vQ0t3DyGVVfH2uAnqBNjE3xCNLip7zrp7rCa2nZ9nF7hmyAsWKz3JfidGx9DMmMj96vXkIroTIOYKkLiZ6%2B8VP7yJ\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 2247\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc49c8d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":3276,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1219)","md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-09-16T19:44:01.901675Z","times_seen":1859,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/eab8f0e847742fd328bb581299bd99ca.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.500Z","timestamp":1789587793500,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/eab8f0e847742fd328bb581299bd99ca.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mgw.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.357Z","timestamp":1789587793357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-mgw.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2760\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 05:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=6390\r\nset-cookie: __cf_bm=eN0VsZEU6qrT14CBo0fwgPFnXpq_LFTAL8oRhBVaXdQ-1789587793.3720832-1.0.1.1-UBjrLvm8nv2Ooa211llB8NE1ER9NfCxjemCkZSkbxsebHnLNXhi_ZSfM.3vmVbmKmKYkcP8WOrChnJTi9OjeETln.pyhi8hmk4PzlwtTmzN1zWw1fD5zMF4dY6oUsMC8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 4855\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a705a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"eN0VsZEU6qrT14CBo0fwgPFnXpq_LFTAL8oRhBVaXdQ-1789587793.3720832-1.0.1.1-UBjrLvm8nv2Ooa211llB8NE1ER9NfCxjemCkZSkbxsebHnLNXhi_ZSfM.3vmVbmKmKYkcP8WOrChnJTi9OjeETln.pyhi8hmk4PzlwtTmzN1zWw1fD5zMF4dY6oUsMC8","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=eN0VsZEU6qrT14CBo0fwgPFnXpq_LFTAL8oRhBVaXdQ-1789587793.3720832-1.0.1.1-UBjrLvm8nv2Ooa211llB8NE1ER9NfCxjemCkZSkbxsebHnLNXhi_ZSfM.3vmVbmKmKYkcP8WOrChnJTi9OjeETln.pyhi8hmk4PzlwtTmzN1zWw1fD5zMF4dY6oUsMC8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2760,"size_decoded":3608,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c51dc9274ae15801f9fa1e32b892cf","sha1":"7c89550560e339509024dd387d282d66d38d3e67","sha256":"8c1188260ef9e4c09bb098f524821fa3d71b61203c9ade6fbc2dfcfd48cf6385","sha512":"9ad4b877d17cccd0436970332fdf02398f7bd72b8430926235bfcdfb8c24e6c04ba0566d40920051b6ac447d3091ed31aa9db10a2d48b09fb1840b0a937e3a95","ssdeep":"","tlshash":"65516ea2b838f8c2d881aa1752c03701e50fdd3f49050cb36271a11f7b1d3658d5a927","first_seen":"2026-04-27T12:37:02.079089Z","last_seen":"2026-09-16T19:44:01.90274Z","times_seen":1224,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/images/upload-Slides-20230119172041.jpg","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.462Z","timestamp":1789587793462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /images/upload-Slides-20230119172041.jpg HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddB0Ef1g11cwVRwD7d%2FYW8oHeFXxZudTEHm7Zin2Sp6e1AkNQHHsceR6lkvG0VOypJ72Xk5nlMiBi9EU1vFmCnOj7vXfSJMkwwoHvz2eQVScvJRT6ngnL0H%2F7DxrhOnmntLYN%2FcLHBLsL3iW\"}]}\r\ncontent-type: image/jpeg\r\nage: 1751\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bdd4a0bd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 397884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397884,"size_decoded":398572,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:01:19 18:05:11], baseline, precision 8, 1900x380, components 3","md5":"753199376c976be2b28ba36121279428","sha1":"3a8d2cddf4b603ffa61d1f2f56d8c335adc9f39c","sha256":"4f845807ed7a96ea9cf19df8ed116d17e62c84dcda7fb21c5325570342728d0e","sha512":"5bb781a0bc05b1d6ce418def53a0d262f9e23a2a9fe3ffddd0973807a8c2dd359315075ac903662c4ad41520f06192905b255f80354372fa5c867d693c9b1c1b","ssdeep":"12288:qFSFrtYXtqyuMDWlRD41zfLGLNZ62G4Q5Ms195AW:qFSFroW4DGLNZ6t4QWs19h","tlshash":"578423cab7e47d60d3deca3dc045d981625632a88a7ec4107e9d2da07b70e867ebd350","first_seen":"2025-04-03T17:58:59.0926Z","last_seen":"2026-09-16T19:44:01.903388Z","times_seen":5,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logsdk.kwai-pro.com/rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel","fqdn":"logsdk.kwai-pro.com","domain":"kwai-pro.com","tld":"com"},"ip":{"addr":"23.214.96.85","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.752Z","timestamp":1789587795752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai-pro.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Aug 2026 07:12:14 GMT","end":"Mon, 22 Feb 2027 06:30:05 GMT"},"fingerprint":{"sha1":"3E:05:9C:D8:AC:0D:90:D8:53:19:C1:92:7A:30:35:02:C7:C0:AD:92","sha256":"AD:5F:17:5E:62:1F:D2:8C:A6:81:AA:17:9C:D4:E0:40:02:79:F4:ED:3A:F1:25:D4:22:A6:F3:21:D6:49:7A:7B"}}},"request":{"raw":"POST /rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel HTTP/1.1\r\nHost: logsdk.kwai-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6861\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6861,"data":"{\"common\":{\"identity_package\":{\"device_id\":\"web_5310107626042188\",\"global_id\":\"\",\"user_id\":\"-1\"},\"app_package\":{\"language\":\"en-US\",\"platform\":10,\"container\":\"WEB\",\"product_name\":\"ksib.fe.pixel\"},\"service_name\":\"radarSDK\",\"device_package\":{\"os_version\":\"NT 10.0\",\"model\":\"Windows\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"need_encrypt\":false,\"network_package\":{\"type\":0},\"h5_extra_attr\":\"{\\\"sdk_name\\\":\\\"webLogger\\\",\\\"sdk_version\\\":\\\"3.10.28\\\",\\\"sdk_bundle\\\":\\\"log.hybrid.js\\\",\\\"app_version_name\\\":\\\"\\\",\\\"host_product\\\":\\\"\\\",\\\"resolution\\\":\\\"1280x1024\\\",\\\"screen_width\\\":1280,\\\"screen_height\\\":1024,\\\"device_pixel_ratio\\\":1,\\\"domain\\\":\\\"https://rekemonedasi-facebook.org\\\",\\\"fromIframe\\\":false}\",\"global_attr\":\"{}\"},\"logs\":[{\"client_timestamp\":1789587795750,\"client_increment_id\":1,\"session_id\":\"147a897d-0714-4b79-a450-f5c2d3945f18\",\"time_zone\":\"GMT+00:00\",\"stat_package\":{\"custom_stat_event\":{\"key\":\"radar_log\",\"value\":\"{\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\",\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"data\\\":[{\\\"key\\\":\\\"load\\\",\\\"dimension\\\":{\\\"collect_version\\\":\\\"1.2.7\\\",\\\"collect_name\\\":\\\"RadarNavigationCollect\\\",\\\"event_name\\\":\\\"fmp\\\",\\\"custom_metric\\\":\\\"{}\\\",\\\"main_api_list\\\":[],\\\"radar_main_api_list\\\":[],\\\"radar_main_js_list\\\":[],\\\"is_official\\\":1,\\\"stack\\\":\\\"t.prototype.fmp@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:207002\\\\ne.prototype.fmp@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:236353\\\\nt/n.logFMP@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:46959\\\\ne/this.logFMP@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:114251\\\\nr.prototype.getInstance/\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:129628\\\\npromise callback*r.prototype.getInstance@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:129586\\\\ne@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:134438\\\\nr@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:129264\\\\nt/n.createPixel@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:100377\\\\nc/this.loadPixel@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:155235\\\\nt/n.handleCache/\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:99806\\\\nt/n.handleCache@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:99742\\\\nt/n.init@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:99647\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:173434\\\\ns\u003c/s/\u003c/\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:171266\\\\ns\u003c/s/\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:171371\\\\na@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:170085\\\\npromise callback*c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:170250\\\\na\u003c/\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:170261\\\\na\u003c@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:170028\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:171636\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:173453\\\\nn@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:356\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:1155\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:1165\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:185\\\\n@https://s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq:2:189\\\\n\\\",\\\"sample_rate\\\":1,\\\"happen_stage\\\":\\\"after_fmp\\\",\\\"load_device_increase_id\\\":1,\\\"load_session_increase_id\\\":1},\\\"value\\\":{\\\"redirect\\\":\\\"0\\\",\\\"dns\\\":\\\"65\\\",\\\"dns_start\\\":\\\"100\\\",\\\"tcp\\\":\\\"36\\\",\\\"tcp_start\\\":\\\"137\\\",\\\"ssl\\\":\\\"36\\\",\\\"ssl_start\\\":\\\"101\\\",\\\"ttfb\\\":\\\"292\\\",\\\"request_start\\\":\\\"138\\\",\\\"trans\\\":\\\"0\\\",\\\"dom_parse\\\":\\\"1515\\\",\\\"dom_parse_start\\\":\\\"1945\\\",\\\"blank\\\":\\\"542\\\",\\\"fb\\\":\\\"430\\\",\\\"dom_ready\\\":\\\"1982\\\",\\\"total\\\":\\\"-1789587792451\\\",\\\"resource\\\":\\\"-1789587794396\\\",\\\"tti\\\":\\\"1945\\\",\\\"dom_num\\\":\\\"1787\\\",\\\"fmp\\\":\\\"3297\\\",\\\"navigation_start_time\\\":\\\"1789587792451\\\",\\\"fetch_start_time\\\":\\\"1789587792475\\\",\\\"dns_start_time\\\":\\\"1789587792486\\\",\\\"dns_end_time\\\":\\\"1789587792551\\\",\\\"connect_start_time\\\":\\\"1789587792552\\\",\\\"ssl_start_time\\\":\\\"1789587792552\\\",\\\"request_start_time\\\":\\\"1789587792589\\\",\\\"response_start_time\\\":\\\"1789587792881\\\",\\\"response_end_time\\\":\\\"1789587792881\\\",\\\"dom_interactive_time\\\":\\\"1789587794396\\\",\\\"dom_loading_time\\\":\\\"1789587792993\\\",\\\"dom_ready_time\\\":\\\"1789587794433\\\",\\\"load_event_time\\\":\\\"0\\\",\\\"connect_end_time\\\":\\\"1789587792588\\\",\\\"load_event_end\\\":\\\"0\\\",\\\"dom_complete\\\":\\\"0\\\",\\\"dom_content_loaded_event_start\\\":\\\"1789587794425\\\",\\\"redirect_start\\\":\\\"0\\\",\\\"redirect_end\\\":\\\"0\\\",\\\"radar_init_time\\\":\\\"1789587795540\\\",\\\"fmp_time\\\":\\\"1789587795748\\\"},\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"url_package\\\":{\\\"page\\\":\\\"https://rekemonedasi-facebook.org/\\\",\\\"identity\\\":\\\"80237e4b-b2be-4f88-9b25-17f836b14abe\\\",\\\"page_type\\\":2},\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"event_client_timestamp\\\":1789587795750,\\\"event_trigger_source\\\":\\\"H5\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\"}]}\"}}}]}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 77\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77,"size_decoded":313,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"4b9ba689f17cf669aa544de072a3e17b","sha1":"e84ab7fa6e404e3c2e7e4867f640f98a44c01891","sha256":"3de98891b26dfcf3ec36830c548f957309370895551e71b31a4528bf8eab65cd","sha512":"5ace3f93966e2f8823adfa4de7f1f550daf7b492fd1b2240046530746bc8bb1ab0d9b156866399c11a2e2694777b8c49d4ce66db66f0f2a7c86ba4dcdc73ed9c","ssdeep":"","tlshash":"b9a022083800ca2c330c3c0c80c882cf20ec0e8a0ffc8a030ff8300822c8802bae8003","first_seen":"2026-09-11T19:17:20.370718Z","last_seen":"2026-09-16T19:44:01.904116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/uploads/operator-images/60fc46d4-d3b0-45bc-84b9-6049de267869.png","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:21.391Z","timestamp":1789587801391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /uploads/operator-images/60fc46d4-d3b0-45bc-84b9-6049de267869.png HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 34083\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jul 2024 23:43:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66873396-8523\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYABYyxXZFvwiLDEdIslNGowjSZlQyBwvb873%2BXWOZSE7tSaM%2BNylE3nkw35Ha3u6OL6SeFxO3UpN4hMF3Y1R9f1vLwj6iy2l%2BALinZ11Z8gposVt2%2F3CU3ksCP6KVc0Zw%3D%3D\"}]}\r\ncf-ray: a3c25c0ebe131ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34083,"size_decoded":34991,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"f94d920d0cba5126eca8672d77e8e2e7","sha1":"bd0e74d4d2533301f8bd78d2b6acc2ca828ff2f5","sha256":"21663c927c3f4e11994434b271913d5c172f1104215d8bb227f72075b747967d","sha512":"8db68b65df8e77b84fa1c1cf423bc7de229c9c33752d21d7055f836045d90480d751a11ed981f69e0badff8451d5c24fdba05e3224acbe01e19684eaf7068d45","ssdeep":"768:HTvXBklsePBML3gnR1h84H9qT2jy0ULN/feBgH+xKGTya:SpPB83klH9Vy0Wp1GL","tlshash":"38e2f130e88e4d76be2ec8eb164e467637d7b4dc091a6cc2aa461357371377dc649801","first_seen":"2026-09-16T19:44:01.905638Z","last_seen":"2026-09-16T19:44:01.905638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-atg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.358Z","timestamp":1789587793358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-atg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 504\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Jul 2026 05:19:49 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3847\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=.THaI8RNeFFv3eT_eaZ5Dc4PmAeW3QQkdf5LYgHRH3o-1789587793.372297-1.0.1.1-3TkuvSTNeSR_.VXEcn4Si6xL0C_vhEjOQx2BMBBtf5q4dv3Dyv0yumeOHX8lNiNLlxhWxXkXVv0JUEt8VhBleOpUk.01zkhSdOu6Q9.BQA__x5L2FHhcV44OAx9iKnrL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 1399\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a735a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":".THaI8RNeFFv3eT_eaZ5Dc4PmAeW3QQkdf5LYgHRH3o-1789587793.372297-1.0.1.1-3TkuvSTNeSR_.VXEcn4Si6xL0C_vhEjOQx2BMBBtf5q4dv3Dyv0yumeOHX8lNiNLlxhWxXkXVv0JUEt8VhBleOpUk.01zkhSdOu6Q9.BQA__x5L2FHhcV44OAx9iKnrL","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=.THaI8RNeFFv3eT_eaZ5Dc4PmAeW3QQkdf5LYgHRH3o-1789587793.372297-1.0.1.1-3TkuvSTNeSR_.VXEcn4Si6xL0C_vhEjOQx2BMBBtf5q4dv3Dyv0yumeOHX8lNiNLlxhWxXkXVv0JUEt8VhBleOpUk.01zkhSdOu6Q9.BQA__x5L2FHhcV44OAx9iKnrL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9df864f15891d297018295da228ca466","sha1":"62c93bc22929bb332dceb971df9fa8be22535511","sha256":"9b73e3e9c3907e615d0c74d33d117a963e372f2682f66cdc6f55d82bf8859235","sha512":"d58e401dd4afa73724f8e284e1507b894977ded6160e7199d5733c6d75e7cdd283d9fb43128e9bf74102e418b13428f0c0fde5e2ad7e7767919bd750a65530eb","ssdeep":"","tlshash":"a0f00e4d0677d3600a2a3822e728943810c0deff64e95b6412b123a5aa0b4a0074b0d0","first_seen":"2026-07-03T10:40:34.569918Z","last_seen":"2026-09-16T19:44:01.907258Z","times_seen":416,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/4cc9044aed34f71c4e79bd260ea938fb.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.499Z","timestamp":1789587793499,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/4cc9044aed34f71c4e79bd260ea938fb.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logsdk.kwai-pro.com/rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel","fqdn":"logsdk.kwai-pro.com","domain":"kwai-pro.com","tld":"com"},"ip":{"addr":"23.214.96.85","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:16.558Z","timestamp":1789587796558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai-pro.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Aug 2026 07:12:14 GMT","end":"Mon, 22 Feb 2027 06:30:05 GMT"},"fingerprint":{"sha1":"3E:05:9C:D8:AC:0D:90:D8:53:19:C1:92:7A:30:35:02:C7:C0:AD:92","sha256":"AD:5F:17:5E:62:1F:D2:8C:A6:81:AA:17:9C:D4:E0:40:02:79:F4:ED:3A:F1:25:D4:22:A6:F3:21:D6:49:7A:7B"}}},"request":{"raw":"POST /rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel HTTP/1.1\r\nHost: logsdk.kwai-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5926\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5926,"data":"{\"common\":{\"identity_package\":{\"device_id\":\"web_5310107626042188\",\"global_id\":\"\",\"user_id\":\"-1\"},\"app_package\":{\"language\":\"en-US\",\"platform\":10,\"container\":\"WEB\",\"product_name\":\"ksib.fe.pixel\"},\"service_name\":\"radarSDKSupplement\",\"device_package\":{\"os_version\":\"NT 10.0\",\"model\":\"Windows\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"need_encrypt\":false,\"network_package\":{\"type\":0},\"h5_extra_attr\":\"{\\\"sdk_name\\\":\\\"webLogger\\\",\\\"sdk_version\\\":\\\"3.10.28\\\",\\\"sdk_bundle\\\":\\\"log.hybrid.js\\\",\\\"app_version_name\\\":\\\"\\\",\\\"host_product\\\":\\\"\\\",\\\"resolution\\\":\\\"1280x1024\\\",\\\"screen_width\\\":1280,\\\"screen_height\\\":1024,\\\"device_pixel_ratio\\\":1,\\\"domain\\\":\\\"https://rekemonedasi-facebook.org\\\",\\\"fromIframe\\\":false}\",\"global_attr\":\"{}\"},\"logs\":[{\"client_timestamp\":1789587796553,\"client_increment_id\":2,\"session_id\":\"147a897d-0714-4b79-a450-f5c2d3945f18\",\"time_zone\":\"GMT+00:00\",\"stat_package\":{\"custom_stat_event\":{\"key\":\"radar_log\",\"value\":\"{\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\",\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"data\\\":[{\\\"key\\\":\\\"event\\\",\\\"dimension\\\":{\\\"collect_version\\\":\\\"1.2.7\\\",\\\"collect_name\\\":\\\"RadarEventCollect\\\",\\\"name\\\":\\\"CATCH_API_ERROR\\\",\\\"extra_info\\\":\\\"{\\\\\\\"isPixelAD\\\\\\\":false,\\\\\\\"isInWebView\\\\\\\":false,\\\\\\\"isPreload\\\\\\\":false,\\\\\\\"_version\\\\\\\":\\\\\\\"2.13.0\\\\\\\",\\\\\\\"currentHref\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"apiPath\\\\\\\":\\\\\\\"https://ads.mythad.com/rest/n/adintl/ad/getPixelConfig\\\\\\\",\\\\\\\"actionStatus\\\\\\\":\\\\\\\"SUCCESS\\\\\\\",\\\\\\\"response\\\\\\\":{\\\\\\\"status\\\\\\\":200,\\\\\\\"message\\\\\\\":\\\\\\\"成功\\\\\\\",\\\\\\\"data\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"pixelId\\\\\\\\\\\\\\\":293299371379305,\\\\\\\\\\\\\\\"optEventSet\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"accountId\\\\\\\\\\\\\\\":76638500,\\\\\\\\\\\\\\\"installationType\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"eventData\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"eventId\\\\\\\\\\\\\\\":460031118,\\\\\\\\\\\\\\\"traceMethod\\\\\\\\\\\\\\\":1,\\\\\\\\\\\\\\\"traceContent\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"operator\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"CONTAINS\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"destination\\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\\"https://kode4dpanah.com/?content=register\u0026ref=snackgacor\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"https://kode4dpusatmahjong.com/\\\\\\\\\\\\\\\"]}],\\\\\\\\\\\\\\\"eventType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"EVENT_CONTENT_VIEW\\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\\"eventId\\\\\\\\\\\\\\\":460034612,\\\\\\\\\\\\\\\"traceMethod\\\\\\\\\\\\\\\":2,\\\\\\\\\\\\\\\"traceContent\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"traceUrl\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"https://kode4dpanah.com/?content=register\u0026ref=snackgacor\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"operator\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"CLICK\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"destination\\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\\"#buttonRegister\\\\\\\\\\\\\\\"]}],\\\\\\\\\\\\\\\"eventType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"EVENT_PURCHASE\\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\\"eventId\\\\\\\\\\\\\\\":460034613,\\\\\\\\\\\\\\\"traceMethod\\\\\\\\\\\\\\\":2,\\\\\\\\\\\\\\\"traceContent\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"traceUrl\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"https://kode4dpanah.com/?content=register\u0026ref=snackgacor\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"operator\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"CLICK\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"destination\\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\\"#reg_nama\\\\\\\\\\\\\\\"]}],\\\\\\\\\\\\\\\"eventType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"EVENT_ADD_TO_WISHLIST\\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\\"eventId\\\\\\\\\\\\\\\":460034614,\\\\\\\\\\\\\\\"traceMethod\\\\\\\\\\\\\\\":2,\\\\\\\\\\\\\\\"traceContent\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"traceUrl\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"https://kode4dpanah.com/?content=register\u0026ref=snackgacor\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"operator\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"CLICK\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"destination\\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\\"#reg_bank\\\\\\\\\\\\\\\"]}],\\\\\\\\\\\\\\\"eventType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"EVENT_ADD_PAYMENT_INFO\\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\\"eventId\\\\\\\\\\\\\\\":460034615,\\\\\\\\\\\\\\\"traceMethod\\\\\\\\\\\\\\\":2,\\\\\\\\\\\\\\\"traceContent\\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\\"traceUrl\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"https://kode4dpusatmahjong.com/\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"operator\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"CLICK\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"destination\\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\\"#image\u003eimg.i-amphtml-fill-content.i-amphtml-replaced-content:nth-of-type(1)\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"div.container\u003ea.btn-daftar:nth-of-type(2)\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"a.btn-login\\\\\\\\\\\\\\\"]}],\\\\\\\\\\\\\\\"eventType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"EVENT_COMPLETE_REGISTRATION\\\\\\\\\\\\\\\"}],\\\\\\\\\\\\\\\"isDeleted\\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\\"pixelName\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"KODE4D\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"accessMode\\\\\\\\\\\\\\\":2,\\\\\\\\\\\\\\\"pixelExtra\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"{\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"dataReturnStatus\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":false}\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"status\\\\\\\\\\\\\\\":1}\\\\\\\",\\\\\\\"host\\\\\\\":\\\\\\\"public-my01-c11-kce77.idcsgpaz2.sgp.kwaidc.com\\\\\\\",\\\\\\\"port\\\\\\\":21096,\\\\\\\"timestamp\\\\\\\":1789587795650,\\\\\\\"traceId\\\\\\\":\\\\\\\"ELiAgIDA9omUChjCAiC_3frdijQop8eoxAw=\\\\\\\",\\\\\\\"retryTimes\\\\\\\":0,\\\\\\\"xhrResponseUrl\\\\\\\":\\\\\\\"https://ads.mythad.com/rest/n/adintl/ad/getPixelConfig?pixelId=293299371379305\u0026pageId=pageId-1789587795543-2804991526458\\\\\\\"},\\\\\\\"responseUrl\\\\\\\":\\\\\\\"https://ads.mythad.com/rest/n/adintl/ad/getPixelConfig?pixelId=293299371379305\u0026pageId=pageId-1789587795543-2804991526458\\\\\\\",\\\\\\\"pixelId\\\\\\\":\\\\\\\"293299371379305\\\\\\\",\\\\\\\"pixelIds\\\\\\\":\\\\\\\"293299371379305\\\\\\\"}\\\",\\\"is_official\\\":1,\\\"sample_rate\\\":1,\\\"happen_stage\\\":\\\"after_fmp\\\",\\\"other_device_increase_id\\\":0,\\\"other_session_increase_id\\\":0},\\\"value\\\":{},\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"url_package\\\":{\\\"page\\\":\\\"https://rekemonedasi-facebook.org/\\\",\\\"identity\\\":\\\"80237e4b-b2be-4f88-9b25-17f836b14abe\\\",\\\"page_type\\\":2},\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"event_client_timestamp\\\":1789587795756,\\\"event_trigger_source\\\":\\\"H5\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\"}]}\"}}}]}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 77\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ndate: Wed, 16 Sep 2026 19:43:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77,"size_decoded":313,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"4b11b757c13a1b673c4f681ae078dab1","sha1":"482a3a44d02a3395792ba587fcf335c97824e5bc","sha256":"c4e3c6eb36aca0afcdc74c472f7d26bf3a5c098fdcbbf497704dc42d2a37836b","sha512":"a2aa1cd45115188603a6a67de7100b6c73d34fe1aedfea66d4b9c1de3c25e9a22160098294fc399d5f641c305a211ed35be5c96d9933562407f15f54fe6078fc","ssdeep":"","tlshash":"7da0245c1400d400351c1c5c10c04143100c5d140fcc55430754144545c0001735f005","first_seen":"2026-05-28T04:33:14.586675Z","last_seen":"2026-09-16T19:44:01.908018Z","times_seen":60,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/stats/trigger-views","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:21.264Z","timestamp":1789587801264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"OPTIONS /api/public/v1/stats/trigger-views HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,cp-app-id\r\nReferer: https://rekemonedasi-facebook.org/\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 16 Sep 2026 19:43:21 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ue08mm%2Bxol2g2rXuCrAjg5rdBXs0t%2BQaTF7HpSeOTDJq%2BJO37O6iomFsR7yuDN%2FMqDuiBYL6I%2BWdFcc%2FIrgAt6q%2BZ7o%2FQonIiHYHAE9Bpf9y2gaCt7vino7er6ONW8x99A%3D%3D\"}]}\r\ncf-ray: a3c25c0dece61ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":668,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.383Z","timestamp":1789587793383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=B6KaAmqp_pP3Q57aNwuEdd96QXRighGHulwuc6oBiYc-1789587793.402049-1.0.1.1-odnnRYOa0WYCYZgx6gAdUNYMnV7Np6JOlPT.JIX90Bn33P00HmuUkiXbbPkjPvnbHIOHQuVEbk3zNrTIdQ0zmXdqb9rUzk8j2IxYTWwSqvUD9QJKesk3AJPSsQexLqIQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=7765\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2031\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab6a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"B6KaAmqp_pP3Q57aNwuEdd96QXRighGHulwuc6oBiYc-1789587793.402049-1.0.1.1-odnnRYOa0WYCYZgx6gAdUNYMnV7Np6JOlPT.JIX90Bn33P00HmuUkiXbbPkjPvnbHIOHQuVEbk3zNrTIdQ0zmXdqb9rUzk8j2IxYTWwSqvUD9QJKesk3AJPSsQexLqIQ","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=B6KaAmqp_pP3Q57aNwuEdd96QXRighGHulwuc6oBiYc-1789587793.402049-1.0.1.1-odnnRYOa0WYCYZgx6gAdUNYMnV7Np6JOlPT.JIX90Bn33P00HmuUkiXbbPkjPvnbHIOHQuVEbk3zNrTIdQ0zmXdqb9rUzk8j2IxYTWwSqvUD9QJKesk3AJPSsQexLqIQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1418,"size_decoded":2265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.908607Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.416Z","timestamp":1789587793416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=f85XrjRxsYktWg4C43hNpLa.T30ihuyVIezf7ftgdZI-1789587793.4255419-1.0.1.1-rs4AKwW4F8SLHMtKfmzvvTD1jzl15LDN9cJGh8ipBDxASbuJQyfLMN3GHeLOnj_hlHUeBJ9qYmEJnSBV10fsYUmYC7RVfEUmVUk7temz3hK1gU.XEYipSQa1imSdNE4W; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=7983\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 5215\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec135a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"f85XrjRxsYktWg4C43hNpLa.T30ihuyVIezf7ftgdZI-1789587793.4255419-1.0.1.1-rs4AKwW4F8SLHMtKfmzvvTD1jzl15LDN9cJGh8ipBDxASbuJQyfLMN3GHeLOnj_hlHUeBJ9qYmEJnSBV10fsYUmYC7RVfEUmVUk7temz3hK1gU.XEYipSQa1imSdNE4W","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=f85XrjRxsYktWg4C43hNpLa.T30ihuyVIezf7ftgdZI-1789587793.4255419-1.0.1.1-rs4AKwW4F8SLHMtKfmzvvTD1jzl15LDN9cJGh8ipBDxASbuJQyfLMN3GHeLOnj_hlHUeBJ9qYmEJnSBV10fsYUmYC7RVfEUmVUk7temz3hK1gU.XEYipSQa1imSdNE4W; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":2848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.909289Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/f15ae3ec9b2d7888180a6c8cf4b137e8.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.491Z","timestamp":1789587793491,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/f15ae3ec9b2d7888180a6c8cf4b137e8.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/e52b745126bbb6bdddc90b91b44413ae.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.496Z","timestamp":1789587793496,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/e52b745126bbb6bdddc90b91b44413ae.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/checkPixel.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.761Z","timestamp":1789587795761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ap4r.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Aug 2026 00:00:00 GMT","end":"Thu, 04 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:09:B3:9B:CB:28:B5:EF:F7:4D:06:F0:0E:08:72:15:2F:D0:3C:EB","sha256":"2E:2F:E5:99:09:88:B3:88:C7:2E:DB:AE:4A:C5:9D:DE:59:DD:A8:44:5A:1E:E2:E7:E9:1F:3A:07:85:F0:02:FA"}}},"request":{"raw":"GET /kos/s101/nlav112572/pixel/checkPixel.js?sdkid=293299371379305\u0026lib=kwaiq HTTP/1.1\r\nHost: s21-def.ap4r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nage: 2296987\r\ntiming-allow-origin: *\r\ndate: Fri, 21 Aug 2026 05:40:08 GMT\r\nexpires: Sun, 20 Sep 2026 05:40:08 GMT\r\ncache-control: max-age=2592000\r\nx-oss-request-id: 6A87E4B8438CE43238C8B35D\r\nlast-modified: Fri, 05 Sep 2025 06:08:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16033250417186308273\r\nx-oss-storage-class: Standard\r\ncontent-md5: UjaQuFVCSS3za/9dxeHe0Q==\r\nx-oss-server-time: 18\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: xTMRtsvI6Kp87ptQnMYVYdvSYOYp0hMK-I5GvfssEEOD9xRJNCKkmw==\r\nvia: 1.1 abe7c423e3f506d9a86c5f57fbc5a762.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":54078,"size_decoded":14317,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54078), with no line terminators","md5":"523690b85542492df36bff5dc5e1ded1","sha1":"73583f8751e3dd15bc0e5c688e4633780d8b8ad8","sha256":"b0387e30bfcc545403e6fb7f4c9ee2b46261776396a4290a7fc9f24848b32888","sha512":"8943a9275afa000cab34eb188fc655ca9040f0bb781805f939a958ab2ada29ed073353b6fa91154112b7d4a0200f6645879d21df90c9b5582dc90248a0406c1d","ssdeep":"768:NxKdMQ3j4uVO8Rb86RxQChIR0R4aPssREGLbVcUdlRJmGoHRu:zKdMXvK9UcVce3D","tlshash":"543319cab686b06503b774f4883f210af33b7d29b40c5541e65aced16c68a4f9127fb9","first_seen":"2025-09-05T10:42:12.064864Z","last_seen":"2026-09-16T19:44:01.909926Z","times_seen":3510,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-ams.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.410Z","timestamp":1789587793410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //fish-ams.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1260\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 05:20:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2282\r\nset-cookie: __cf_bm=9gjPZtDJaN1bqYkJ.emJuNOTfM6JjY15f_wC9wJR9Ls-1789587793.4234655-1.0.1.1-YezgbwUfbi5LlURYwHlsZs98rC.34RrI6hoeGM259mENAO79jihMjWujijvU_0pRI6lcL4_b8p_sgNI99o.2ijNxp3VVUK3UcuMEqsnoIBFnUazRtcb7HMrW1uxrB6Gi; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2175\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec015a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"9gjPZtDJaN1bqYkJ.emJuNOTfM6JjY15f_wC9wJR9Ls-1789587793.4234655-1.0.1.1-YezgbwUfbi5LlURYwHlsZs98rC.34RrI6hoeGM259mENAO79jihMjWujijvU_0pRI6lcL4_b8p_sgNI99o.2ijNxp3VVUK3UcuMEqsnoIBFnUazRtcb7HMrW1uxrB6Gi","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9gjPZtDJaN1bqYkJ.emJuNOTfM6JjY15f_wC9wJR9Ls-1789587793.4234655-1.0.1.1-YezgbwUfbi5LlURYwHlsZs98rC.34RrI6hoeGM259mENAO79jihMjWujijvU_0pRI6lcL4_b8p_sgNI99o.2ijNxp3VVUK3UcuMEqsnoIBFnUazRtcb7HMrW1uxrB6Gi; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1260,"size_decoded":2108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"549e586865ff061d574bda1150908ff9","sha1":"53774eaee0a23a30344b9738ea2568efea45bace","sha256":"f4c3c0de5dee0a020927e5aedc66298efc34601dd1931b0f3549596853bfb247","sha512":"dbe0604908477cbd974dbb77bd2f025e31c9a16613fb0970faf59604b6414e80727a9befd2723e8130e7ef24b3eb80f7f81f39de99d874ad376ac3ac3130df43","ssdeep":"","tlshash":"ea211a4f443dd8c93eade769b8717211fa0e60783cd940417221efb41aa21b0e00d862","first_seen":"2026-07-13T06:10:37.467187Z","last_seen":"2026-09-16T19:44:01.9004Z","times_seen":314,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/images/upload-SlidesMobile-20240520215250.gif","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.483Z","timestamp":1789587793483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /images/upload-SlidesMobile-20240520215250.gif HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITEY5cnags%2FAA26IZKQIY3jSc08qeopuauiGVIGjzkfVPbpyMHDMJp1%2FPvrJL39l9ftViYmLVcouKo1ZAch7GaQGlcuod6Sj7ewB2fLTOzPuQOg7z4kKkgr1K1MrMxn79k7nCZkqGNjYj0R%2F\"}]}\r\ncontent-type: image/gif\r\nage: 2242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bdd7a12d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 817840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":817840,"size_decoded":818527,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 200","md5":"8d25ce3bc2bba2599dfad0407f298583","sha1":"020b42e95319a776cb207936769fb60949d53cf4","sha256":"58743742866eefc310e36f802224624eebc24064ab96da48cd9e4e7459fa13cf","sha512":"fbb7ce615b4c902356a8ff1dec2bbcc3de89fc2812b83a7d1d9d6d387b2a6a2555f858d790964e0ebe6c982dbfc1ff3911662f2443cd582af0185bf55360c4d6","ssdeep":"24576:01PJiaiCiqIMOEM9fEpMGfFxKIe2MNe2MxV/Jx2Xi:0vLi1qVOEM8MMKxG92y","tlshash":"0c05238e4053eb056b15858208efdcf65c6612f8813e9f1b613efab0396da0fb505f99","first_seen":"2025-04-03T17:58:59.108611Z","last_seen":"2026-09-16T19:44:01.910627Z","times_seen":5,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.647Z","timestamp":1789587794647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 07:45:41 GMT\r\nexpires: Fri, 10 Sep 2027 07:45:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 561453\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-09-16T19:44:01.911348Z","times_seen":15177,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.350Z","timestamp":1789587793350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=9OTo95rUT2MRkm6RozZ8N8hnFCpmHrCZa6HRv0vmiXE-1789587793.357575-1.0.1.1-v9Oqnf2AfeT9AfIDtctODf1_vnBltshrlIZK35zP5ZwrtZRMhGvuHtVzek4GO7lSJX8J9zf6w9BqgE3hLZjUWHLPWbK8JQtTzjmiHJ3PCTHdK44rKODAO.bUSAr1Eceu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=3573\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc4a155a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"9OTo95rUT2MRkm6RozZ8N8hnFCpmHrCZa6HRv0vmiXE-1789587793.357575-1.0.1.1-v9Oqnf2AfeT9AfIDtctODf1_vnBltshrlIZK35zP5ZwrtZRMhGvuHtVzek4GO7lSJX8J9zf6w9BqgE3hLZjUWHLPWbK8JQtTzjmiHJ3PCTHdK44rKODAO.bUSAr1Eceu","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9OTo95rUT2MRkm6RozZ8N8hnFCpmHrCZa6HRv0vmiXE-1789587793.357575-1.0.1.1-v9Oqnf2AfeT9AfIDtctODf1_vnBltshrlIZK35zP5ZwrtZRMhGvuHtVzek4GO7lSJX8J9zf6w9BqgE3hLZjUWHLPWbK8JQtTzjmiHJ3PCTHdK44rKODAO.bUSAr1Eceu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1916,"size_decoded":2752,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-09-16T19:44:01.912173Z","times_seen":3745,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.420Z","timestamp":1789587793420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4064\r\nset-cookie: __cf_bm=SKXQfWo4DUJmxoUe9YapzMAa3tOTREdDejs5FZiPcRA-1789587793.4269056-1.0.1.1-OyGrqjchk55_CzDpEAOQ1uHhoc8fwaMUtNTUzH8pIOk_TTYhsIfKwP8.AZhXWNdpnLOKsnN5aE7j_7iYjMxphGQRcxWh57qIYzUAmhUMWWe2ph8y_TxYsZ4eSlN51cVu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 4399\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec215a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SKXQfWo4DUJmxoUe9YapzMAa3tOTREdDejs5FZiPcRA-1789587793.4269056-1.0.1.1-OyGrqjchk55_CzDpEAOQ1uHhoc8fwaMUtNTUzH8pIOk_TTYhsIfKwP8.AZhXWNdpnLOKsnN5aE7j_7iYjMxphGQRcxWh57qIYzUAmhUMWWe2ph8y_TxYsZ4eSlN51cVu","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SKXQfWo4DUJmxoUe9YapzMAa3tOTREdDejs5FZiPcRA-1789587793.4269056-1.0.1.1-OyGrqjchk55_CzDpEAOQ1uHhoc8fwaMUtNTUzH8pIOk_TTYhsIfKwP8.AZhXWNdpnLOKsnN5aE7j_7iYjMxphGQRcxWh57qIYzUAmhUMWWe2ph8y_TxYsZ4eSlN51cVu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":1940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.901085Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/guidelines.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.509Z","timestamp":1789587793509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /assets/guidelines.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5706\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:04:58 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=zY3mwuLmP61rOrKVWu8uuNrSKDu0qFzVpfguaaGUfmE-1789587793.5148935-1.0.1.1-o.gAkKcoHpmsGX49qa46eR.l3GIYByPFlY1hIDqbJCNns256VO3G1CVl6aWkhtvrGEiRSxLwxDXyqLw3S.e0z8b5262GCKFY3i8ifKcSlkSVV1_rxqcEX9JmlteXco1d; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=11637\r\nvary: accept, accept-encoding\r\nage: 6225\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd5e925a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zY3mwuLmP61rOrKVWu8uuNrSKDu0qFzVpfguaaGUfmE-1789587793.5148935-1.0.1.1-o.gAkKcoHpmsGX49qa46eR.l3GIYByPFlY1hIDqbJCNns256VO3G1CVl6aWkhtvrGEiRSxLwxDXyqLw3S.e0z8b5262GCKFY3i8ifKcSlkSVV1_rxqcEX9JmlteXco1d","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zY3mwuLmP61rOrKVWu8uuNrSKDu0qFzVpfguaaGUfmE-1789587793.5148935-1.0.1.1-o.gAkKcoHpmsGX49qa46eR.l3GIYByPFlY1hIDqbJCNns256VO3G1CVl6aWkhtvrGEiRSxLwxDXyqLw3S.e0z8b5262GCKFY3i8ifKcSlkSVV1_rxqcEX9JmlteXco1d; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5706,"size_decoded":6555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d489fda8a31f68454cd83b7520b3e66a","sha1":"e7d958e414ba407731cf40ae0620d300589ae49f","sha256":"24aa2a2cf58d3b001d69879e2c896a3d8a0170827182bda5e1eb4721654d57c2","sha512":"303bcb08bfd236e07e881aeaf271c8eb4418988391e049032ad6d886a132ab164c6744602d6b4a2db79da042f94fdc5623641b3803d0cae900dd72455f140b7e","ssdeep":"96:nr1krI6Wy1Pvzg3N1gg6NNEE6rvS+7RVVzlqNfU7BCcDN24wZwjrgM2GC:nr1kcq1WNeEvdV1lmfeQ+jrQz","tlshash":"2bc18fd7763af712a59c80bf037e2451293dc4918bfa72afa5540888cd06d5ff705c9a","first_seen":"2026-07-25T07:48:17.614886Z","last_seen":"2026-09-16T19:44:01.913188Z","times_seen":121,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/957bdc50c307e2a9b526b34b3792da1a.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.495Z","timestamp":1789587793495,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/957bdc50c307e2a9b526b34b3792da1a.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.415Z","timestamp":1789587793415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=oDTsTSDGsxJ7WxGmseTxSWmqq4KQDktVStJrE6rD7AU-1789587793.4250634-1.0.1.1-dxQEBhvrGpNx80fUd3Qxy3gWBQmkj9L3lp3PwatjxyZjuL2LpXXAt7D8lUH8ESHuG06ao2VQMxGk3rrRYw03wxKfykGgMNdQpt.rmCoGjlchBjYGsaqVAroW4yufNGnY; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec0f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"oDTsTSDGsxJ7WxGmseTxSWmqq4KQDktVStJrE6rD7AU-1789587793.4250634-1.0.1.1-dxQEBhvrGpNx80fUd3Qxy3gWBQmkj9L3lp3PwatjxyZjuL2LpXXAt7D8lUH8ESHuG06ao2VQMxGk3rrRYw03wxKfykGgMNdQpt.rmCoGjlchBjYGsaqVAroW4yufNGnY","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=oDTsTSDGsxJ7WxGmseTxSWmqq4KQDktVStJrE6rD7AU-1789587793.4250634-1.0.1.1-dxQEBhvrGpNx80fUd3Qxy3gWBQmkj9L3lp3PwatjxyZjuL2LpXXAt7D8lUH8ESHuG06ao2VQMxGk3rrRYw03wxKfykGgMNdQpt.rmCoGjlchBjYGsaqVAroW4yufNGnY; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":2429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.914112Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/8ec7fbdf73ede9a83738f1382bcc1353.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.497Z","timestamp":1789587793497,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/8ec7fbdf73ede9a83738f1382bcc1353.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.287Z","timestamp":1789587793287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"f62-+7eGtYbhltE50OlNCKHiCEyYGPY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nage: 2592764\r\nx-served-by: cache-fra-eddf8230056-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3938,"size_decoded":1808,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3937)","md5":"9a7949052a7f506e86cc0fe3b6bf1733","sha1":"fbb786b586e196d139d0e94d08a1e2084c9818f6","sha256":"4b398481a7ce8375af4d9f58f39410c73a0b70726fe513686d3d51c10ad76cb5","sha512":"8d1b0ceb65cc465df77b06744a2ef25fa00dabe6625b051cbcf9381f60caaf8d7b5bcd2b3cc5f36c3feda3086cd98128bb1fdd7ceb954642c1fb94dfce67e896","ssdeep":"","tlshash":"a281216aa1441a10e13be7026c83eac533179f91f2f35b87b5175883c5c70dddeaba89","first_seen":"2025-05-02T13:02:49.560729Z","last_seen":"2026-09-16T19:44:01.915449Z","times_seen":1545,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.408Z","timestamp":1789587793408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=5584\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=CYhLn1Ls1YGGr2pU0ECQpjKyqGN7DaEAacet3jN9wgU-1789587793.411371-1.0.1.1-l98Rddf9HapMAyOP_JrCkKXraeSAM8FvGYB3LUJuzCW9tdptgFQXpuWq5yzS9jNuM6xKzd8gE6b1sqTzTdpqefHB2Y.oRM_UvfTBeoKfqbjWRa6xyVUyno8UNz2nQha7; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2306\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdccbb75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"CYhLn1Ls1YGGr2pU0ECQpjKyqGN7DaEAacet3jN9wgU-1789587793.411371-1.0.1.1-l98Rddf9HapMAyOP_JrCkKXraeSAM8FvGYB3LUJuzCW9tdptgFQXpuWq5yzS9jNuM6xKzd8gE6b1sqTzTdpqefHB2Y.oRM_UvfTBeoKfqbjWRa6xyVUyno8UNz2nQha7","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=CYhLn1Ls1YGGr2pU0ECQpjKyqGN7DaEAacet3jN9wgU-1789587793.411371-1.0.1.1-l98Rddf9HapMAyOP_JrCkKXraeSAM8FvGYB3LUJuzCW9tdptgFQXpuWq5yzS9jNuM6xKzd8gE6b1sqTzTdpqefHB2Y.oRM_UvfTBeoKfqbjWRa6xyVUyno8UNz2nQha7; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":2721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.916088Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.426Z","timestamp":1789587793426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=6991\r\nset-cookie: __cf_bm=kTyaZJoI9sBeyR9SfQXhSXfuTHQo_mfmbNHltajq0z8-1789587793.4330385-1.0.1.1-ePL2aIgS5E1hvchr6VEpM9D2QUtggKnN4DbheJOV4KhpTOrSt65hHJyjs15f5CdpraSHyrqlOeE_lzYxvpE089uWvVvlCh4VhzUWzEJ6mi.UOWjGtADL_CRT4PML7Q4o; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3573\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc475a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"kTyaZJoI9sBeyR9SfQXhSXfuTHQo_mfmbNHltajq0z8-1789587793.4330385-1.0.1.1-ePL2aIgS5E1hvchr6VEpM9D2QUtggKnN4DbheJOV4KhpTOrSt65hHJyjs15f5CdpraSHyrqlOeE_lzYxvpE089uWvVvlCh4VhzUWzEJ6mi.UOWjGtADL_CRT4PML7Q4o","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=kTyaZJoI9sBeyR9SfQXhSXfuTHQo_mfmbNHltajq0z8-1789587793.4330385-1.0.1.1-ePL2aIgS5E1hvchr6VEpM9D2QUtggKnN4DbheJOV4KhpTOrSt65hHJyjs15f5CdpraSHyrqlOeE_lzYxvpE089uWvVvlCh4VhzUWzEJ6mi.UOWjGtADL_CRT4PML7Q4o; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4572,"size_decoded":5420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-09-16T19:44:01.916743Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.484Z","timestamp":1789587793484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 158054\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Aug 2026 06:31:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: webp_bigger\r\nset-cookie: __cf_bm=lr7B38TxzyTJzs2gQnL3c1MHyZcyTQYLeNIEoqLMutQ-1789587793.4860904-1.0.1.1-ShEu.GTFj6qs1p.ispgF61LjRKGYCnBR6H8b4s2jobrh8R9vBo5rVGDTckAB1Lya2Mpv1._xng2jdM8yibV7C5_ct2CL0wAQh44QbXQrAs3T6EykJeOtiePDZRBvWOnO; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=1,i\r\nage: 6238\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3c25bdd4dbb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"lr7B38TxzyTJzs2gQnL3c1MHyZcyTQYLeNIEoqLMutQ-1789587793.4860904-1.0.1.1-ShEu.GTFj6qs1p.ispgF61LjRKGYCnBR6H8b4s2jobrh8R9vBo5rVGDTckAB1Lya2Mpv1._xng2jdM8yibV7C5_ct2CL0wAQh44QbXQrAs3T6EykJeOtiePDZRBvWOnO","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=lr7B38TxzyTJzs2gQnL3c1MHyZcyTQYLeNIEoqLMutQ-1789587793.4860904-1.0.1.1-ShEu.GTFj6qs1p.ispgF61LjRKGYCnBR6H8b4s2jobrh8R9vBo5rVGDTckAB1Lya2Mpv1._xng2jdM8yibV7C5_ct2CL0wAQh44QbXQrAs3T6EykJeOtiePDZRBvWOnO; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":158054,"size_decoded":158889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x200, components 3","md5":"1d8bdbb23cc58e955b78c7a48678506e","sha1":"3944c99e17f1bf596f592d2d165686076dd58074","sha256":"2b7d09906c75e1a53b69fd51cc3a321b5e8c4ab253b75fe9dcce66469f06f634","sha512":"d96dbb411506c4a9b74dd5361d8b0490b2717ab76c486a917e80291882b63ed05926074f7cdd857f3d3c81de0a1d08912fe7b96d8efd3b02655c884f6510825c","ssdeep":"3072:dd6H9bVhsfJ+zd+DWQR9sWFm4SY+kn7ftpJU7IZcJMa5fFVZeE:ddc9RhZwCs9P1j7fvJQRf9p","tlshash":"11f3121d6b20765831bf5d470e99e82eef7976083923f3b8b403232982db56ad6d1d09","first_seen":"2026-08-31T23:38:12.103065Z","last_seen":"2026-09-16T19:44:01.917413Z","times_seen":29,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.348Z","timestamp":1789587794348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 13:41:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HerTQSbnOPFiuiGd6H2zuRq2HGNnyRQJDDZst86qW1mQl%2FpwgtEzMlS1lubUw2iJOcMCUoliphYN9hCDHPJFGG7Dhgo%2FV9o%2FWV8PP1RzJbEzGI02AGm73wXe2iTGKiW00g%3D%3D\"}]}\r\nage: 2311822\r\ncf-cache-status: HIT\r\netag: W/\"6a870417-3e6\"\r\ncontent-encoding: br\r\ncf-ray: a3c25be2eb131ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":1310,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-09-16T19:44:01.917926Z","times_seen":1978,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":22,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/rest/n/adintl/gray/getGrayInfo","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.461Z","timestamp":1789587794461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"POST /rest/n/adintl/gray/getGrayInfo HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nContent-Length: 42\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"type\":\"pixel_v2\",\"id\":\"293299371379305\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=UTF-8\r\ngetparamsfromurl: false\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 235\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":609,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ebcb3b88e66eba0dee2cc073c9ca93f9","sha1":"6536626ae60269e1d8ad6a8666ab30e305ad0b3d","sha256":"8e678b9c3581e8d694db6c7054883efbde248dfc37f0a3a3407d7f23212351ef","sha512":"86d1e88aca03de0b893f0a424bc5712c3b8f07132970b0a704dab50daec796bba1c85b9cc86d749bb49c1a8132e570bbc784ab1317159540be16618155583b1f","ssdeep":"","tlshash":"cbd097830cc0ab20f8062025898a3f903bfe1b820102a8179b8c79c04dd21a3321a13a","first_seen":"2026-09-16T19:44:01.918456Z","last_seen":"2026-09-16T19:44:01.918456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":193,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v22/t5sEIQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4bxTDHg_ugnAakp8ubq8BIo1pdkkXZj4j1dvKMDV-NHWsOCA0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.646Z","timestamp":1789587794646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/googlesansflex/v22/t5sEIQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4bxTDHg_ugnAakp8ubq8BIo1pdkkXZj4j1dvKMDV-NHWsOCA0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 19:14:43 GMT\r\nexpires: Fri, 10 Sep 2027 19:14:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Jul 2026 17:07:13 GMT\r\ncontent-type: font/woff2\r\nage: 520111\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38316,"size_decoded":39129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38316, version 1.0","md5":"fb2b340e5d74a7d24758d5f6414c057f","sha1":"6acc51ea82fdba9de18dd7ea1b5e371e0203edbe","sha256":"6657698f2b72dfcef5f6b2a437051a575401d3cae4a3c8344b5dbd6ab07b8dd6","sha512":"152890bc4d3535a319e23c1f7c540214ac66775471cc6485776babd5e746b909fe118464f68a93812d7972f0c540fef1ed5214076ada31e9a9c9d79ba99b16a2","ssdeep":"768:ItfIwovw8MUdjLj+/0y/CLyKh1LtZBa2f1fhAlYdvSBYeBtbcWCJQinodtzYzM:IyS8MC/+/FwyKLc2ZJdv5eBtbc4ingn","tlshash":"fc0301cafecb9cb0ed69bb5268e2fe757e5cf3046124da242014b175d312d850c9ee16","first_seen":"2026-07-31T01:07:30.252454Z","last_seen":"2026-09-16T19:44:01.894841Z","times_seen":130,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/favicon.png","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:18.799Z","timestamp":1789587798799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9; _did=web_5310107626042188; kwai_uuid=05469b1de6eb090b34ed487ceb01933c; _k_cp=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKE0v9JtyOL8cWunTpSV2f8JOGAITlWMYYDFCsi0WS9gE8PChIm2lizlWVTCxKrBoTyYrQHJTg4G2qxhYjMGcqygNwNXIJiW%2BZKuwGFlbfiP5GRMpQBh6LMXApHX7C69MAbES8o5eBFo5Dck\"}]}\r\ncontent-type: image/png\r\nage: 1753\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bfe8bf9d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7817\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7817,"size_decoded":8501,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b186bcc2758eb2e3b1744d95992b3ee7","sha1":"98b012851a5ac820eb5a9fecdaaaffaac019d4fc","sha256":"cc9057ff0474944ef49ee6ce9c073505d9b81c36232b4bae9acb3bd1e68397f5","sha512":"c2d171c7dae142d9179cdd48aec671f428423919b43a00a54ec5970ca79c65cb24b9f497b64862189465b6aed6b8acdbd2b6b9dfd4fc811bf18807c610d87dd0","ssdeep":"96:EWTt1c5sXhf5VkKOd0akBTIkg39/AiwRHDy0eodvnRoo8cNRFKz90P6/aD0zUERU:7PtJtvakp7FRjyLYvRFbKz9RyryZlM","tlshash":"6cf19e1b1e5e90e7d002ba387fa88be0e972f59010be73d417f5945e8cc6be29086dc4","first_seen":"2025-04-03T17:58:59.147051Z","last_seen":"2026-09-16T19:44:01.919618Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.370Z","timestamp":1789587793370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=zOgcDqoYNSFXNZffR5O3zypyxx0sJmULbuT84AI1tUo-1789587793.3772051-1.0.1.1-0XYtYahF9uEPqV.2R1FZO6CP0qaala5rUPNAW8xAVCaDGU81fdq3WkecW2DS6BBid.9R9dVCfE_VwtK2T4U7A3nij1lThGz5V7t5oeTzpJ0sAmBufY4b_Y8VrmD8EE5H; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1967\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a9f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zOgcDqoYNSFXNZffR5O3zypyxx0sJmULbuT84AI1tUo-1789587793.3772051-1.0.1.1-0XYtYahF9uEPqV.2R1FZO6CP0qaala5rUPNAW8xAVCaDGU81fdq3WkecW2DS6BBid.9R9dVCfE_VwtK2T4U7A3nij1lThGz5V7t5oeTzpJ0sAmBufY4b_Y8VrmD8EE5H","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zOgcDqoYNSFXNZffR5O3zypyxx0sJmULbuT84AI1tUo-1789587793.3772051-1.0.1.1-0XYtYahF9uEPqV.2R1FZO6CP0qaala5rUPNAW8xAVCaDGU81fdq3WkecW2DS6BBid.9R9dVCfE_VwtK2T4U7A3nij1lThGz5V7t5oeTzpJ0sAmBufY4b_Y8VrmD8EE5H; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-09-16T19:44:01.921198Z","times_seen":3242,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/USDT.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.508Z","timestamp":1789587793508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /USDT.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1364\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Apr 2025 09:58:57 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2462\r\nset-cookie: __cf_bm=5xfKvLvHSvLXOuvMPM9i7Ct4PXq30Hgnlg7bYECCT9o-1789587793.5146291-1.0.1.1-xknOCy3O3AwDdG4wd8L_4dgCu4jOAiiCyO.dpEdTROHihXixR836hvj3ahrxFd5JQl_JMniGh.bPduOS6z01pqfXcp1LzgpKBg1gio0uqmM08UeCxG8JghyIYVuk.zZ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2963\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd5e8d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"5xfKvLvHSvLXOuvMPM9i7Ct4PXq30Hgnlg7bYECCT9o-1789587793.5146291-1.0.1.1-xknOCy3O3AwDdG4wd8L_4dgCu4jOAiiCyO.dpEdTROHihXixR836hvj3ahrxFd5JQl_JMniGh.bPduOS6z01pqfXcp1LzgpKBg1gio0uqmM08UeCxG8JghyIYVuk.zZ3","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=5xfKvLvHSvLXOuvMPM9i7Ct4PXq30Hgnlg7bYECCT9o-1789587793.5146291-1.0.1.1-xknOCy3O3AwDdG4wd8L_4dgCu4jOAiiCyO.dpEdTROHihXixR836hvj3ahrxFd5JQl_JMniGh.bPduOS6z01pqfXcp1LzgpKBg1gio0uqmM08UeCxG8JghyIYVuk.zZ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":2212,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ffc6f49636d50bb237ffaf9570acaa40","sha1":"0c0d8e51a3a2d939f0d747ee11d3fd9abcda23ca","sha256":"1be377c146f0a2398cd62fc5cd10dfcdca48be513cb3c0762fb87bdcb652b22e","sha512":"d0d9f24d0f74d1e9fd0cddd2eae301212e176a1e61fac13466c65a406195468aa5055d48af4df00fd1f972e4519b5a4d205236de5b9f31b6750b64e8fa4bc80c","ssdeep":"","tlshash":"2c21b8049c422ae571e31a23a1bedac394a1888369bac5c12602c32276e26027156e4e","first_seen":"2025-06-02T09:38:49.675951Z","last_seen":"2026-09-16T19:44:01.921857Z","times_seen":974,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.577Z","timestamp":1789587794577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 33048\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"38aaf-dXWYf3DuXJH2oOdxs4xlB+RXq2E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nage: 3625735\r\nx-served-by: cache-fra-etou8220113-FRA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232111,"size_decoded":33809,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1b1cb0e2be9a21f091a87691f20c6300","sha1":"7575987f70ee5c91f6a0e771b38c6507e457ab61","sha256":"d85327d99c7a3ee1f9b5d0500d1370acea3ad2db39c163c2f51f232baedbdede","sha512":"d9b0500a3727c3ae7c2e1a389e55c971ce96915fd4c6913fb00a246d73f140d1aa98d750ad6aadc36e8db3d90517fc86efdda9291d52c7cfd8d4b7f55cde0628","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41r:EnXp9GfVV98II6V6pz600I41r","tlshash":"123482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-09-04T15:51:36.002152Z","last_seen":"2026-09-16T19:44:01.922471Z","times_seen":5014,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/sounds/bellAndBubble.mp3","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.711Z","timestamp":1789587799711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /sounds/bellAndBubble.mp3 HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28830\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 09:17:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6aa275b8-709e\"\r\nexpires: Fri, 16 Oct 2026 19:14:06 GMT\r\ncache-control: max-age=2592000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1752\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5L3XO%2FMszQbo0HEofJSIsL9yjchYXORUlaFQbRoAB35Tq8VBBlcAlUgQ0GrIJgkINpzRs3IO4CI555N3OicAK2RF9Zgz1wtF5MVUMFU%2Bz7%2BWmkdddTscyELbnSSsUTlJR52oQ%3D%3D\"}]}\r\ncf-ray: a3c25c04380a1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28830,"size_decoded":29749,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"4e6689b653d59f3f9b8cd88cce463a4a","sha1":"7eecc5b50eb8003baf68c2a8bcddaffc062391f9","sha256":"33201ea131f20acb2298b4eac960b939b1ded41ed2698bb325843f205524877d","sha512":"309ac42474682287b54811f6f8e629a8f5655b614f7183bdf80653263a1ed89263b723d8053df9ee0f8b16b581202cbd634fae147661ef6f48b45531cb56a733","ssdeep":"192:9fVGvxZQqYXaWEYtLDsfjshy4l7l7/NxspnyOyDqTJtLqmP/qvQ5IdibE+1RdAs9:9fkxvWdPIAhyG77cwDwem6vwcib1a","tlshash":"c1d2496173e39289e5a14b7c31a3db64ffd2ed81606dea4b52aa3b00627c385b4504f6","first_seen":"2023-12-01T05:00:13Z","last_seen":"2026-09-16T19:44:01.923028Z","times_seen":260,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.758Z","timestamp":1789587799758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 40135\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Aug 2026 09:44:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a7aef17-9cc7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 1864821\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lni5KzOaMHnrCU%2FrdGDxQ%2BX8VY7fuUrKpCrXTksiZqn8VOhcgybqrWRjz%2BLfXTgGJDCzRx2WOl6CWhkbuYkvwcT7Mvjur2xw8k%2BeakbPhAzFxE%2FtCHBUAhwB66LfAW6a6y16QA%3D%3D\"}]}\r\ncf-ray: a3c25c0478701ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519702,"size_decoded":41085,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d6a41c0e43032ad269bbc0abf76680f6","sha1":"93f4b18e17598f13366ef1ef1ead8732a9c23f0c","sha256":"fb30056e6d7570f3f6ecc11fefab1bf262bbf1680bbbb3d6b0289a6a9f7db391","sha512":"e3c660aa865557c0d0f33a30963dfa3879f8ae1d7399b4be29baffc216a4b744248a4bbb62eaabaacd3e7d374cb5cabad9d9a170424d769f1282dd77b050cb90","ssdeep":"1536:jCSnHfJOjr4YP+CQ/mOwT4FjFTa+02FJAMYncA7hN67+qrqUixyii/SYJM1aGV6Y:nOxOweM","tlshash":"14b4c9409495291b6cb3293f348772591d3fe022c79329ee7569e3ecc38bd635262f89","first_seen":"2026-08-11T14:07:40.757302Z","last_seen":"2026-09-16T19:44:01.923641Z","times_seen":103,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.401Z","timestamp":1789587793401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2322\r\nset-cookie: __cf_bm=oVbhJzpB.f6k3PmGiXKblh0Ibgu5i7rJpKzfCVLJX_Y-1789587793.4056253-1.0.1.1-x5k.ook3znO9uT78D6B5appa5ZwgNQ_mmczl6HZfkGtX18x84kqyMh7nO.ZQKig5Wtz2aHX7sNUn70klPmYxDUndXjbjk6XA0TB5R7fQ5qgIpf7R9YtEZlS7SJ9VTVld; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2454\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"oVbhJzpB.f6k3PmGiXKblh0Ibgu5i7rJpKzfCVLJX_Y-1789587793.4056253-1.0.1.1-x5k.ook3znO9uT78D6B5appa5ZwgNQ_mmczl6HZfkGtX18x84kqyMh7nO.ZQKig5Wtz2aHX7sNUn70klPmYxDUndXjbjk6XA0TB5R7fQ5qgIpf7R9YtEZlS7SJ9VTVld","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=oVbhJzpB.f6k3PmGiXKblh0Ibgu5i7rJpKzfCVLJX_Y-1789587793.4056253-1.0.1.1-x5k.ook3znO9uT78D6B5appa5ZwgNQ_mmczl6HZfkGtX18x84kqyMh7nO.ZQKig5Wtz2aHX7sNUn70klPmYxDUndXjbjk6XA0TB5R7fQ5qgIpf7R9YtEZlS7SJ9VTVld; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1316,"size_decoded":2164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.924234Z","times_seen":3831,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.663Z","timestamp":1789587799663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/audio-player.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jun 2026 09:49:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pF2iUhGtR%2FNcm29YH%2BV24AF%2FnBFxs5caLCqMyyptpMs2CPC6M9WkKdv8mpZNb6BXhU3xAQCvkeYO02on15yvCbxEOKnth1RPD%2BrOhMnwVqyR06h9UI7h8ROXmMaWs9Z0lg6v2Q%3D%3D\"}]}\r\nage: 4203952\r\ncf-cache-status: HIT\r\netag: W/\"6a2a8491-6b07\"\r\ncontent-encoding: br\r\ncf-ray: a3c25c03efb81ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27399,"size_decoded":9367,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27399), with no line terminators","md5":"65cbf911501a0de13afb9d1cb71933cb","sha1":"e9236ab09f15becfa6d86aeb5995fc896f1aab1b","sha256":"e92027b36a47b6e3c2e1c084ac31e8e7e6a4b904bbaa42d241ccf7f4e48d7a62","sha512":"a619c7409dd01aa33de6a1eb397188a42da076126f727c119ed69455158ccff9421daec4d8135dfee4e719b1d62aa70bc767f4430238da97714805c43655cc35","ssdeep":"384:Brt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSLcg:MwXkPGdg7HnqhSTGlnLbcqwg","tlshash":"70c22c48b7e17d54435a34b3223f4a063bb51652545a3240f016c2e9bf78e8b91beeed","first_seen":"2025-09-01T08:05:49.861005Z","last_seen":"2026-09-16T19:44:01.927862Z","times_seen":1620,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.425Z","timestamp":1789587793425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4280\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 06:08:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=xy6Z2mYgV4AkQIHhO3IpbvV.Ax38bBpk3sOmwSH7uGc-1789587793.4281886-1.0.1.1-gwdp2G8CNr8NFVvXDOpuu53_wp.G1c_HFPznWzz19Y2EOVEjhC85onXQ9AE9Xe_ohmjtCTNFreHk.uL3sxWiPHru8oRH6aGEfyspNdKfQ0eingmlCBfzOcJmicnkwXK8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=5926\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 5281\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec2d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"xy6Z2mYgV4AkQIHhO3IpbvV.Ax38bBpk3sOmwSH7uGc-1789587793.4281886-1.0.1.1-gwdp2G8CNr8NFVvXDOpuu53_wp.G1c_HFPznWzz19Y2EOVEjhC85onXQ9AE9Xe_ohmjtCTNFreHk.uL3sxWiPHru8oRH6aGEfyspNdKfQ0eingmlCBfzOcJmicnkwXK8","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=xy6Z2mYgV4AkQIHhO3IpbvV.Ax38bBpk3sOmwSH7uGc-1789587793.4281886-1.0.1.1-gwdp2G8CNr8NFVvXDOpuu53_wp.G1c_HFPznWzz19Y2EOVEjhC85onXQ9AE9Xe_ohmjtCTNFreHk.uL3sxWiPHru8oRH6aGEfyspNdKfQ0eingmlCBfzOcJmicnkwXK8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4280,"size_decoded":5128,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5c94e134973f78a3abd09f8ecaaa1a7","sha1":"b079718fafc29f5496df6186b28ed6aa4e8000c6","sha256":"de1ffff913bd404be635b1f1fafa41fb2f83e65ebef63467adeade423d491315","sha512":"f6519ea55de5c7b50edf0ce8292964fc798d4397733c19048e769f9de89c8ac5ca843c8544f4d9a1c8f046049df2f6bc6509af0057a76258158206780130ced2","ssdeep":"96:OC1l25Lw1FSSu4F4GR0hyjDxGCMiKmfLPCiKjf9S9Yy:Rl25Lw3Sl4RRRj1GfiKG5S9S95","tlshash":"70917cd24d58e0864d78194b4dccfb38405d143e4d955fe3261a47fc02bc2c0612edb2","first_seen":"2025-11-19T04:54:17.138379Z","last_seen":"2026-09-16T19:44:01.928552Z","times_seen":2336,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/8db7260a18b1be68e8710cfdbf6be3df.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.486Z","timestamp":1789587793486,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/8db7260a18b1be68e8710cfdbf6be3df.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/images/logo.png","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"172.67.161.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.579Z","timestamp":1789587794579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 07:39:30 GMT","end":"Thu, 29 Oct 2026 07:39:29 GMT"},"fingerprint":{"sha1":"F3:ED:A1:A7:2C:6A:9E:55:CB:AF:2D:9A:C6:4C:44:3F:FE:42:8E:1D","sha256":"65:72:E6:C2:76:B7:9F:06:75:1B:4B:07:BE:7F:2A:C6:0A:BB:C1:7B:B9:86:D2:17:EA:9F:2E:C4:9B:A0:F7:BD"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/widget2.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 05:20:42 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQOq0gEGsc%2BqFeWS18LwDnxmLfSo2bi%2Fwbm6%2FOVDNaKo4pTtTX2%2BCz7UBdnigl3HxMDYB2F1UVUm9vEB0JI9QSM%2F9n%2FLmQkZ%2BLqbnOvKZPGYegfcs%2F2mD6KAiKVk\"}]}\r\ncontent-type: image/png\r\nage: 6474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25be4290da8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32346\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":33022,"mime_type":"image/png","magic":"PNG image data, 1402 x 530, 8-bit/color RGBA, non-interlaced","md5":"088707efda21e9c3b5b88ffd840b506e","sha1":"0a9adca5e4ad442ea57f6f67663c67ae5c2e28c7","sha256":"d48fbeed2e913efafb118fe6c973a4ffe70d30f5e77403325d5473c4f7b50bf9","sha512":"71cc4b94e0821a842e3006db79d2a9eb1e0d61739608f769941079151d28f1501dadae366d57dc82dea99e7915ce8c6f9e20fed5d814c69edef46270f6d99985","ssdeep":"768:OoiwvJSVtbtAXjtABsfNR+OQ9wdO7tFvO9pSx9m:2whSfbtAXjtAefNR+OQ9wdsFvOv","tlshash":"23e2e1bc1f8c8c00c1b150fcaafa81d315aa7f1b5151e5cab1759c2f9ce2d06be74298","first_seen":"2026-04-17T05:54:49.138927Z","last_seen":"2026-09-16T19:44:01.929067Z","times_seen":1119,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/css/old/variable.css","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.281Z","timestamp":1789587793281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXQsbiswLa%2BzXHuEjfAOk27%2BZRjhEAT2SEriySEOntZYby2mTsYrQ%2BdFgRKcVKJSzJrLNqCEBt5V1PAbmDMe%2BOJZbZUdHb5%2Bw4mloXm1wTLW2Nwn7ZgZUhfFlyOEWFatoz%2BgEt6xupd8iU7y\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 2246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc39c0d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":1049,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-09-16T19:44:01.929606Z","times_seen":3136,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.412Z","timestamp":1789587793412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1698\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=J.aTzMu_FbyWqb2R9kLQ78Kc.P1Zl1wzcDIGuX_cAw4-1789587793.4241145-1.0.1.1-cObr8ONihKtFaO2DRIXyUMVJdmeKA_0TzvSA5nsvZDYt7K_3fwowGMg4njafbDQDwGcDUSeE1Qm7PiNjEgmBVrsOWq8_q2slag0S2Gzb_F_OCKT_UlI6RHqDeT04cpms; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 1517\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec065a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"J.aTzMu_FbyWqb2R9kLQ78Kc.P1Zl1wzcDIGuX_cAw4-1789587793.4241145-1.0.1.1-cObr8ONihKtFaO2DRIXyUMVJdmeKA_0TzvSA5nsvZDYt7K_3fwowGMg4njafbDQDwGcDUSeE1Qm7PiNjEgmBVrsOWq8_q2slag0S2Gzb_F_OCKT_UlI6RHqDeT04cpms","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=J.aTzMu_FbyWqb2R9kLQ78Kc.P1Zl1wzcDIGuX_cAw4-1789587793.4241145-1.0.1.1-cObr8ONihKtFaO2DRIXyUMVJdmeKA_0TzvSA5nsvZDYt7K_3fwowGMg4njafbDQDwGcDUSeE1Qm7PiNjEgmBVrsOWq8_q2slag0S2Gzb_F_OCKT_UlI6RHqDeT04cpms; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":994,"size_decoded":1841,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-09-16T19:44:01.930219Z","times_seen":2773,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/jquery-3.6.4.min.js","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.291Z","timestamp":1789587793291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWD1SHXBYKU8ROFw%2BTZTnm%2F58gFLhF081BB2f5avu0%2Fm9rmn3n4rzVyMpocFCKKukH8a8w8HIgfIbs4WnTYYrXZAUwQufCHYCHoHi32ShgoqormkxiXUH3%2BscPvM23SWVfI8haA%2B8Fzl9fTk\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 2246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc49c5d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":33623,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-09-16T19:44:01.93081Z","times_seen":4234,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-25.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.481Z","timestamp":1789587793481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /banner/mgl-25.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 586899\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Aug 2026 06:12:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=1,i\r\nset-cookie: __cf_bm=G0PLMbiq5eBXi1dK4_1ICbu7JDtD8XF92VHA4kHAcUI-1789587793.4849205-1.0.1.1-M4rH0_kqg76vZQa7_xddAMhoX83SPac7h6q91Hqh1X.i3qLm7OgEqMD8M9MGTijKT1NNNacQoXhcqfcWzqGkapI6Pku2aeDtgz6xcUcaaWiHVETNmVuLFcRZ71rUqY2g; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: webp_bigger\r\nage: 2746\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3c25bdd4db25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"G0PLMbiq5eBXi1dK4_1ICbu7JDtD8XF92VHA4kHAcUI-1789587793.4849205-1.0.1.1-M4rH0_kqg76vZQa7_xddAMhoX83SPac7h6q91Hqh1X.i3qLm7OgEqMD8M9MGTijKT1NNNacQoXhcqfcWzqGkapI6Pku2aeDtgz6xcUcaaWiHVETNmVuLFcRZ71rUqY2g","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=G0PLMbiq5eBXi1dK4_1ICbu7JDtD8XF92VHA4kHAcUI-1789587793.4849205-1.0.1.1-M4rH0_kqg76vZQa7_xddAMhoX83SPac7h6q91Hqh1X.i3qLm7OgEqMD8M9MGTijKT1NNNacQoXhcqfcWzqGkapI6Pku2aeDtgz6xcUcaaWiHVETNmVuLFcRZ71rUqY2g; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586899,"size_decoded":587734,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"077ba657cd6da121df263743a24839fc","sha1":"60c3b5b08bb7fda6e04381a691baf835adb1b8a7","sha256":"e36b45b8d0daf335c6bc171d7148ff1d34227b88e8c3e9d7fd01f267fa772ecd","sha512":"eee165fc4ac90a49e2d246eb66f351420f8bd8f9ca0ee72967141d0aa0418c77108f4e7c4959e93c682feea26552d96c0aab2c90d8182e8cc0b27a401450a1a1","ssdeep":"12288:Gh3DnLIVDbcErsyLNd53B6erz/D7JaGvNkJl6uiBGci1D2sEc39p88XCD:Gh4Bc2rlM36nfift389","tlshash":"e3c423befb03071e95bdc77211cbd6e9804883a179366fcca72089b0b54b8438d69797","first_seen":"2026-08-31T23:38:12.064407Z","last_seen":"2026-09-16T19:44:01.931325Z","times_seen":33,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/a893553fb0ef04426d914ac3eb07433b.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.492Z","timestamp":1789587793492,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/a893553fb0ef04426d914ac3eb07433b.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/36bf5bf0c8fdf08c1270124808f060e1.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.504Z","timestamp":1789587793504,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/36bf5bf0c8fdf08c1270124808f060e1.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkale.online/gif/mahkotaslot.gif","fqdn":"sorkale.online","domain":"sorkale.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.443Z","timestamp":1789587794443,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /gif/mahkotaslot.gif HTTP/1.1\r\nHost: sorkale.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.472Z","timestamp":1789587795472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ap4r.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Aug 2026 00:00:00 GMT","end":"Thu, 04 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:09:B3:9B:CB:28:B5:EF:F7:4D:06:F0:0E:08:72:15:2F:D0:3C:EB","sha256":"2E:2F:E5:99:09:88:B3:88:C7:2E:DB:AE:4A:C5:9D:DE:59:DD:A8:44:5A:1E:E2:E7:E9:1F:3A:07:85:F0:02:FA"}}},"request":{"raw":"GET /kos/s101/nlav112572/pixel/core.js?sdkid=293299371379305\u0026lib=kwaiq HTTP/1.1\r\nHost: s21-def.ap4r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nage: 1425172\r\ntiming-allow-origin: *\r\ndate: Mon, 31 Aug 2026 07:50:23 GMT\r\nexpires: Wed, 30 Sep 2026 07:50:23 GMT\r\ncache-control: max-age=2592000\r\nx-oss-request-id: 6A95323FC7A1153739D08C36\r\nlast-modified: Mon, 31 Aug 2026 06:48:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 502351017907014483\r\nx-oss-storage-class: Standard\r\ncontent-md5: ePjHjmJ7oyKJu20dVgQegw==\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: t88ddOnRta-wbHRaLLuMUHov2NRXuuwbiA3P91bNpfiaZXCLgFy7iA==\r\nvia: 1.1 abe7c423e3f506d9a86c5f57fbc5a762.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":320533,"size_decoded":84663,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)","md5":"78f8c78e627ba32289bb6d1d56041e83","sha1":"2dd4b719e2a7343c7c86489695a6a96542ad6b63","sha256":"7d9cf702cbbf9bda1c7da54e35c441b3fc98c554896764e9e8e7fdbffa002a85","sha512":"c3fe3d84d21902e25675571480cf7ad679cbf684e6da539bebb3d6748c35d97760879d5c7ee79ef7e7358467f52da026f5858ef9a15dfe00416e111e6e8a2642","ssdeep":"3072:4AmErvTbau2SgDfKjcqbvyD5h4rnTTx3nulpgWc4hm/Mq:4A/75gzKjcqbvyD5h2TTx3aSWhm5","tlshash":"fb64e8c9b6d6b02143a7a4b9803f210ab33f7a19744c8450f666d9d17c79a4fa223f7d","first_seen":"2026-09-01T03:17:15.44051Z","last_seen":"2026-09-16T19:44:01.932456Z","times_seen":30,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.272Z","timestamp":1789587793272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nage: 2624983\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":33856,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-09-16T19:44:01.933079Z","times_seen":5511,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":12,"receive":44,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.418Z","timestamp":1789587793418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-pok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 940\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Aug 2026 06:24:07 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=XCJ5EaDkyQnv41NyJxrUcfGL_qiWmgDEmFuCp4MYMHg-1789587793.4257596-1.0.1.1-.53zKwFsD8XHojQkp5GL4ItgShlIGY6TpE_hBJ00EchDrNQHoyHjv7RqfY6NvHmIu642Empt2Ur9bB7GHLVxECSnYlyA5nDPR6QadmlBktulUZWaWthTWL8YbGupSNZM; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=4363\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3829\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec195a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"XCJ5EaDkyQnv41NyJxrUcfGL_qiWmgDEmFuCp4MYMHg-1789587793.4257596-1.0.1.1-.53zKwFsD8XHojQkp5GL4ItgShlIGY6TpE_hBJ00EchDrNQHoyHjv7RqfY6NvHmIu642Empt2Ur9bB7GHLVxECSnYlyA5nDPR6QadmlBktulUZWaWthTWL8YbGupSNZM","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=XCJ5EaDkyQnv41NyJxrUcfGL_qiWmgDEmFuCp4MYMHg-1789587793.4257596-1.0.1.1-.53zKwFsD8XHojQkp5GL4ItgShlIGY6TpE_hBJ00EchDrNQHoyHjv7RqfY6NvHmIu642Empt2Ur9bB7GHLVxECSnYlyA5nDPR6QadmlBktulUZWaWthTWL8YbGupSNZM; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":940,"size_decoded":1787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfd7b437aa31d3f9d59bb631cbbba1cf","sha1":"305d31761b35943a74beab080e46ab694d131d6d","sha256":"4a9129dbb063258d75f8532d0c3f7cdbb4a3c8400f48813b512e5f5aa9e1b4d6","sha512":"eea2cf2968aaed6430ce5c7ad80404ff462b05c5759917ea1b024f51a1a5068256d6895db4f32ba3a746a0b6df576aadc5348e2e044e3684f55b114bc8d79f93","ssdeep":"","tlshash":"9411846c7a7123b59a1e766c089af95e9dd0e148b5f28351c752e83c8b66bd62038027","first_seen":"2026-08-05T09:10:50.975331Z","last_seen":"2026-09-16T19:44:01.933664Z","times_seen":110,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sports.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.456Z","timestamp":1789587793456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/sports.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=zCYExt96ZnW4SVSbBRa6UYIEzYOh9M6QgbdEsDWjnp0-1789587793.4598956-1.0.1.1-yxBYbyFwEV.WL.Mk4GT89ucRIJhxjBfvVVA0HU1O5gYf5n37FynZ92fY4muqA9V2kViy0iCFn0iAR1nuS7LqrUdTMiuV63GKSLwsx2feaGhJB7nEcFYOd0i04CJ7yjZt; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3789\r\nvary: accept, accept-encoding\r\nage: 2708\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd1d195a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zCYExt96ZnW4SVSbBRa6UYIEzYOh9M6QgbdEsDWjnp0-1789587793.4598956-1.0.1.1-yxBYbyFwEV.WL.Mk4GT89ucRIJhxjBfvVVA0HU1O5gYf5n37FynZ92fY4muqA9V2kViy0iCFn0iAR1nuS7LqrUdTMiuV63GKSLwsx2feaGhJB7nEcFYOd0i04CJ7yjZt","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zCYExt96ZnW4SVSbBRa6UYIEzYOh9M6QgbdEsDWjnp0-1789587793.4598956-1.0.1.1-yxBYbyFwEV.WL.Mk4GT89ucRIJhxjBfvVVA0HU1O5gYf5n37FynZ92fY4muqA9V2kViy0iCFn0iAR1nuS7LqrUdTMiuV63GKSLwsx2feaGhJB7nEcFYOd0i04CJ7yjZt; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":648,"size_decoded":1495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d70a305bde0a2cd5afb3d14c5055235","sha1":"97b47a1a205c9c3759e2aa0e7d42a8eb8c94a691","sha256":"62675e8d3f1ecf4c407ec5d846e07f842347e69f44835c5612d23c61f0b59577","sha512":"7fdd2042c9efb3fcec6b93704328103112be80bf2e10030227ab1a5906ba6d30f4675b89f025d8186353a9e6a72ff3c99e3941ff9260d1e90a46012db530ca37","ssdeep":"","tlshash":"d2f0c280c300250f8aa41d8ca74ca42e4360ab82167c712e03832eb473ed10822b0270","first_seen":"2025-11-19T10:28:57.200422Z","last_seen":"2026-09-16T19:44:01.934226Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.389Z","timestamp":1789587794389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:45 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33029\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":30656,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-09-16T19:44:01.935148Z","times_seen":17694,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/1df992d91eb0877558c872a18ea605f0.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.493Z","timestamp":1789587793493,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/1df992d91eb0877558c872a18ea605f0.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.414Z","timestamp":1789587793414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4417\r\nset-cookie: __cf_bm=nX32UhuiENZIyIQLYz4e2omCWC8r3JO60VErUZsaBxg-1789587793.4249496-1.0.1.1-ip_tSDVakGerv8NC7lQQR59diFJ5vsC.IxUCBJPhj.qDfs80.AWfaZLiGSIRePG25yFrTbudblp_ndHitQd4VvVbLxbQ20ioSv7Z0iuY8Q1hEjG7_65TisBM1_vXO7fI; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 4908\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec0d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"nX32UhuiENZIyIQLYz4e2omCWC8r3JO60VErUZsaBxg-1789587793.4249496-1.0.1.1-ip_tSDVakGerv8NC7lQQR59diFJ5vsC.IxUCBJPhj.qDfs80.AWfaZLiGSIRePG25yFrTbudblp_ndHitQd4VvVbLxbQ20ioSv7Z0iuY8Q1hEjG7_65TisBM1_vXO7fI","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=nX32UhuiENZIyIQLYz4e2omCWC8r3JO60VErUZsaBxg-1789587793.4249496-1.0.1.1-ip_tSDVakGerv8NC7lQQR59diFJ5vsC.IxUCBJPhj.qDfs80.AWfaZLiGSIRePG25yFrTbudblp_ndHitQd4VvVbLxbQ20ioSv7Z0iuY8Q1hEjG7_65TisBM1_vXO7fI; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":2614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-09-16T19:44:01.935707Z","times_seen":3737,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.390Z","timestamp":1789587794390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:13 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33061\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":13060,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-09-16T19:44:01.936346Z","times_seen":13767,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.379Z","timestamp":1789587793379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=SytfvAWdESSNYt4V20dm45N8z2reFbynKXUPW3ia47c-1789587793.3946657-1.0.1.1-idsSMkLv7ZzS46nUtc_d3QUQg89Tzh.Ls31ahp35JuIvZkE8tvmFRZdqvYwwOgYKyyyC_PkdDN2G3zFyjzZwqxQX5jHrycVnNDSuJ1GvXUaQqH6amX0afEVHpEtuiQnr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=4157\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 5534\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab325a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SytfvAWdESSNYt4V20dm45N8z2reFbynKXUPW3ia47c-1789587793.3946657-1.0.1.1-idsSMkLv7ZzS46nUtc_d3QUQg89Tzh.Ls31ahp35JuIvZkE8tvmFRZdqvYwwOgYKyyyC_PkdDN2G3zFyjzZwqxQX5jHrycVnNDSuJ1GvXUaQqH6amX0afEVHpEtuiQnr","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SytfvAWdESSNYt4V20dm45N8z2reFbynKXUPW3ia47c-1789587793.3946657-1.0.1.1-idsSMkLv7ZzS46nUtc_d3QUQg89Tzh.Ls31ahp35JuIvZkE8tvmFRZdqvYwwOgYKyyyC_PkdDN2G3zFyjzZwqxQX5jHrycVnNDSuJ1GvXUaQqH6amX0afEVHpEtuiQnr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":2030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.936889Z","times_seen":3833,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.380Z","timestamp":1789587793380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2758\r\npriority: u=4,i\r\nset-cookie: __cf_bm=mVfXB4hBPZQuF_4xeSTBvNFe5ZAtUigtDuYUjEeTRb4-1789587793.3963556-1.0.1.1-rxXifKN2ohQ3O.BwHGhGXIHduRqU9tayedpKivTdQwAzgdgkpZXMcGLFgR.ehn0mWDM355P5VDOIDH7XFSEPIBP6S1iJ6GT0TpdNBJlfE4qKHXDtllbq3xU5RSvUYEid; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 3346\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab415a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"mVfXB4hBPZQuF_4xeSTBvNFe5ZAtUigtDuYUjEeTRb4-1789587793.3963556-1.0.1.1-rxXifKN2ohQ3O.BwHGhGXIHduRqU9tayedpKivTdQwAzgdgkpZXMcGLFgR.ehn0mWDM355P5VDOIDH7XFSEPIBP6S1iJ6GT0TpdNBJlfE4qKHXDtllbq3xU5RSvUYEid","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=mVfXB4hBPZQuF_4xeSTBvNFe5ZAtUigtDuYUjEeTRb4-1789587793.3963556-1.0.1.1-rxXifKN2ohQ3O.BwHGhGXIHduRqU9tayedpKivTdQwAzgdgkpZXMcGLFgR.ehn0mWDM355P5VDOIDH7XFSEPIBP6S1iJ6GT0TpdNBJlfE4qKHXDtllbq3xU5RSvUYEid; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":2372,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-09-16T19:44:01.937434Z","times_seen":2911,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s21-def.ap4r.com/kos/s101/nlav112572/pixel/events.js?sdkid=293299371379305\u0026lib=kwaiq","fqdn":"s21-def.ap4r.com","domain":"ap4r.com","tld":"com"},"ip":{"addr":"108.157.214.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.254Z","timestamp":1789587794254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ap4r.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Aug 2026 00:00:00 GMT","end":"Thu, 04 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:09:B3:9B:CB:28:B5:EF:F7:4D:06:F0:0E:08:72:15:2F:D0:3C:EB","sha256":"2E:2F:E5:99:09:88:B3:88:C7:2E:DB:AE:4A:C5:9D:DE:59:DD:A8:44:5A:1E:E2:E7:E9:1F:3A:07:85:F0:02:FA"}}},"request":{"raw":"GET /kos/s101/nlav112572/pixel/events.js?sdkid=293299371379305\u0026lib=kwaiq HTTP/1.1\r\nHost: s21-def.ap4r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nage: 1776683\r\ntiming-allow-origin: *\r\nx-oss-request-id: 6A68A9DC2DA69A3938DE51BD\r\nlast-modified: Fri, 05 Sep 2025 06:08:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6186501676566625780\r\nx-oss-storage-class: Standard\r\ncontent-md5: Myml7Bs4pZB1uo8wbi6yQQ==\r\nx-oss-server-time: 16\r\ncontent-encoding: gzip\r\ndate: Thu, 27 Aug 2026 13:08:48 GMT\r\nexpires: Sat, 26 Sep 2026 06:11:51 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: rCYp1L8hxK67MtLjglHVwWqhqozyeVEadcV3nzQ3i5RlKxjUirxweA==\r\nvia: 1.1 abe7c423e3f506d9a86c5f57fbc5a762.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11911,"size_decoded":4953,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11903), with no line terminators","md5":"3329a5ec1b38a59075ba8f306e2eb241","sha1":"2ffc991974976153830739483ba55a09fd820fe3","sha256":"295b10e04cf5ea7d4e35f3ea4e76016e92fe72f367065ee8aa741d47621662b6","sha512":"8dd23d108855e8b9d2a0b96d93c107a5217c33e0634df0dcf7dc0a8adf2296be7731f2bf22318314fbabd7dc64253b8c5913f8e9095c96902d24b700994b7db6","ssdeep":"192:3XAi3l4rl4/79Ox6XvyBQsE0BtFJ7ANpiAixlBOIDy8BPjkW/DK:3Xv14yVXXWJ7ipqxTE8xoSDK","tlshash":"1a320b9b34a5fd5413b164e01d7b760ab237666b064de310d22dc8e09c6cbcf622be76","first_seen":"2025-09-06T04:14:17.636582Z","last_seen":"2026-09-16T19:44:01.938015Z","times_seen":2170,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":23,"connect":37,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/fonts/icomoon.ttf?cobna3","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.395Z","timestamp":1789587794395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icomoon/fonts/icomoon.ttf?cobna3 HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://img.viva88athenae.com//icomoon/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 2971\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nage: 1753\r\nexpires: Wed, 16 Sep 2026 23:43:14 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=yydlmd3cStjcRZ.Bj17dccOPqRFJOYtJ8RK6tRZX_c8-1789587794.3981037-1.0.1.1-BUjyAnU7ZJuOcHkMfFGL2JM3IjJd_78Y.bPZObg64lfXGbwQuKIXqr.oPgrtdHO4cu.Zc8ZkSo2xGgTgSL.9kMkR7QaIyRcPcMqR_GCCqqY3sG_yZZKwQXWGmkcSuk63; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:14 GMT\r\ncf-ray: a3c25be2fa215a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"yydlmd3cStjcRZ.Bj17dccOPqRFJOYtJ8RK6tRZX_c8-1789587794.3981037-1.0.1.1-BUjyAnU7ZJuOcHkMfFGL2JM3IjJd_78Y.bPZObg64lfXGbwQuKIXqr.oPgrtdHO4cu.Zc8ZkSo2xGgTgSL.9kMkR7QaIyRcPcMqR_GCCqqY3sG_yZZKwQXWGmkcSuk63","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:14Z","raw_expires":"Wed, 16 Sep 2026 20:13:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=yydlmd3cStjcRZ.Bj17dccOPqRFJOYtJ8RK6tRZX_c8-1789587794.3981037-1.0.1.1-BUjyAnU7ZJuOcHkMfFGL2JM3IjJd_78Y.bPZObg64lfXGbwQuKIXqr.oPgrtdHO4cu.Zc8ZkSo2xGgTgSL.9kMkR7QaIyRcPcMqR_GCCqqY3sG_yZZKwQXWGmkcSuk63; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:14 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4788,"size_decoded":3790,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"17755c1a595a6cfad8faf64d79bfb096","sha1":"9ff4edf4a135ad92d418eca49cbd5751595554c8","sha256":"6e24331ad054b14d877983c01ab24266e054eff30104645719b826988320b610","sha512":"3f96b5c63d673fa34d542c1b7e6b08b0a355e71529273f41928ec01ed594018f22cf3556b753a41c27719b9dc6c35a8cbeefa09859d9d657b22b21d93c77a0ff","ssdeep":"96:zwvCwULhT2cmh8bj6ZxQrNUGlSfcEvsR2oTbUjVl7ydkS/+nBvQmlPV2DG:0qwUMcO8bjGxQrNU6SUEALb6z7hS/gv3","tlshash":"8aa1e707c336cfcbc026e3b95c94d3824be1ee11a765d3a785484d45b61cba48d717ab","first_seen":"2025-11-19T12:27:30.59329Z","last_seen":"2026-09-16T19:44:01.938589Z","times_seen":2209,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.402Z","timestamp":1789587793402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=5247\r\npriority: u=4,i\r\nset-cookie: __cf_bm=XrRBUcsP60PSbmfgfNZLqO7ND8QPndGyCOQ69Ef9X6A-1789587793.4062674-1.0.1.1-0RkH3F4mErAJCr8wLSu1HsuvWHfDYeII.1S7sFTp1VSNsoVnA3FWofGVeU4jTCuuEeDm6BsTwS.lDwO8yyvdn5qWpzVfhY0REhKau6o.bKSY_2RU3U8cXNEryf_j8b4v; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 5613\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab8c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"XrRBUcsP60PSbmfgfNZLqO7ND8QPndGyCOQ69Ef9X6A-1789587793.4062674-1.0.1.1-0RkH3F4mErAJCr8wLSu1HsuvWHfDYeII.1S7sFTp1VSNsoVnA3FWofGVeU4jTCuuEeDm6BsTwS.lDwO8yyvdn5qWpzVfhY0REhKau6o.bKSY_2RU3U8cXNEryf_j8b4v","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=XrRBUcsP60PSbmfgfNZLqO7ND8QPndGyCOQ69Ef9X6A-1789587793.4062674-1.0.1.1-0RkH3F4mErAJCr8wLSu1HsuvWHfDYeII.1S7sFTp1VSNsoVnA3FWofGVeU4jTCuuEeDm6BsTwS.lDwO8yyvdn5qWpzVfhY0REhKau6o.bKSY_2RU3U8cXNEryf_j8b4v; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1770,"size_decoded":2618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.939082Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/css/old/dark.css","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.282Z","timestamp":1789587793282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /css/old/dark.css HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru%2FboSFq0UKHTEHIUQoM1ytqnv8fX6uGGOJKRuZtXW8a1k53awOd6s9%2FXqP6WKi71JnvZ67nEmgen%2B4wuOxIYcbBsv8HWhMjxnQd7a5b8%2BCU9I9MGdq0BKRmJTntHFkp4iUWjXxLuAmOxwXY\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 2247\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc39c1d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":1068,"mime_type":"text/css","magic":"ASCII text","md5":"86d17c83b9f26e4e35110e1fa926122b","sha1":"4959ca9d6a847e49bc7ae81a92e7ff54e838dc99","sha256":"def6cdc4916ce9b9b2c47692138560782cb330f9aee6894243988858624180db","sha512":"f948d9bb182d8f2c5b84a2389c750129e97c073885cbc80218bae04dd1ae8bb0e2f40acf333877006aed6802d76433f22ffab13a64b5ff930327a7b12aeae774","ssdeep":"","tlshash":"f411bd79805f543a323fd8ea37dfe93ba270a85bc003ff15b6d470866f00298a222402","first_seen":"2023-04-27T11:32:09Z","last_seen":"2026-09-16T19:44:01.939618Z","times_seen":2561,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.365Z","timestamp":1789587793365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=9_Gplupb77XRaNr9f..NEbefNWma0hc9WjuPlDOJNlM-1789587793.375381-1.0.1.1-H_QueBdW_pVO4tf90fUGum9J9QTBT0QMWgq3Cs8HP6t6qQiC0N8smbBsSNWPukYJ45v.2flJjZlLdLHmvBwOoDxWY9MJMhthXGh.wXGEfkkYL0C0vOvgu_uqHQScbWgS; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1584\r\nvary: accept, accept-encoding\r\nage: 7196\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a8d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"9_Gplupb77XRaNr9f..NEbefNWma0hc9WjuPlDOJNlM-1789587793.375381-1.0.1.1-H_QueBdW_pVO4tf90fUGum9J9QTBT0QMWgq3Cs8HP6t6qQiC0N8smbBsSNWPukYJ45v.2flJjZlLdLHmvBwOoDxWY9MJMhthXGh.wXGEfkkYL0C0vOvgu_uqHQScbWgS","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9_Gplupb77XRaNr9f..NEbefNWma0hc9WjuPlDOJNlM-1789587793.375381-1.0.1.1-H_QueBdW_pVO4tf90fUGum9J9QTBT0QMWgq3Cs8HP6t6qQiC0N8smbBsSNWPukYJ45v.2flJjZlLdLHmvBwOoDxWY9MJMhthXGh.wXGEfkkYL0C0vOvgu_uqHQScbWgS; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":1638,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-09-16T19:44:01.940115Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.409Z","timestamp":1789587793409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=qB9t9nc0Clgx5SLwW6ruxKYVkATcus3MHTaEWCL_444-1789587793.4116588-1.0.1.1-ZMaFHqOg7XzfIQWU.aBlXpuGy3kPDfpMEw4TmyXhWcI6a0wcxzX5RQsVOZeTIAAdJWVGPtat7HdzT_NKIZvzRIa6gVZ3P6P._OnRiXg77.8iow4pc.bz6uB07ZI4BzU6; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1584\r\nvary: accept, accept-encoding\r\nage: 4996\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdccbbb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"qB9t9nc0Clgx5SLwW6ruxKYVkATcus3MHTaEWCL_444-1789587793.4116588-1.0.1.1-ZMaFHqOg7XzfIQWU.aBlXpuGy3kPDfpMEw4TmyXhWcI6a0wcxzX5RQsVOZeTIAAdJWVGPtat7HdzT_NKIZvzRIa6gVZ3P6P._OnRiXg77.8iow4pc.bz6uB07ZI4BzU6","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=qB9t9nc0Clgx5SLwW6ruxKYVkATcus3MHTaEWCL_444-1789587793.4116588-1.0.1.1-ZMaFHqOg7XzfIQWU.aBlXpuGy3kPDfpMEw4TmyXhWcI6a0wcxzX5RQsVOZeTIAAdJWVGPtat7HdzT_NKIZvzRIa6gVZ3P6P._OnRiXg77.8iow4pc.bz6uB07ZI4BzU6; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":1639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-09-16T19:44:01.940115Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.363Z","timestamp":1789587793363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=omj0_7VjEiKClMPWuzWA6cCe2W4hqx97CQs7wDqQpxg-1789587793.3746216-1.0.1.1-1PWbaLuwVaSaxJ27RCfxc7ex5j_.Q7seMN7Uo3vEG8758nZnsX15kpUfI9OvspL5bdXN15nyJq2QYtLT_rEHBP6M7xf54iR0heZ29C1umAA7_1I8INX1C3z86jFaVj0.; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4945\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 4293\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a865a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"omj0_7VjEiKClMPWuzWA6cCe2W4hqx97CQs7wDqQpxg-1789587793.3746216-1.0.1.1-1PWbaLuwVaSaxJ27RCfxc7ex5j_.Q7seMN7Uo3vEG8758nZnsX15kpUfI9OvspL5bdXN15nyJq2QYtLT_rEHBP6M7xf54iR0heZ29C1umAA7_1I8INX1C3z86jFaVj0.","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=omj0_7VjEiKClMPWuzWA6cCe2W4hqx97CQs7wDqQpxg-1789587793.3746216-1.0.1.1-1PWbaLuwVaSaxJ27RCfxc7ex5j_.Q7seMN7Uo3vEG8758nZnsX15kpUfI9OvspL5bdXN15nyJq2QYtLT_rEHBP6M7xf54iR0heZ29C1umAA7_1I8INX1C3z86jFaVj0.; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":2106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.940665Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-ams.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.419Z","timestamp":1789587793419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-ams.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1260\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Jul 2026 05:20:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=hQOyZtwj3C1_YQdy625zyZkaRYliyqtS5ZHOKebF9ds-1789587793.4262192-1.0.1.1-Nyn468bY2cIzBESwQINGy5np8SkMbVVpNLJyJSGVodJmp_1GmWOzJ4UkiaB3OcCgqxybkSrZT.s6hwhxk0Co9ySnv43Ad_Uk0m2WflCMU1QRZpnL2Y9jcnuJLYfQJ29l; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=2282\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3829\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec205a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"hQOyZtwj3C1_YQdy625zyZkaRYliyqtS5ZHOKebF9ds-1789587793.4262192-1.0.1.1-Nyn468bY2cIzBESwQINGy5np8SkMbVVpNLJyJSGVodJmp_1GmWOzJ4UkiaB3OcCgqxybkSrZT.s6hwhxk0Co9ySnv43Ad_Uk0m2WflCMU1QRZpnL2Y9jcnuJLYfQJ29l","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=hQOyZtwj3C1_YQdy625zyZkaRYliyqtS5ZHOKebF9ds-1789587793.4262192-1.0.1.1-Nyn468bY2cIzBESwQINGy5np8SkMbVVpNLJyJSGVodJmp_1GmWOzJ4UkiaB3OcCgqxybkSrZT.s6hwhxk0Co9ySnv43Ad_Uk0m2WflCMU1QRZpnL2Y9jcnuJLYfQJ29l; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":2108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"549e586865ff061d574bda1150908ff9","sha1":"53774eaee0a23a30344b9738ea2568efea45bace","sha256":"f4c3c0de5dee0a020927e5aedc66298efc34601dd1931b0f3549596853bfb247","sha512":"dbe0604908477cbd974dbb77bd2f025e31c9a16613fb0970faf59604b6414e80727a9befd2723e8130e7ef24b3eb80f7f81f39de99d874ad376ac3ac3130df43","ssdeep":"","tlshash":"ea211a4f443dd8c93eade769b8717211fa0e60783cd940417221efb41aa21b0e00d862","first_seen":"2026-07-13T06:10:37.467187Z","last_seen":"2026-09-16T19:44:01.9004Z","times_seen":314,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/018e260ad68bdad741c61e3171c4c608.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.503Z","timestamp":1789587793503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/018e260ad68bdad741c61e3171c4c608.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.315Z","timestamp":1789587794315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 11:04:57 GMT\r\nexpires: Thu, 16 Sep 2027 11:04:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31097\r\nlast-modified: Tue, 09 Sep 2025 19:08:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21976,"size_decoded":22788,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21976, version 1.0","md5":"8c4ea70064aa3c2e0807ee1057e272bd","sha1":"5b7982e56669d8f37c86df8195b498c147abf8ff","sha256":"90c26435c632fe30ab917e1093df51eea055f44e52018c113d7e6db98301231c","sha512":"57683f1c174bf8e266e5d7ecdf0ee1cac4ecd5b91c54102566dca9a84b8d035cfbeb8234ac2b6311be9a2bd48fd264f8dce1a19fd3b82af555320107e65948c5","ssdeep":"384:KQa6wm/8xsOixsZx0415LUqrIAbhVUvzNsM8IrS+qXuBSxJ7x3++mSJlo:KQ/wm//OXx15Y0bhVqsMfSW8JVOmlo","tlshash":"caa2f147cd7ee719466fbaf2f1413d3af21ec6abdb03224b10e86e2154328d250dc810","first_seen":"2025-06-02T06:48:43.103644Z","last_seen":"2026-09-16T19:44:01.941225Z","times_seen":1462,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"172.67.161.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.336Z","timestamp":1789587794336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 07:39:30 GMT","end":"Thu, 29 Oct 2026 07:39:29 GMT"},"fingerprint":{"sha1":"F3:ED:A1:A7:2C:6A:9E:55:CB:AF:2D:9A:C6:4C:44:3F:FE:42:8E:1D","sha256":"65:72:E6:C2:76:B7:9F:06:75:1B:4B:07:BE:7F:2A:C6:0A:BB:C1:7B:B9:86:D2:17:EA:9F:2E:C4:9B:A0:F7:BD"}}},"request":{"raw":"GET /widget2.php HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BJLEwZgqnbv4fVofLQvyk4C2t2tML6ejk63wAyplc0D%2Bkkl6jdgIQqEEyEy92HGsdOi45qczK3KQDe7S8gFI%2BQxgX4s861y6RuFSnOtVLi7KmleiV8Iq8SUawh5\"}]}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25be2e87ba8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15810,"size_decoded":5477,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"463b1f954e94aa48697c70a038361581","sha1":"875da38c1a46dd8656b27470d3a911ba448097c2","sha256":"21ce9d135b5a0b9044d27747c8896ee55b30e75a8113510dd69db75783681ba4","sha512":"41f7aa0f9377674b936620ed1a803d90034bdba74da2f8f78bed813f5c601bdf6ca61b6dedb526617c098301b8629d2c344996c065fa2727b48dc90137724cd0","ssdeep":"384:+uUAyLG/PICPE81sPhfzB8sYhJQey63ew:+JE6NzB8sYhJQey1w","tlshash":"f2629265d903146a693251589f27450dfba682038703571abffea0d92ff09ebc229fdc","first_seen":"2026-05-04T07:28:25.423462Z","last_seen":"2026-09-16T19:44:01.941995Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":4,"connect":35,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.356Z","timestamp":1789587793356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=3284\r\nset-cookie: __cf_bm=rAyfcj9dp4aBpkrs32GaQmqTp5k0QNSGDdrj_3lKqRY-1789587793.358552-1.0.1.1-ADnhXFpoTTggYrUZNefx_uhE3ArYTTorsZu9n_27Nlcj2vy7pDaf0VPn89IFWPhzd_vv52ch2rn2MLO3ae9vKP6YFFvXmMnJ6lWDc2YUBZHBsnO0VVcO38jBnrV6Lxnc; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2982\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc4a205a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"rAyfcj9dp4aBpkrs32GaQmqTp5k0QNSGDdrj_3lKqRY-1789587793.358552-1.0.1.1-ADnhXFpoTTggYrUZNefx_uhE3ArYTTorsZu9n_27Nlcj2vy7pDaf0VPn89IFWPhzd_vv52ch2rn2MLO3ae9vKP6YFFvXmMnJ6lWDc2YUBZHBsnO0VVcO38jBnrV6Lxnc","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=rAyfcj9dp4aBpkrs32GaQmqTp5k0QNSGDdrj_3lKqRY-1789587793.358552-1.0.1.1-ADnhXFpoTTggYrUZNefx_uhE3ArYTTorsZu9n_27Nlcj2vy7pDaf0VPn89IFWPhzd_vv52ch2rn2MLO3ae9vKP6YFFvXmMnJ6lWDc2YUBZHBsnO0VVcO38jBnrV6Lxnc; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":2439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.914112Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/13e2038bd23a38ce32a3eb259c8bf7d8.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.487Z","timestamp":1789587793487,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/13e2038bd23a38ce32a3eb259c8bf7d8.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.404Z","timestamp":1789587793404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2527\r\nset-cookie: __cf_bm=GL7OoOkfofvTBOFXMWOfudB69_8Nx8mBgi1oqH8K5TA-1789587793.4098458-1.0.1.1-hnERYxeXy_p97INL3l.vdcq1_1gEJFcgBu_M.Z7VxSLKXFtIATGEKqIwFuID5Hi0bDuUo.izx8PPlFQcsnNxHxXCy7ai2My8MadKklFzYiYsqR6BPxzr5rz.WF58UnIl; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1399\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdccbaa5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"GL7OoOkfofvTBOFXMWOfudB69_8Nx8mBgi1oqH8K5TA-1789587793.4098458-1.0.1.1-hnERYxeXy_p97INL3l.vdcq1_1gEJFcgBu_M.Z7VxSLKXFtIATGEKqIwFuID5Hi0bDuUo.izx8PPlFQcsnNxHxXCy7ai2My8MadKklFzYiYsqR6BPxzr5rz.WF58UnIl","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=GL7OoOkfofvTBOFXMWOfudB69_8Nx8mBgi1oqH8K5TA-1789587793.4098458-1.0.1.1-hnERYxeXy_p97INL3l.vdcq1_1gEJFcgBu_M.Z7VxSLKXFtIATGEKqIwFuID5Hi0bDuUo.izx8PPlFQcsnNxHxXCy7ai2My8MadKklFzYiYsqR6BPxzr5rz.WF58UnIl; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":2274,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-09-16T19:44:01.942575Z","times_seen":3745,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.424Z","timestamp":1789587793424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=a8yp6B1M0s.TpXPRKQrcYsAayTGGmdktNZdPoxtBngI-1789587793.427516-1.0.1.1-626clNmDYtUjRXSgxJKJpSUnS6LE59nZDCVV_xdPwau2kkh0Oo2bTEG6Cefd4.aY5RUZTaUFv7YslV_88Ch2YWcT_yK5KvqXH3LvWUbMt8ql6rjlPYg..XXnXbPrgiuC; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=2758\r\nvary: accept, accept-encoding\r\nage: 2306\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec2b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"a8yp6B1M0s.TpXPRKQrcYsAayTGGmdktNZdPoxtBngI-1789587793.427516-1.0.1.1-626clNmDYtUjRXSgxJKJpSUnS6LE59nZDCVV_xdPwau2kkh0Oo2bTEG6Cefd4.aY5RUZTaUFv7YslV_88Ch2YWcT_yK5KvqXH3LvWUbMt8ql6rjlPYg..XXnXbPrgiuC","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=a8yp6B1M0s.TpXPRKQrcYsAayTGGmdktNZdPoxtBngI-1789587793.427516-1.0.1.1-626clNmDYtUjRXSgxJKJpSUnS6LE59nZDCVV_xdPwau2kkh0Oo2bTEG6Cefd4.aY5RUZTaUFv7YslV_88Ch2YWcT_yK5KvqXH3LvWUbMt8ql6rjlPYg..XXnXbPrgiuC; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":2371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-09-16T19:44:01.937434Z","times_seen":2911,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.392Z","timestamp":1789587794392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 03:31:22 GMT\r\nexpires: Fri, 10 Sep 2027 03:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 576712\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9588,"size_decoded":10400,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-09-16T19:44:01.943142Z","times_seen":9163,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/api.php?task=getTotalPool","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"172.67.161.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fkupon.com/widget2.php","date":"2026-09-16T19:43:14.683Z","timestamp":1789587794683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 07:39:30 GMT","end":"Thu, 29 Oct 2026 07:39:29 GMT"},"fingerprint":{"sha1":"F3:ED:A1:A7:2C:6A:9E:55:CB:AF:2D:9A:C6:4C:44:3F:FE:42:8E:1D","sha256":"65:72:E6:C2:76:B7:9F:06:75:1B:4B:07:BE:7F:2A:C6:0A:BB:C1:7B:B9:86:D2:17:EA:9F:2E:C4:9B:A0:F7:BD"}}},"request":{"raw":"GET /api.php?task=getTotalPool HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fkupon.com/widget2.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With, SSO\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sjKd%2Bn%2FolpQPEvN5gk9Tx8EKnr5np6k8gg9k48O9ekrsLNR8tPf18qt8JgI4OWAy7avdqLjsXs8mYJ4fQiZrBdKOONhcEkspbczuvuoQZZBv6R2qJvcrMrvZqmx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nage: 43\r\nlast-modified: Wed, 16 Sep 2026 19:42:31 GMT\r\ncache-control: max-age=60\r\ncf-cache-status: HIT\r\ncf-ray: a3c25be4d94ba8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":980,"mime_type":"application/json","magic":"JSON text data","md5":"1465ae102c088c234bb7dd59e581b56a","sha1":"8d063ef7b9a677231859fc7c857630bf2855a482","sha256":"8f34133eb3a67106ca53c5012e5615703fafd5f7fba55ca9b00341241bd07aa9","sha512":"8bf6cd13d257bb1cde44284b3a74eb1ebb301e6b107051e3d470c965560f1b6903550cf4370802c4605d0f963497a3513e15d3f35a13f3ac72428e24a52b59ad","ssdeep":"","tlshash":"83d0a902c0700df3ba46ec60249c228c73b022870a143e6976fc830c8f9c83e26ab654","first_seen":"2026-09-16T19:44:01.943656Z","last_seen":"2026-09-16T19:44:01.943656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.395Z","timestamp":1789587793395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=_wa5HOe9WFWgZdWhoLkzKacTMqATZdCYfiTl.9wfr1U-1789587793.4035003-1.0.1.1-XnaBPzVtGzGZsFgRBMo90ntXC9d3w5PaKtAGtvwsJUOSRJXOSBQz9RU0at5FKO5CxH9DKJlBOhM8I16KXo40A7V_21yCXdwo4WhylMMjxk04qISHRiBJT.97G5N7.B2E; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=6674\r\nvary: accept, accept-encoding\r\nage: 6934\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab765a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"_wa5HOe9WFWgZdWhoLkzKacTMqATZdCYfiTl.9wfr1U-1789587793.4035003-1.0.1.1-XnaBPzVtGzGZsFgRBMo90ntXC9d3w5PaKtAGtvwsJUOSRJXOSBQz9RU0at5FKO5CxH9DKJlBOhM8I16KXo40A7V_21yCXdwo4WhylMMjxk04qISHRiBJT.97G5N7.B2E","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=_wa5HOe9WFWgZdWhoLkzKacTMqATZdCYfiTl.9wfr1U-1789587793.4035003-1.0.1.1-XnaBPzVtGzGZsFgRBMo90ntXC9d3w5PaKtAGtvwsJUOSRJXOSBQz9RU0at5FKO5CxH9DKJlBOhM8I16KXo40A7V_21yCXdwo4WhylMMjxk04qISHRiBJT.97G5N7.B2E; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":3282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-09-16T19:44:01.944734Z","times_seen":3831,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/lottery.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.437Z","timestamp":1789587793437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/lottery.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4258\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=gBM2XPzggJ6RHLZYIQVP0zUVrbuaSvWMYqA22GtUfBw-1789587793.4409263-1.0.1.1-1Gyxn55aNEyxnjVYxyQl8YZa.vgM9t02p0blrwyuxdGcExTI0tnAgQ04qDUmDAxWYI2rSBqEhLbIWdBBQbCgdm.Cuyxfz_Byl8jXlJfN8M6csPsQfHOmRyEOHjzob4DA; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2573\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc8c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"gBM2XPzggJ6RHLZYIQVP0zUVrbuaSvWMYqA22GtUfBw-1789587793.4409263-1.0.1.1-1Gyxn55aNEyxnjVYxyQl8YZa.vgM9t02p0blrwyuxdGcExTI0tnAgQ04qDUmDAxWYI2rSBqEhLbIWdBBQbCgdm.Cuyxfz_Byl8jXlJfN8M6csPsQfHOmRyEOHjzob4DA","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=gBM2XPzggJ6RHLZYIQVP0zUVrbuaSvWMYqA22GtUfBw-1789587793.4409263-1.0.1.1-1Gyxn55aNEyxnjVYxyQl8YZa.vgM9t02p0blrwyuxdGcExTI0tnAgQ04qDUmDAxWYI2rSBqEhLbIWdBBQbCgdm.Cuyxfz_Byl8jXlJfN8M6csPsQfHOmRyEOHjzob4DA; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":954,"size_decoded":1801,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15c0c4be6639d6ec9ce5ddc983f2c4f3","sha1":"9e541e491ca202d9d0aa9e0b61d01198eccc9eb7","sha256":"61a773aa166745eb9f86d91f71494d72866355dc9d1994d3bfa7ed76a75a183d","sha512":"715c171b747e44b894b63e9c97688a0d2f85d3dad63ed25bf019fc59cb987d7d25b35452b974221358a6f6663ae284823b933a61bac6bdc9fcd115734bee9e29","ssdeep":"","tlshash":"0e11c85683756942f06f7942fd6c932848b4dc147247d4a79bc2060bb1fc2dca301578","first_seen":"2025-11-19T10:28:57.308418Z","last_seen":"2026-09-16T19:44:01.94528Z","times_seen":2234,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.276Z","timestamp":1789587793276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nage: 2608352\r\nx-served-by: cache-fra-etou8220144-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12963\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95609,"size_decoded":13745,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-09-16T19:44:01.945754Z","times_seen":7155,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":12,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.336Z","timestamp":1789587793336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nage: 4383554\r\nx-served-by: cache-fra-etou8220033-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":24879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-09-16T19:44:01.946302Z","times_seen":6139,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//chat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.429Z","timestamp":1789587793429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //chat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6724\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Feb 2025 06:04:56 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=vn4TUya7W9PFZ1N79W7f6dfIIpVI81gE._fuNWRTDbU-1789587793.4333525-1.0.1.1-Jwiy08s1o3VBg.w52FnQwDxuJXNJGIyV7sLtm4uNnJbTghpyvZhythdemEsgONZpd9k6PA75Q7NH6W_PVGLIiQbH.EVd3ghIVPxoeWv61nzJC7SsEzxn.lAzAdnBQOv2; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=9418\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2021\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc4e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vn4TUya7W9PFZ1N79W7f6dfIIpVI81gE._fuNWRTDbU-1789587793.4333525-1.0.1.1-Jwiy08s1o3VBg.w52FnQwDxuJXNJGIyV7sLtm4uNnJbTghpyvZhythdemEsgONZpd9k6PA75Q7NH6W_PVGLIiQbH.EVd3ghIVPxoeWv61nzJC7SsEzxn.lAzAdnBQOv2","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=vn4TUya7W9PFZ1N79W7f6dfIIpVI81gE._fuNWRTDbU-1789587793.4333525-1.0.1.1-Jwiy08s1o3VBg.w52FnQwDxuJXNJGIyV7sLtm4uNnJbTghpyvZhythdemEsgONZpd9k6PA75Q7NH6W_PVGLIiQbH.EVd3ghIVPxoeWv61nzJC7SsEzxn.lAzAdnBQOv2; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6724,"size_decoded":7572,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e26cc220d8c829e9a9226189b32bb34","sha1":"f24fad3d9616a61ea711f2d9fcc4a0ca74eb633e","sha256":"8bd11111242b3d18160d8ed0b9058ddcaa0950add34b0b40d4e2d643de4b7aad","sha512":"9190624f6c31864cd68887f3967b1c3332c7fcb5ac5bfa0aebbe0243d484d070ff0ebffe5707f9c1f30cb8749b77069b0d8acfeeb3231d9d244c56896a817149","ssdeep":"96:M4ToQPAeVSHSyziKndYm7P56+SKUVrETS40t9cP5DR7qgEY/K185opJMs7zxu1Ma:5kQIe6Lvd5AVTEeu1R7jEY/aZOyoKudj","tlshash":"01d1af6b88095f18f2bf0640c17c3868f55c01707779b25d6b27e43fa59168deb9c1b2","first_seen":"2025-03-03T01:41:44.857779Z","last_seen":"2026-09-16T19:44:01.946836Z","times_seen":1762,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.460Z","timestamp":1789587793460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=rUidNBXQpIOr71CS2axuOBcks7PQwTaj_FXq2ssoxcI-1789587793.4626822-1.0.1.1-hCB9_zUY6TjjSu5fbvPkbKZSP22zSt_28K4_58mq0VP6sFrW8lKE0Oi1jjrh._wLGc_SErsEYsdVurMJwmbNe9bDMx6RKaO62FDy2bKXkgvmHZagFTkgl9NOzO_pg0K_; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3417\r\nvary: accept, accept-encoding\r\nage: 3063\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd2d295a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"rUidNBXQpIOr71CS2axuOBcks7PQwTaj_FXq2ssoxcI-1789587793.4626822-1.0.1.1-hCB9_zUY6TjjSu5fbvPkbKZSP22zSt_28K4_58mq0VP6sFrW8lKE0Oi1jjrh._wLGc_SErsEYsdVurMJwmbNe9bDMx6RKaO62FDy2bKXkgvmHZagFTkgl9NOzO_pg0K_","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=rUidNBXQpIOr71CS2axuOBcks7PQwTaj_FXq2ssoxcI-1789587793.4626822-1.0.1.1-hCB9_zUY6TjjSu5fbvPkbKZSP22zSt_28K4_58mq0VP6sFrW8lKE0Oi1jjrh._wLGc_SErsEYsdVurMJwmbNe9bDMx6RKaO62FDy2bKXkgvmHZagFTkgl9NOzO_pg0K_; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":1235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cc0dcea77b7295c691fe07673177a86","sha1":"666431536479501ce70432f76475b7dc09ae70df","sha256":"5b8992379e55caf367e94b27323cc0e64b656977881a2ec14c95e652dc527920","sha512":"c48c66c5b41ac16efe1ff90bc4375866f13303aa320f64feeb13cedd480bb4bba5422a6965bc2c81700de0953d0ff17e010e660ab5c993bf681be6388cec6315","ssdeep":"","tlshash":"9de0f1dcc6a89a046504a0d07633370dd3d2d586138dba926345f430122462dbe28cb0","first_seen":"2025-11-19T10:28:57.292064Z","last_seen":"2026-09-16T19:44:01.947411Z","times_seen":2258,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.393Z","timestamp":1789587794393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:52 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33082\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":31320,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-09-16T19:44:01.948074Z","times_seen":12035,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//banner-telegram.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.506Z","timestamp":1789587793506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //banner-telegram.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8260\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Dec 2025 09:30:09 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=1,i\r\nset-cookie: __cf_bm=JIYWBBm9Sk4hmk2_J2R6OAz50bCDA673L_OmKXTuiCk-1789587793.5144978-1.0.1.1-rzakDPz9zxcxkzLzKO_mOnxGQow018ZqPKhSqGA2pLAe0ybuqpVZ8EjX_bpccKddcCbZJAp5z7qRrJddcyg5RaI1DDeGKN1WAlp.SL45C1qPcn0KFd7BxgugPQfxdRL9; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: webp_bigger\r\nage: 6043\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3c25bdd5e8b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"JIYWBBm9Sk4hmk2_J2R6OAz50bCDA673L_OmKXTuiCk-1789587793.5144978-1.0.1.1-rzakDPz9zxcxkzLzKO_mOnxGQow018ZqPKhSqGA2pLAe0ybuqpVZ8EjX_bpccKddcCbZJAp5z7qRrJddcyg5RaI1DDeGKN1WAlp.SL45C1qPcn0KFd7BxgugPQfxdRL9","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=JIYWBBm9Sk4hmk2_J2R6OAz50bCDA673L_OmKXTuiCk-1789587793.5144978-1.0.1.1-rzakDPz9zxcxkzLzKO_mOnxGQow018ZqPKhSqGA2pLAe0ybuqpVZ8EjX_bpccKddcCbZJAp5z7qRrJddcyg5RaI1DDeGKN1WAlp.SL45C1qPcn0KFd7BxgugPQfxdRL9; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8260,"size_decoded":9093,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x80, components 3","md5":"05119ceca61ca5627c2de5d77909b284","sha1":"0bd8c96b84da934ca25b20392906977b482da43a","sha256":"b65e72e9ecc339c9e6f20b55082f0be11652757832247765f2adb57f8b01ef1e","sha512":"bc42a94af02673cbe3062052397b1d5ade32881d885a0da1f554fa6084d1c41756ecdeb63b1fa656da3ae988291c0442d373f20cea7a91dd6b7dfd8db0542392","ssdeep":"192:5NPTUmK0cbf/JFmMAyAeJaqmQ6BfsSVuGuBmp2+bpZ6TR3Z2JXGIaBb01:XPTUDbf/tdAK6BfsSVu1lyp0TJ0JXGo","tlshash":"a402bf111909f337e36e7b3b773d862c1f471bce4018799a3ab3bd447c6501985e4162","first_seen":"2025-12-23T05:49:57.806328Z","last_seen":"2026-09-16T19:44:01.948692Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/assets/24h.png","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.512Z","timestamp":1789587793512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9wvH2UKutUw855FVrbwN3PjeqLWHdnbYEvEQKOUc33RZIgYfV%2FmPJShthvEa59J5l3Do8a2usinE70kVRsx7pTLBO7Q%2FPe1zhGoW%2BRk27yty2R%2FYVRH4BBe41dnIKJjHGIH7eU2fF5K%2Fdc0\"}]}\r\ncontent-type: image/png\r\nage: 2242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bddda27d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11955\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":12645,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.949219Z","times_seen":4253,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.513Z","timestamp":1789587793513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=eOku4LmEsvfaYX1qCLtPX_vsfZKGhbW_Zr.1cOGTQvU-1789587793.5216966-1.0.1.1-x9WfVss.sBfglEzV5.XAM6E.vkUkVoOnW0ixQ8.s6WCFr9n6Tey8GZg9skc.3gXPNpIQfeCHTt8vI9M8istXV4pImtmcgJa8RJ3KMo279wvkfwp89Wu6vjVlZLhvpbSL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1628\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd8ec45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"eOku4LmEsvfaYX1qCLtPX_vsfZKGhbW_Zr.1cOGTQvU-1789587793.5216966-1.0.1.1-x9WfVss.sBfglEzV5.XAM6E.vkUkVoOnW0ixQ8.s6WCFr9n6Tey8GZg9skc.3gXPNpIQfeCHTt8vI9M8istXV4pImtmcgJa8RJ3KMo279wvkfwp89Wu6vjVlZLhvpbSL","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=eOku4LmEsvfaYX1qCLtPX_vsfZKGhbW_Zr.1cOGTQvU-1789587793.5216966-1.0.1.1-x9WfVss.sBfglEzV5.XAM6E.vkUkVoOnW0ixQ8.s6WCFr9n6Tey8GZg9skc.3gXPNpIQfeCHTt8vI9M8istXV4pImtmcgJa8RJ3KMo279wvkfwp89Wu6vjVlZLhvpbSL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":378,"size_decoded":1214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.949903Z","times_seen":2961,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=668731d4e0077a03b40f0b5e","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.445Z","timestamp":1789587794445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=668731d4e0077a03b40f0b5e HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\netag: W/\"17f-S3tfBuF3FEBPxX7Wgj2wTALx+rE\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyIbPTguzzp%2Bug8%2Ft772e%2F9EoB5XDK7P9oVoz83kjOa722xyhKipXn28dr7nYiLI4yU6HEO2eE%2FSB5dZpxHpa0amSwHdCbqdnd6ZLpdUd3bDG6UA6qVr9%2BbNgi2AORRg3A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3c25be34b881ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":383,"size_decoded":1068,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"dc66117f4cfc0ff65fbe3d1f8d31cfff","sha1":"4b7b5f06e17714404fc57ed6823db04c02f1fab1","sha256":"2100021002bc5c92fcfe5a958b4aa222f2fecbefbd9992537c694b6a41dc9bac","sha512":"5344698116a246b110df1c3db69fc1981e01949cc90afe1de4c1dc8aa322612ec4c8b5a47d3d864f30ab4f620fa0f25c6c7e191a06f493f939d40c5c3af058b3","ssdeep":"","tlshash":"2ee06105d6c50a964f20763a6f0727a6786f53224b40ebac7871d9202416c8011a4c7d","first_seen":"2026-09-16T19:14:57.524417Z","last_seen":"2026-09-16T19:44:01.950402Z","times_seen":2,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/668731d4e0077a03b40f0b5e/init?id=178577e2-7c94-41ba-869e-d3e48848fb44\u0026token=sGMzV1oKP7nw0qhb4YQGUtWcQ3qDzNm4JBDq8E3L","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.688Z","timestamp":1789587799688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/accounts/668731d4e0077a03b40f0b5e/init?id=178577e2-7c94-41ba-869e-d3e48848fb44\u0026token=sGMzV1oKP7nw0qhb4YQGUtWcQ3qDzNm4JBDq8E3L HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"2ff-6EQzamfA0dpQG4tEvJi+4HevqqE\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lrKt5EnDor5XAQAVlBqFu9qyeQy%2FI5t4rCSu4y77VD%2FsVJRmXiDVHeOsCNjnVE80i5Qcyf8Yp460Xt%2Fmvw4rbfPaQNUD%2BiJoSfSSABWImU2Dp6hG3eMH%2B08uxo8bu3qwQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3c25c041ff01ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":767,"size_decoded":1387,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"43474eadef7b348e633cfec60e746354","sha1":"e844336a67c0d1da501b8b44bc98bee077afaaa1","sha256":"31852cf1bd814fabe73d6fff9549065cfe13094a64c848bbc0766b51b3bec762","sha512":"d2625f2a7565f577bc76b328a2c965dcad706b158037572de4e22323ee0b65633dd7562bfc130a6557727398ce607b386990ee24ad83b6d3134cf2b695c3d04e","ssdeep":"","tlshash":"2e0165199b094d7bafc522eaa483bb4355ae0022834889bec0f4ef24035e2c4010daa6","first_seen":"2026-09-16T19:14:57.629913Z","last_seen":"2026-09-16T19:44:01.951062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/style.scss","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.277Z","timestamp":1789587793277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41c5jzfK2QOqMX3GXbAXe9hdB9OVr7phrQcB16QydedGtWeW80QrNTBmqqbeRTjUkH576AajPJn9Mw0casImhKynLaWVbpt56ywl2JksVdGfEu9kfcH673785%2B7V%2Fer5ZTo8SnvYJMxoXVrV\"}]}\r\ncontent-encoding: zstd\r\npriority: u=0,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25bdc39bed8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":740,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.400Z","timestamp":1789587793400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=pB7Uu0.KLgWIj6.lJ2WgqIOqabO4XumisE3k_VzgNLo-1789587793.4053295-1.0.1.1-sADigqQckkFvhtFKkD5gT9.ONi1AF0PqzIRWCw3wlj00M_dSYKht2b3ITi2.CQgOT7M12wcDJYDx5q9ghB.adyGaYayets1YWQBsIUhiZTmsRUBXfPZEje.xNtchatW1; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4303\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 5892\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab865a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pB7Uu0.KLgWIj6.lJ2WgqIOqabO4XumisE3k_VzgNLo-1789587793.4053295-1.0.1.1-sADigqQckkFvhtFKkD5gT9.ONi1AF0PqzIRWCw3wlj00M_dSYKht2b3ITi2.CQgOT7M12wcDJYDx5q9ghB.adyGaYayets1YWQBsIUhiZTmsRUBXfPZEje.xNtchatW1","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pB7Uu0.KLgWIj6.lJ2WgqIOqabO4XumisE3k_VzgNLo-1789587793.4053295-1.0.1.1-sADigqQckkFvhtFKkD5gT9.ONi1AF0PqzIRWCw3wlj00M_dSYKht2b3ITi2.CQgOT7M12wcDJYDx5q9ghB.adyGaYayets1YWQBsIUhiZTmsRUBXfPZEje.xNtchatW1; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":2178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.951724Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/images/upload-Slides-20230118224930.jpg","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.477Z","timestamp":1789587793477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /images/upload-Slides-20230118224930.jpg HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kb3%2FyQ3eM%2F8zedPoXI%2BCygVTm60WBn4ozSSqtLVkgpTyENGZ2eaiTKwYMQoQ2AyRt6g5aIWw0p%2F%2BlE64gSmSyQWis6jqf44TXVLzIhDOIEHaDian9ZG0xQIMYdYxLHfbL%2ByggrIs2KnoTeLn\"}]}\r\ncontent-type: image/jpeg\r\nage: 1752\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bdd7a10d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 339235\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339235,"size_decoded":339929,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:01:18 23:46:47], baseline, precision 8, 1900x380, components 3","md5":"91e1255b2c37e903f5df424467430d87","sha1":"99ea9e6a298bf83155771cd65a8a1e35f9d227a6","sha256":"283ef363440aaaa7ca989c41f73dde4b8c0a7ae48c815e9bd268dca4ed265c39","sha512":"228c8bf2723eaf47d1dca73a85555e5d3d65b0f15a96b8947a757cabdd81f833376d8581a3a20aa5cbd4f37b398101b22009e2c3751de674508ab385541ea0b8","ssdeep":"6144:kcdMKB1Mt5So55rbB4klXGKkMyDmGXLw4UlTM2ajMcKjtG:kcLB1M3SqxbB4yHkwEwMzp","tlshash":"707423d83f6ed601f7e42b3458a2a6e931a22f19cef399c4b99c0d56f3d02e25c4164d","first_seen":"2025-04-03T17:58:59.136671Z","last_seen":"2026-09-16T19:44:01.952227Z","times_seen":5,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/314b79b01ab66f6cc42c405b64791498.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.501Z","timestamp":1789587793501,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/314b79b01ab66f6cc42c405b64791498.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.262Z","timestamp":1789587794262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 10:09:36 GMT\r\nexpires: Mon, 13 Sep 2027 10:09:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293618\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":35737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-09-16T20:36:43.595589Z","times_seen":22635,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":3,"connect":31,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.398Z","timestamp":1789587793398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=3eFWseXST.JVPba0FmhFLGKu.trCvpsPtqiOtETkysY-1789587793.4045804-1.0.1.1-okuUtQhvu4um19E6Kfut5LETU3mGF23ObOa14Ntp6t4FflEPHkOoD5fbW0VW_T6Zp7w884ihiNhB2MhlFYTPUadzF815GQzjsX_g0.i2.vMoMHBvJ5_dDZUJ1Xobdnm5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=9511\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 5979\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab7f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3eFWseXST.JVPba0FmhFLGKu.trCvpsPtqiOtETkysY-1789587793.4045804-1.0.1.1-okuUtQhvu4um19E6Kfut5LETU3mGF23ObOa14Ntp6t4FflEPHkOoD5fbW0VW_T6Zp7w884ihiNhB2MhlFYTPUadzF815GQzjsX_g0.i2.vMoMHBvJ5_dDZUJ1Xobdnm5","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3eFWseXST.JVPba0FmhFLGKu.trCvpsPtqiOtETkysY-1789587793.4045804-1.0.1.1-okuUtQhvu4um19E6Kfut5LETU3mGF23ObOa14Ntp6t4FflEPHkOoD5fbW0VW_T6Zp7w884ihiNhB2MhlFYTPUadzF815GQzjsX_g0.i2.vMoMHBvJ5_dDZUJ1Xobdnm5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2548,"size_decoded":3396,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.953608Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.413Z","timestamp":1789587793413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:22:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2903\r\nset-cookie: __cf_bm=UNfsXBqeH8.2XWfFZvucAWsKOPFbbO9PzmOfl73zF9w-1789587793.4243248-1.0.1.1-G6SobnT2cmtzJXs3hSqnl7OnRvA6laQOcsDLBz2rfdr._FCGYvWgTQIcvFt8A5lapzph7Qveyo2Nq1V7a0j6uEJgigjPg.W9wMPxcbO_RM4onL9X.59cPbEyUWrKtYvg; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1399\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec095a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"UNfsXBqeH8.2XWfFZvucAWsKOPFbbO9PzmOfl73zF9w-1789587793.4243248-1.0.1.1-G6SobnT2cmtzJXs3hSqnl7OnRvA6laQOcsDLBz2rfdr._FCGYvWgTQIcvFt8A5lapzph7Qveyo2Nq1V7a0j6uEJgigjPg.W9wMPxcbO_RM4onL9X.59cPbEyUWrKtYvg","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=UNfsXBqeH8.2XWfFZvucAWsKOPFbbO9PzmOfl73zF9w-1789587793.4243248-1.0.1.1-G6SobnT2cmtzJXs3hSqnl7OnRvA6laQOcsDLBz2rfdr._FCGYvWgTQIcvFt8A5lapzph7Qveyo2Nq1V7a0j6uEJgigjPg.W9wMPxcbO_RM4onL9X.59cPbEyUWrKtYvg; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":2412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-09-16T19:44:01.954468Z","times_seen":3770,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.432Z","timestamp":1789587793432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=lgijYCJcSkhbS.OXxvF.CJoswr_0h8Hw2ayHimu3blk-1789587793.4364076-1.0.1.1-hTDHF7MSO07cMgJkChZLiEx6tYcvaVnR5NK8lPzT.EosPLNDZeVJ3sGw8HJuJBDr0Y_CNokd5_YWXIduhWi_hCAyHyBDzruVnJeWO19H2f_VU7DSEO4UVZGkftM31LiL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1402\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1188\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc6b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"lgijYCJcSkhbS.OXxvF.CJoswr_0h8Hw2ayHimu3blk-1789587793.4364076-1.0.1.1-hTDHF7MSO07cMgJkChZLiEx6tYcvaVnR5NK8lPzT.EosPLNDZeVJ3sGw8HJuJBDr0Y_CNokd5_YWXIduhWi_hCAyHyBDzruVnJeWO19H2f_VU7DSEO4UVZGkftM31LiL","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=lgijYCJcSkhbS.OXxvF.CJoswr_0h8Hw2ayHimu3blk-1789587793.4364076-1.0.1.1-hTDHF7MSO07cMgJkChZLiEx6tYcvaVnR5NK8lPzT.EosPLNDZeVJ3sGw8HJuJBDr0Y_CNokd5_YWXIduhWi_hCAyHyBDzruVnJeWO19H2f_VU7DSEO4UVZGkftM31LiL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":876,"size_decoded":1723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-09-16T19:44:01.954963Z","times_seen":3365,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/f378eb1ea04e53999b89051aa3244de6.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.485Z","timestamp":1789587793485,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/f378eb1ea04e53999b89051aa3244de6.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/operators","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:21.118Z","timestamp":1789587801118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/operators HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCP-App-Id: 668731d4e0077a03b40f0b5e\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"42c-y6lqL5WH48eKNPu7W2px8oBBWd8\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tF7Rysry0gudK0s0ivLUYFIBDFJv5zojqw2fdFMBXYqyRQPnNvzVCnpF0fUEiRG21YJ7lCZQ%2F2NXhElgNN%2FvCJKy6KLgqhDuIHe6QN7pvyt3W0YqIn5kMvACU14UY0vIRg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3c25c0d6be51ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1068,"size_decoded":1318,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"228d756e52f358e958dedb7d9c8dab8b","sha1":"cba96a2f9587e3c78a34fbbb5b6a71f2804159df","sha256":"1a7ec87601ce772434bef006cb57fa62d7c1db79a2943bb7e4fcd69083496b01","sha512":"e0f0432add6decbc808d31979446315d2a1d763ee3a3a719d3da23d56fc0a5b99a3f02b6b75cc867fb66cc1f024fe82935442741ce8ec8122a67499fbf97b8dc","ssdeep":"","tlshash":"f311cc58d2583b7b8632b1d25e43bfc51c2918e7f2b8aec0b11dc410b506ac1d236ab3","first_seen":"2026-09-16T19:14:57.516976Z","last_seen":"2026-09-16T19:44:01.95549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.381Z","timestamp":1789587793381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2410\r\nset-cookie: __cf_bm=pv1BEjITGTp5XXBs2BUj2ue5fS2l_y0GindYLhOVClw-1789587793.4001231-1.0.1.1-RMGwf3_vljvWa4p3hdsmU7jYKYYf0h2FlVKqIgeHPBEdTGW4AddP3lXTNzDy1SJxMAqLWh_QCG_w91_tV8NYGIuTxhOPDi3qf5hledR4t5m.byVHpIArlWgUL0PcN6EQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2031\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab5b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pv1BEjITGTp5XXBs2BUj2ue5fS2l_y0GindYLhOVClw-1789587793.4001231-1.0.1.1-RMGwf3_vljvWa4p3hdsmU7jYKYYf0h2FlVKqIgeHPBEdTGW4AddP3lXTNzDy1SJxMAqLWh_QCG_w91_tV8NYGIuTxhOPDi3qf5hledR4t5m.byVHpIArlWgUL0PcN6EQ","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pv1BEjITGTp5XXBs2BUj2ue5fS2l_y0GindYLhOVClw-1789587793.4001231-1.0.1.1-RMGwf3_vljvWa4p3hdsmU7jYKYYf0h2FlVKqIgeHPBEdTGW4AddP3lXTNzDy1SJxMAqLWh_QCG_w91_tV8NYGIuTxhOPDi3qf5hledR4t5m.byVHpIArlWgUL0PcN6EQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410,"size_decoded":2258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-09-16T19:44:01.956287Z","times_seen":3114,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/668731d4e0077a03b40f0b5e-b3b697aa44341f6de88b9ad68057fa2bc304b7bff285742e87b01130247dfef8","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.632Z","timestamp":1789587799632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/accounts/668731d4e0077a03b40f0b5e-b3b697aa44341f6de88b9ad68057fa2bc304b7bff285742e87b01130247dfef8 HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\ncache-control: public, max-age=31536000, immutable, no-store\r\nvary: Origin, accept-encoding\r\netag: W/\"865-9iauiRvSJFipg4NA2f/vvKfXRvQ\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 1753\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rj3BYVFM57XwgLBDCrcNuJNJpAswqhNy6ixR0hfy0vjMWRsDMhvTMHEpBfeNaAfeVHAix07AGIHPjGfDQ%2BCjLLKaVXZlrZs961pH2L8gnKZziVf4%2BYzp5NrbdilyqWFwmw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3c25c03bf821ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2149,"size_decoded":2119,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d307d5624896f98c246401b644f631d","sha1":"f626ae891bd22458a9838340d9ffefbca7d746f4","sha256":"b3b697aa44341f6de88b9ad68057fa2bc304b7bff285742e87b01130247dfef8","sha512":"6823a29631a0288a7cefbc3d5739babaa3b9dee3262655538e83aa0ca5e8eec515b2fe9e1bd2f18c6075881995c83383a0a727f7dab507463b67641401370318","ssdeep":"","tlshash":"904132390944197cf78ad3aea1d67f564c3c31b333406c5ae96cbd0823eb9c79662927","first_seen":"2026-09-16T19:14:57.626341Z","last_seen":"2026-09-16T19:44:01.956838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//telegram.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.430Z","timestamp":1789587793430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //telegram.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2708\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 05:00:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=Ba0vqOOLvQxY7PHkYVB.vK_s2l60u2T4o22t7g40XaY-1789587793.433433-1.0.1.1-ZMU6bU2AM4hAUPqO_2ZtnZ_JNlBnvUzjZZH9v8jD72PijaUWKQ2X8kTUVEsZ6T_raajwy6FFBrCxxC5dy8m00hgo6QwrCQLh02gsPxrqxZji5bmSokCMVta_jnMVM5q5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3789\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc535a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Ba0vqOOLvQxY7PHkYVB.vK_s2l60u2T4o22t7g40XaY-1789587793.433433-1.0.1.1-ZMU6bU2AM4hAUPqO_2ZtnZ_JNlBnvUzjZZH9v8jD72PijaUWKQ2X8kTUVEsZ6T_raajwy6FFBrCxxC5dy8m00hgo6QwrCQLh02gsPxrqxZji5bmSokCMVta_jnMVM5q5","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Ba0vqOOLvQxY7PHkYVB.vK_s2l60u2T4o22t7g40XaY-1789587793.433433-1.0.1.1-ZMU6bU2AM4hAUPqO_2ZtnZ_JNlBnvUzjZZH9v8jD72PijaUWKQ2X8kTUVEsZ6T_raajwy6FFBrCxxC5dy8m00hgo6QwrCQLh02gsPxrqxZji5bmSokCMVta_jnMVM5q5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2708,"size_decoded":3544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e2399c5c12deb8566fdd4d6214b05c3","sha1":"d216a047e46c89dda18734a4e2f31c9a15eafd8d","sha256":"8f9b7a09a86f3bb12c36874781e3039d33699017b17839b2853d0dddabdf5155","sha512":"73e8643ea7e391b356af7100969df7769cd0c2703c2e3a6abc4a05474cfe480f2d88b638d18a050400c005ef2bf94b48cc96d63b64780c319cea6ba5b873a19d","ssdeep":"","tlshash":"1c515c240fb5b31454115ef54293cc30c61c81adcfea1c6f1f2750ebf9b82620ac4636","first_seen":"2025-03-03T01:41:44.876148Z","last_seen":"2026-09-16T19:44:01.957533Z","times_seen":1819,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/stats/trigger-views","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:21.263Z","timestamp":1789587801263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"POST /api/public/v1/stats/trigger-views HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCP-App-Id: 668731d4e0077a03b40f0b5e\r\nContent-Type: application/json\r\nContent-Length: 40\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40,"data":"{\"triggerId\":\"668731d4e0077a03b40f0b62\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5zS9AKvpuPydTVlf5nzGDSh3pn4BMn3zMTC1B9EVuboBeW2skqilltIDIphlalL4DyhDV0XZxR%2FuuVz8b5%2FJb9lDBx36BHDNgMy98Hxvn45QmQYXxEDaa2l0866%2BD8R7w%3D%3D\"}]}\r\ncf-ray: a3c25c0e2d5a1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":907,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-09-16T20:56:23.569598Z","times_seen":189722,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/telegram.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.514Z","timestamp":1789587793514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /kontak/telegram.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 276\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 05:55:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2476\r\nset-cookie: __cf_bm=WcR88BH4H4t6L8S6GrCt.hPPy2GchBEdEmEGNecmet8-1789587793.5219874-1.0.1.1-pCMhhzLSnzZaR4VQt4tN9HMkQxAKI414LNwInv2JeFdO8HC29hBL5.eQc5u5KBGRhcuUS.eg0384CD5.fX6QhegdACU9rm6F0zM2BPcylJ_B.th4LhfkbQE.dFlmW869; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 4623\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd8ec95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"WcR88BH4H4t6L8S6GrCt.hPPy2GchBEdEmEGNecmet8-1789587793.5219874-1.0.1.1-pCMhhzLSnzZaR4VQt4tN9HMkQxAKI414LNwInv2JeFdO8HC29hBL5.eQc5u5KBGRhcuUS.eg0384CD5.fX6QhegdACU9rm6F0zM2BPcylJ_B.th4LhfkbQE.dFlmW869","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=WcR88BH4H4t6L8S6GrCt.hPPy2GchBEdEmEGNecmet8-1789587793.5219874-1.0.1.1-pCMhhzLSnzZaR4VQt4tN9HMkQxAKI414LNwInv2JeFdO8HC29hBL5.eQc5u5KBGRhcuUS.eg0384CD5.fX6QhegdACU9rm6F0zM2BPcylJ_B.th4LhfkbQE.dFlmW869; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":276,"size_decoded":1123,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c316d773fa9836d1cf1dc54ae77a8d1a","sha1":"2f2ef3bd745077bd8f3a7c83d83153391d4a73b1","sha256":"0d45af6dd72282092f374a0f0da9fc1443188ce7e240691fd7fc1f67c240f430","sha512":"a7eb9648a5b6433f48eefc41ca6fc17fbec6c2136c398530449f7284c1602f6d2ca859ba0c27831d69dcec5c12d05014d8146e9a444f3715d5db736cab8c79a3","ssdeep":"","tlshash":"b9d0eb34336005eeb068738d639c09000601fb439a02226114f388b922006dba40842a","first_seen":"2023-05-06T03:43:35Z","last_seen":"2026-09-16T19:44:01.95924Z","times_seen":2113,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/arcade.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.457Z","timestamp":1789587793457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/arcade.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3280\r\nset-cookie: __cf_bm=a.1NYgYb2dPZpsFQkAfvNetnKwtsTC5zHWW8K2W5yno-1789587793.4609969-1.0.1.1-ZAaAGXHMR2e1OlWRNHjkOYs2WftupSu4Uc2OHkKKHFqm4HlImS9Ta0dlj1J1zvGEgqUFvEz4l_e4UEMeUtTG2geWGi7oTQchU52LQVI33n.nqtHLMraGRyJudS7ovc2a; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd1d1b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"a.1NYgYb2dPZpsFQkAfvNetnKwtsTC5zHWW8K2W5yno-1789587793.4609969-1.0.1.1-ZAaAGXHMR2e1OlWRNHjkOYs2WftupSu4Uc2OHkKKHFqm4HlImS9Ta0dlj1J1zvGEgqUFvEz4l_e4UEMeUtTG2geWGi7oTQchU52LQVI33n.nqtHLMraGRyJudS7ovc2a","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=a.1NYgYb2dPZpsFQkAfvNetnKwtsTC5zHWW8K2W5yno-1789587793.4609969-1.0.1.1-ZAaAGXHMR2e1OlWRNHjkOYs2WftupSu4Uc2OHkKKHFqm4HlImS9Ta0dlj1J1zvGEgqUFvEz4l_e4UEMeUtTG2geWGi7oTQchU52LQVI33n.nqtHLMraGRyJudS7ovc2a; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":350,"size_decoded":1186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b684e53d508cd6b31c7783bdff6cca5","sha1":"9ad973f643cc511319f32dd501539f6c223d45c2","sha256":"e5b50f69e6eea2b60cd5aaa8c79b05ed8a3846ff044ce8b9665cbfe56a821935","sha512":"9fd98539b171b98f674bfa6637ce289c851907b24447b6e964c1e9a8bc148eb2b6714446b2b2b420f75dc6f2bf18d00c675f2ee1be6747ff923d1500c24792b4","ssdeep":"","tlshash":"23e0c010ff04e6759ae728146839c95e1c008e5938c7cbd4070d06e1a1b43530b0295c","first_seen":"2025-11-19T10:28:57.335494Z","last_seen":"2026-09-16T19:44:01.959719Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.289Z","timestamp":1789587793289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.js.iife.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"4f62-kzzghPk0R32ZK+R2NNlbYq9mNOE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nage: 4167169\r\nx-served-by: cache-fra-etou8220076-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20322,"size_decoded":6837,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16599)","md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-09-16T19:44:01.960335Z","times_seen":1249,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":16,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/b0fa01690e4a5c944c861b245b42d5b4.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.494Z","timestamp":1789587793494,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/b0fa01690e4a5c944c861b245b42d5b4.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.388Z","timestamp":1789587794388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\nage: 1985480\r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nx-served-by: cache-fra-etou8220109-FRA, cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 121296\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121296,"size_decoded":122044,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-09-16T19:44:01.961367Z","times_seen":8036,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/style.css","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.285Z","timestamp":1789587793285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icomoon/style.css HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 488\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=2,i=?0\r\nage: 1381\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=PXXwvIxssrRloV4Rhp.ZUcpwuEZWxpaugbJl9z2hXJM-1789587793.3231943-1.0.1.1-XCvnHNQ1UZ0Gkkb88.jApNqlRrboWiHisZWOA.GllC1AB.P9wTHGuV.dlVdsKK1QG0pIMgKhJfvCa8fgk00mvmT9QgR_HvGWb80JRQatkqXAUaDn5lFzrG8elzMOXIFz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-ray: a3c25bdc49185a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PXXwvIxssrRloV4Rhp.ZUcpwuEZWxpaugbJl9z2hXJM-1789587793.3231943-1.0.1.1-XCvnHNQ1UZ0Gkkb88.jApNqlRrboWiHisZWOA.GllC1AB.P9wTHGuV.dlVdsKK1QG0pIMgKhJfvCa8fgk00mvmT9QgR_HvGWb80JRQatkqXAUaDn5lFzrG8elzMOXIFz","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PXXwvIxssrRloV4Rhp.ZUcpwuEZWxpaugbJl9z2hXJM-1789587793.3231943-1.0.1.1-XCvnHNQ1UZ0Gkkb88.jApNqlRrboWiHisZWOA.GllC1AB.P9wTHGuV.dlVdsKK1QG0pIMgKhJfvCa8fgk00mvmT9QgR_HvGWb80JRQatkqXAUaDn5lFzrG8elzMOXIFz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1247,"size_decoded":1306,"mime_type":"text/css","magic":"ASCII text","md5":"fd841219e646258717d8c8c5ee8e1645","sha1":"3b11bf2731abad4ee4b4ed81923025aeee1779a9","sha256":"bd964175c358da3b2151572737f09a8b9b7a180b482ec1b379be8f05a23cfe81","sha512":"7854a76358116fb5eec3fde344bdafa933b20abf93bc324a0484a07188d16624c28e4146e573eb9c6d34041c4b04718385c5d67bae6f5f7ee54ab4a1c460ffe4","ssdeep":"","tlshash":"dc216dd0ecbd2851930194c833a73a20bf0c52159c4a6c9af7ab284cfff670592d679d","first_seen":"2025-11-19T12:27:30.570223Z","last_seen":"2026-09-16T19:44:01.962092Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":9,"connect":25,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.589Z","timestamp":1789587794589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /assets/insert-main-44130e3574b7e1b9a766249043f659de.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27319\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Aug 2026 09:45:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a7aef4f-6ab7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 3133504\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCpDs8TzXPETNbykmc8NTmjnRo7bA8j7%2F038ny1Qs2782QF7gJRwHgjmqUgW29Llwf5KS26bJuh%2FomZ0xcMcfXD1CNkMvd8XjzeGk1%2BXdJ6e5RjrY5BMZJCUASks6Y9U%2FZr9sw%3D%3D\"}]}\r\ncf-ray: a3c25be43c801ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83508,"size_decoded":28281,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-09-16T19:44:01.963202Z","times_seen":109,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ptg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.394Z","timestamp":1789587793394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-ptg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 972\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Jul 2026 08:47:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=dT4hfvp7NbttBT504BrPniHe7c_sWbsViuqtAoHIlG0-1789587793.403803-1.0.1.1-ZekMRBx9kDivZQu5_bDoODXB36cF6naxQODd4SzggvsAL.YtkwTRi1eiwu0VN3fzZggWsG9bD4YSmCVfelpUay5mXZhe1xYfFhem38NSjleOB.MGRrDfmED1InosreSZ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=4483\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab745a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"dT4hfvp7NbttBT504BrPniHe7c_sWbsViuqtAoHIlG0-1789587793.403803-1.0.1.1-ZekMRBx9kDivZQu5_bDoODXB36cF6naxQODd4SzggvsAL.YtkwTRi1eiwu0VN3fzZggWsG9bD4YSmCVfelpUay5mXZhe1xYfFhem38NSjleOB.MGRrDfmED1InosreSZ","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=dT4hfvp7NbttBT504BrPniHe7c_sWbsViuqtAoHIlG0-1789587793.403803-1.0.1.1-ZekMRBx9kDivZQu5_bDoODXB36cF6naxQODd4SzggvsAL.YtkwTRi1eiwu0VN3fzZggWsG9bD4YSmCVfelpUay5mXZhe1xYfFhem38NSjleOB.MGRrDfmED1InosreSZ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":972,"size_decoded":1807,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"034850c750356be1a801f652b0649cd1","sha1":"3e60da89a8e48177d8fcbbf010418fb7c5985095","sha256":"803e9600dd8637a71d583cc5eca392fcbbd020bb9077e4ab520e4779f7dee007","sha512":"7c99c9aaac4c0ddb75319bcb387dd47937a1f245e8408b6fd20a3d08e62d4d4c6de361e3d0ef7ce414d3f1805d4bfc5411a05bcc624ca65620bfc3a92114d1be","ssdeep":"","tlshash":"04119880c48fa7190dfd3c7515720f9c6a186d1541821807afbf0d36c46537f80b452e","first_seen":"2026-07-23T11:04:32.708515Z","last_seen":"2026-09-16T19:44:01.963988Z","times_seen":178,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/css/old/template/LD.css","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.279Z","timestamp":1789587793279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /css/old/template/LD.css HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xs9OCKq5DDUTgEOqJU%2B2gB6zMj%2Fdp%2FPP642%2B3AD4n7dr4JumJ5vlsjK7tDdk3dandBkFuQXKkej0v2CgE7yLzXa%2F63eKACHku5QmOxCvEiF9KFf7CAqfqSHPP9JhRNSHN89BXpIxjpVDFWnb\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 1752\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc39bfd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":977,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"83a8f2c29bcfc8e61dd6f20b1f20b96b","sha1":"8712682990c018f9763192ff5d528bc298fe2154","sha256":"97da9c0ecf5fe329e16067a74987ec00c2d768fc8cf92103824ac943f49ae287","sha512":"44020a4de602d1a01917082b54946b0422fb36818df99ce1b1a79541c975bb2806aeb776ff227c82feb08089184712cfebdb44ec63b5b31d2b98783f2eb1e4f3","ssdeep":"","tlshash":"95012b58898a0456f53f44bf37f9b017f674744794897f56fed850305f38404793a851","first_seen":"2024-09-19T20:29:15.609341Z","last_seen":"2026-09-16T19:44:01.964717Z","times_seen":309,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.399Z","timestamp":1789587793399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=PftATMY83GOEraZvDRmhowopf8jGSBdfNuijhvaN314-1789587793.404576-1.0.1.1-eamhaH_TP.LybDX9pBtX7c2SsW1uDoTxQX4CF36OCtODD_hX3p2BwupRZiscxAVEhP9l9ZsSPPwUu8kmYxY9nh0IGqXO6dAliVaNpdrvE8BLJu4Q0SvHNHhs5JtJqoDQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2786\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab805a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PftATMY83GOEraZvDRmhowopf8jGSBdfNuijhvaN314-1789587793.404576-1.0.1.1-eamhaH_TP.LybDX9pBtX7c2SsW1uDoTxQX4CF36OCtODD_hX3p2BwupRZiscxAVEhP9l9ZsSPPwUu8kmYxY9nh0IGqXO6dAliVaNpdrvE8BLJu4Q0SvHNHhs5JtJqoDQ","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PftATMY83GOEraZvDRmhowopf8jGSBdfNuijhvaN314-1789587793.404576-1.0.1.1-eamhaH_TP.LybDX9pBtX7c2SsW1uDoTxQX4CF36OCtODD_hX3p2BwupRZiscxAVEhP9l9ZsSPPwUu8kmYxY9nh0IGqXO6dAliVaNpdrvE8BLJu4Q0SvHNHhs5JtJqoDQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":2408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-09-16T19:44:01.965401Z","times_seen":3097,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.431Z","timestamp":1789587793431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3881\r\npriority: u=4,i\r\nset-cookie: __cf_bm=3oyJPIvyuW575GGtaa8Gin7LDO48tqjTDZc_KIPyyqA-1789587793.433996-1.0.1.1-8Ul6S5xJR_ufiVNItHVRD2n70SFf9kO09.ezEBsh2xiYXqK4gyIyZC87yWEtv0wd9GERvwgUwLpkzZg4wrdZCl9_mdVDlPS6bkT85sIUuq3ezL5SgyAmRddHPBHXz0r2; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 3678\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc5e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3oyJPIvyuW575GGtaa8Gin7LDO48tqjTDZc_KIPyyqA-1789587793.433996-1.0.1.1-8Ul6S5xJR_ufiVNItHVRD2n70SFf9kO09.ezEBsh2xiYXqK4gyIyZC87yWEtv0wd9GERvwgUwLpkzZg4wrdZCl9_mdVDlPS6bkT85sIUuq3ezL5SgyAmRddHPBHXz0r2","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3oyJPIvyuW575GGtaa8Gin7LDO48tqjTDZc_KIPyyqA-1789587793.433996-1.0.1.1-8Ul6S5xJR_ufiVNItHVRD2n70SFf9kO09.ezEBsh2xiYXqK4gyIyZC87yWEtv0wd9GERvwgUwLpkzZg4wrdZCl9_mdVDlPS6bkT85sIUuq3ezL5SgyAmRddHPBHXz0r2; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2836,"size_decoded":3683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-09-16T19:44:01.965962Z","times_seen":2748,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/capimg.php","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.461Z","timestamp":1789587793461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlocation: /new/capimg.php\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpz27%2B0OXwhw73qWhEC9dt%2F48GvgHW9U7hYCpv3CSph%2BuD6%2FaHuaZZXRBh1sYdEUeeeZzJm5JQiR61kNik7phRfe%2B%2FCxfHfILOHQVO%2Bj%2BuaVTJ7gIHqEKZSvnISfNS2jxdYEYhjAy8skEWk5\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a3c25bdd4a0ad8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/assets/hubungi.png?11","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.511Z","timestamp":1789587793511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATQoL6O5mGsNdZ8pz6wZtpXVPv%2FAAsKai%2Fq%2FYBBiyi7CtvTRXPryZGTVJQWtVjYFsc2olVi5qVuCorWqQjMISCb81If68JAV%2FjNYfONNtvf23pLdLh4bAUIlDpTvjxzye5FzMPRI6BDCkSnS\"}]}\r\ncontent-type: image/png\r\nage: 2242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bddda26d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":6837,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.966556Z","times_seen":4243,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.376Z","timestamp":1789587793376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=hWrykSCN7G5APDwojYOQWe5ZDlCO3zdyNT9Er_vbeYo-1789587793.3786743-1.0.1.1-RFPOIS8pZKf5C09rZs4awr_uYonwXqgO.a2fUUagECbRXS_apw0WjzbjoLeYz_I1CuLSjYfPuqvkT8x7Ex8JHwwkdTOLmGgE0Mlg7WXONsBsm6CUxKko8xvfN6tyg6yB; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1284\r\nvary: accept, accept-encoding\r\nage: 5892\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9ab05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"hWrykSCN7G5APDwojYOQWe5ZDlCO3zdyNT9Er_vbeYo-1789587793.3786743-1.0.1.1-RFPOIS8pZKf5C09rZs4awr_uYonwXqgO.a2fUUagECbRXS_apw0WjzbjoLeYz_I1CuLSjYfPuqvkT8x7Ex8JHwwkdTOLmGgE0Mlg7WXONsBsm6CUxKko8xvfN6tyg6yB","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=hWrykSCN7G5APDwojYOQWe5ZDlCO3zdyNT9Er_vbeYo-1789587793.3786743-1.0.1.1-RFPOIS8pZKf5C09rZs4awr_uYonwXqgO.a2fUUagECbRXS_apw0WjzbjoLeYz_I1CuLSjYfPuqvkT8x7Ex8JHwwkdTOLmGgE0Mlg7WXONsBsm6CUxKko8xvfN6tyg6yB; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":1437,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-09-16T19:44:01.967132Z","times_seen":3254,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.397Z","timestamp":1789587793397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1589\r\npriority: u=4,i\r\nset-cookie: __cf_bm=PUK7Iq95yzqsU6LCIJZbmuHoP0OaVFrHmlFoUGPG_Ko-1789587793.4039938-1.0.1.1-waReeyFo.JNZPPJXYiRt1AC7xQS3PqBDyxAVfpk8lWzbyelIq9th77rm5LIRsMQC0wh0PBQnFLpYlH5LVDZ.rGvhcIG5x2yHlfsOU9XCxs6AZkp1mhi3ZuMD.wnBn9du; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1517\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab7d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PUK7Iq95yzqsU6LCIJZbmuHoP0OaVFrHmlFoUGPG_Ko-1789587793.4039938-1.0.1.1-waReeyFo.JNZPPJXYiRt1AC7xQS3PqBDyxAVfpk8lWzbyelIq9th77rm5LIRsMQC0wh0PBQnFLpYlH5LVDZ.rGvhcIG5x2yHlfsOU9XCxs6AZkp1mhi3ZuMD.wnBn9du","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PUK7Iq95yzqsU6LCIJZbmuHoP0OaVFrHmlFoUGPG_Ko-1789587793.4039938-1.0.1.1-waReeyFo.JNZPPJXYiRt1AC7xQS3PqBDyxAVfpk8lWzbyelIq9th77rm5LIRsMQC0wh0PBQnFLpYlH5LVDZ.rGvhcIG5x2yHlfsOU9XCxs6AZkp1mhi3ZuMD.wnBn9du; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":810,"size_decoded":1657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.967632Z","times_seen":3833,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.423Z","timestamp":1789587793423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=s3lr6FcQTjkmQBRMpybiDsDPL1KwlGQgr1ST1Vi1E7U-1789587793.4272838-1.0.1.1-SYlUqdY36nZTgfZye6Aq.nh1iIntaTEGyX7b3mkwW5LFEXjqrdVIrAg6SzziBgT7kRX3emlsCIemGEuWWeVa_vR_moGOM1HkFElSsX.BnURWWTZVXiEqDsTugym9oj8M; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 3060\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec295a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"s3lr6FcQTjkmQBRMpybiDsDPL1KwlGQgr1ST1Vi1E7U-1789587793.4272838-1.0.1.1-SYlUqdY36nZTgfZye6Aq.nh1iIntaTEGyX7b3mkwW5LFEXjqrdVIrAg6SzziBgT7kRX3emlsCIemGEuWWeVa_vR_moGOM1HkFElSsX.BnURWWTZVXiEqDsTugym9oj8M","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=s3lr6FcQTjkmQBRMpybiDsDPL1KwlGQgr1ST1Vi1E7U-1789587793.4272838-1.0.1.1-SYlUqdY36nZTgfZye6Aq.nh1iIntaTEGyX7b3mkwW5LFEXjqrdVIrAg6SzziBgT7kRX3emlsCIemGEuWWeVa_vR_moGOM1HkFElSsX.BnURWWTZVXiEqDsTugym9oj8M; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":2420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-09-16T19:44:01.965401Z","times_seen":3097,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.184Z","timestamp":1789587794184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 19:43:14 GMT\r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":1504,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-09-16T19:44:01.968632Z","times_seen":2818,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.354Z","timestamp":1789587793354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=5084\r\nset-cookie: __cf_bm=ym7_9RYr4vaJWuwJKX3Ii2zDdl8qWWavW5MmKekSY.s-1789587793.3583753-1.0.1.1-tVpvMQmEIFdfo0BKuBGVhvG.bN.CeVk5erxg8oFd3fO3KneanaoDs3ulKHrEYOdyIvY0f78MwItKtDraD3298utMlHcwxGka9iLnODBEl3pgEvAkOXPr5JIMAoKi6_lr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 5594\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc4a1d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ym7_9RYr4vaJWuwJKX3Ii2zDdl8qWWavW5MmKekSY.s-1789587793.3583753-1.0.1.1-tVpvMQmEIFdfo0BKuBGVhvG.bN.CeVk5erxg8oFd3fO3KneanaoDs3ulKHrEYOdyIvY0f78MwItKtDraD3298utMlHcwxGka9iLnODBEl3pgEvAkOXPr5JIMAoKi6_lr","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ym7_9RYr4vaJWuwJKX3Ii2zDdl8qWWavW5MmKekSY.s-1789587793.3583753-1.0.1.1-tVpvMQmEIFdfo0BKuBGVhvG.bN.CeVk5erxg8oFd3fO3KneanaoDs3ulKHrEYOdyIvY0f78MwItKtDraD3298utMlHcwxGka9iLnODBEl3pgEvAkOXPr5JIMAoKi6_lr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1740,"size_decoded":2588,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.969967Z","times_seen":3836,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.366Z","timestamp":1789587793366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=7983\r\nset-cookie: __cf_bm=sQNacPiQXMwAQPpS1EjwFe.3G8PXL2d0k408jpHH_B0-1789587793.3760562-1.0.1.1-gzf5eYq1PSUvIwGj6lIzjLOb6aY.zqn0j_MVK5x2c50Y6yrm6FAVD7tr.sA844vZsFFq_pxDpU3gFykBiPksu0bSeo_bX3HU.Z6FQo_FRJb05ouoTtP9MbfcQE6zig4M; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3061\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a925a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"sQNacPiQXMwAQPpS1EjwFe.3G8PXL2d0k408jpHH_B0-1789587793.3760562-1.0.1.1-gzf5eYq1PSUvIwGj6lIzjLOb6aY.zqn0j_MVK5x2c50Y6yrm6FAVD7tr.sA844vZsFFq_pxDpU3gFykBiPksu0bSeo_bX3HU.Z6FQo_FRJb05ouoTtP9MbfcQE6zig4M","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=sQNacPiQXMwAQPpS1EjwFe.3G8PXL2d0k408jpHH_B0-1789587793.3760562-1.0.1.1-gzf5eYq1PSUvIwGj6lIzjLOb6aY.zqn0j_MVK5x2c50Y6yrm6FAVD7tr.sA844vZsFFq_pxDpU3gFykBiPksu0bSeo_bX3HU.Z6FQo_FRJb05ouoTtP9MbfcQE6zig4M; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":2848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.909289Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-atg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.417Z","timestamp":1789587793417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-atg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 504\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Jul 2026 05:20:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=7vDamCS1HO1qizHNy42duxr2xdL3SS.b6oDxArCzGyQ-1789587793.425584-1.0.1.1-HiJSaXUXyQuxjk2IIBgcDGLziyHDFBLYMOkHcWY7hQD4Aa3C5fjgx9UYg80Yxmuqa1m.5g81q1OLz_Pf8MdwNKzO0R.ExOVQIEvxUVS3uJGQTs854oRDDIIpw_YRV9Cg; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=3847\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 5037\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec165a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"7vDamCS1HO1qizHNy42duxr2xdL3SS.b6oDxArCzGyQ-1789587793.425584-1.0.1.1-HiJSaXUXyQuxjk2IIBgcDGLziyHDFBLYMOkHcWY7hQD4Aa3C5fjgx9UYg80Yxmuqa1m.5g81q1OLz_Pf8MdwNKzO0R.ExOVQIEvxUVS3uJGQTs854oRDDIIpw_YRV9Cg","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=7vDamCS1HO1qizHNy42duxr2xdL3SS.b6oDxArCzGyQ-1789587793.425584-1.0.1.1-HiJSaXUXyQuxjk2IIBgcDGLziyHDFBLYMOkHcWY7hQD4Aa3C5fjgx9UYg80Yxmuqa1m.5g81q1OLz_Pf8MdwNKzO0R.ExOVQIEvxUVS3uJGQTs854oRDDIIpw_YRV9Cg; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":504,"size_decoded":1350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9df864f15891d297018295da228ca466","sha1":"62c93bc22929bb332dceb971df9fa8be22535511","sha256":"9b73e3e9c3907e615d0c74d33d117a963e372f2682f66cdc6f55d82bf8859235","sha512":"d58e401dd4afa73724f8e284e1507b894977ded6160e7199d5733c6d75e7cdd283d9fb43128e9bf74102e418b13428f0c0fde5e2ad7e7767919bd750a65530eb","ssdeep":"","tlshash":"a0f00e4d0677d3600a2a3822e728943810c0deff64e95b6412b123a5aa0b4a0074b0d0","first_seen":"2026-07-03T10:40:34.569918Z","last_seen":"2026-09-16T19:44:01.907258Z","times_seen":416,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/643ef4101b017dc1495dbd9e9d5cce28.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.489Z","timestamp":1789587793489,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/643ef4101b017dc1495dbd9e9d5cce28.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.359Z","timestamp":1789587793359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-pok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 940\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Aug 2026 06:24:07 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=LACPv8RrL2foVw4AYJuFPck5Euma.tiSLWpKeCaETMk-1789587793.3730478-1.0.1.1-1x2mRdl8BcnJFpdXPaV22UEZlkl_l8ahxg_yse0CtZc5xe7zK_6oSgRAU4dT0liEwAq1ccDlKNwVQsOLh8RrGOXGHW0GWLRgvqwGEXgqHrUQdD4fX9LEbbBMHCGBs9jY; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=4363\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a775a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"LACPv8RrL2foVw4AYJuFPck5Euma.tiSLWpKeCaETMk-1789587793.3730478-1.0.1.1-1x2mRdl8BcnJFpdXPaV22UEZlkl_l8ahxg_yse0CtZc5xe7zK_6oSgRAU4dT0liEwAq1ccDlKNwVQsOLh8RrGOXGHW0GWLRgvqwGEXgqHrUQdD4fX9LEbbBMHCGBs9jY","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=LACPv8RrL2foVw4AYJuFPck5Euma.tiSLWpKeCaETMk-1789587793.3730478-1.0.1.1-1x2mRdl8BcnJFpdXPaV22UEZlkl_l8ahxg_yse0CtZc5xe7zK_6oSgRAU4dT0liEwAq1ccDlKNwVQsOLh8RrGOXGHW0GWLRgvqwGEXgqHrUQdD4fX9LEbbBMHCGBs9jY; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":940,"size_decoded":1776,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfd7b437aa31d3f9d59bb631cbbba1cf","sha1":"305d31761b35943a74beab080e46ab694d131d6d","sha256":"4a9129dbb063258d75f8532d0c3f7cdbb4a3c8400f48813b512e5f5aa9e1b4d6","sha512":"eea2cf2968aaed6430ce5c7ad80404ff462b05c5759917ea1b024f51a1a5068256d6895db4f32ba3a746a0b6df576aadc5348e2e044e3684f55b114bc8d79f93","ssdeep":"","tlshash":"9411846c7a7123b59a1e766c089af95e9dd0e148b5f28351c752e83c8b66bd62038027","first_seen":"2026-08-05T09:10:50.975331Z","last_seen":"2026-09-16T19:44:01.933664Z","times_seen":110,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.371Z","timestamp":1789587793371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1401\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=ukBKfOcw0vyH7duj94DEdsz9vRxuPgSQ0yTeF9qL3wk-1789587793.377368-1.0.1.1-hzBZ6aiR2fXQqI3gO_22wRn7HTIqXRN2XFDzD8FUmWiJDvmpt5LcZJUAqO8Rkj8OJ_zdwzw0JM_mKp_8CUAGkDdhE5yBigB2w1scj..4bfMCDL725UW3B23MPUSLb6sI; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2300\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9aa55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ukBKfOcw0vyH7duj94DEdsz9vRxuPgSQ0yTeF9qL3wk-1789587793.377368-1.0.1.1-hzBZ6aiR2fXQqI3gO_22wRn7HTIqXRN2XFDzD8FUmWiJDvmpt5LcZJUAqO8Rkj8OJ_zdwzw0JM_mKp_8CUAGkDdhE5yBigB2w1scj..4bfMCDL725UW3B23MPUSLb6sI","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ukBKfOcw0vyH7duj94DEdsz9vRxuPgSQ0yTeF9qL3wk-1789587793.377368-1.0.1.1-hzBZ6aiR2fXQqI3gO_22wRn7HTIqXRN2XFDzD8FUmWiJDvmpt5LcZJUAqO8Rkj8OJ_zdwzw0JM_mKp_8CUAGkDdhE5yBigB2w1scj..4bfMCDL725UW3B23MPUSLb6sI; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":1572,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-09-16T19:44:01.970515Z","times_seen":3026,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.396Z","timestamp":1789587793396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2690\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=KIvAxaeL64rcf2S1ajgRHiogv3AkOsVlk6IeTJZ4EuY-1789587793.4038541-1.0.1.1-d.9gfrSgMZPQRVLrIdVR5CZD4NalK8RVKavs2xf6e1.1WXyvL0EqVeZJ1vhnzX8ZitZS2Q9LrMKNv.rk.VSZhV7KwXutwkm1lmEEUYBh0fwrSYdTcqg7ElLD3pezQyFz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 3829\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab7b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"KIvAxaeL64rcf2S1ajgRHiogv3AkOsVlk6IeTJZ4EuY-1789587793.4038541-1.0.1.1-d.9gfrSgMZPQRVLrIdVR5CZD4NalK8RVKavs2xf6e1.1WXyvL0EqVeZJ1vhnzX8ZitZS2Q9LrMKNv.rk.VSZhV7KwXutwkm1lmEEUYBh0fwrSYdTcqg7ElLD3pezQyFz","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=KIvAxaeL64rcf2S1ajgRHiogv3AkOsVlk6IeTJZ4EuY-1789587793.4038541-1.0.1.1-d.9gfrSgMZPQRVLrIdVR5CZD4NalK8RVKavs2xf6e1.1WXyvL0EqVeZJ1vhnzX8ZitZS2Q9LrMKNv.rk.VSZhV7KwXutwkm1lmEEUYBh0fwrSYdTcqg7ElLD3pezQyFz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1480,"size_decoded":2328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-09-16T19:44:01.971077Z","times_seen":2788,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/new-webdata.php?content=data","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.506Z","timestamp":1789587794506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KleiP5%2FH9zCxKEa92fU7Ruj%2Bqw4qcXrKa5UG4LwlcWhsN2xT3KPrIUk2sBhrKZTnzbbY%2BCrvONUFTNv50aMEPiTz5eObvABWAj5Uyz9yi7ms4P47oFgnyhIub6sGdXN6VojDbHUG1zhY8AoV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25be3bc4cd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":918,"mime_type":"application/json","magic":"JSON text data","md5":"343d0a9465d35809a869441c6e89a202","sha1":"b784eb0013ac59aa1f9dd7909ecd9c54518d0d9c","sha256":"5c2a69579028a838c032b9aecb5f57b9fc0ca06675c08daaacd79b0c656bb6e1","sha512":"14247facdfe2f80ef03fa1aa448f6cc5cde855cd221a43ad7cc4c977c1479286fbf317c0793987a19d5649a8b36d40eba236fffc4bab1de22a08520bed6e4e8e","ssdeep":"","tlshash":"16d0a72187255d0661008faa51b8a12b0dcb473347d6951f96704c2a170788f5ef8f9a","first_seen":"2026-09-16T19:44:01.971625Z","last_seen":"2026-09-16T19:44:01.971625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/log/common/co/api","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.764Z","timestamp":1789587795764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"POST /log/common/co/api HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nContent-Length: 972\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: kwai_ckid=1789587795647_82538530859910318\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":972,"data":"{\"clickid\":\"\",\"event_name\":\"EVENT_PAGE_VIEW\",\"is_attributed\":0,\"mmpcode\":\"PL\",\"pixelId\":\"293299371379305\",\"pixelSdkVersion\":\"2.13.0\",\"testFlag\":false,\"trackFlag\":false,\"pixelExtData\":\"{\\\"pixelIds\\\":\\\"293299371379305\\\",\\\"sessionId\\\":\\\"sessionId-1789587795546-3392558467072-293299371379305\\\",\\\"sendInfo\\\":{\\\"sendBy\\\":\\\"directly\\\",\\\"emitTime\\\":1789587795760,\\\"sendTime\\\":1789587795760,\\\"sendMethod\\\":1,\\\"sendWithXhrAsync\\\":true},\\\"kwaiInfo\\\":{\\\"uuid\\\":\\\"05469b1de6eb090b34ed487ceb01933c\\\",\\\"currentHref\\\":\\\"https://rekemonedasi-facebook.org/\\\",\\\"accessMode\\\":2,\\\"host\\\":\\\"rekemonedasi-facebook.org\\\",\\\"navigator\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"eventId\\\":\\\"eventId-1789587795757-6920248935592-293299371379305\\\",\\\"tirdParty\\\":\\\"none\\\",\\\"kwaiAdInfoSource\\\":\\\"nonAttribute\\\",\\\"referrer\\\":\\\"\\\",\\\"inIframe\\\":false,\\\"isGtm\\\":false,\\\"staticHost\\\":\\\"s21-def.ap4r.com\\\",\\\"displayMode\\\":\\\"fullscreen\\\",\\\"iosStandalone\\\":false}}\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ndate: Wed, 16 Sep 2026 19:43:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 1094\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2182,"size_decoded":1444,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13aef08dbe361668917321186c461e96","sha1":"6ad3d9ca6f4fdd046b284a55b4d238d0dd978026","sha256":"0c4a114d57f10d8490017a49b652c3e6893be1de93510252aa35246deb9e7644","sha512":"3036cb116458d8aa77ecee2c025b4410ca2a372dc81bb342b2a146c10bc3899671e725ed716d84b23c1fdb443922640e8a0c9b7d37866d31338f5eef29047049","ssdeep":"","tlshash":"974142c2a104dc6691c39c4a03f62d3321bd02df6cd7563ed698ff109f9707a6e2962a","first_seen":"2026-09-16T19:44:01.972653Z","last_seen":"2026-09-16T19:44:01.972653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.367Z","timestamp":1789587793367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=KSd3W48VpAoSw9R0.4s8hdFiXrG4c5TEcfCLmHXJkhU-1789587793.3767169-1.0.1.1-SWgGE4cb_yHSgvAkUnpAJBAyipGC.Z_1araeDGskUZEzjEgvMDlWNX3zJCWz_hBmrLOf3hWAC1vMYa..wsLidEzwQWOzfoNYaq8zOUgdDDiNu_p.tnJz3YrlpFOrn9ON; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"KSd3W48VpAoSw9R0.4s8hdFiXrG4c5TEcfCLmHXJkhU-1789587793.3767169-1.0.1.1-SWgGE4cb_yHSgvAkUnpAJBAyipGC.Z_1araeDGskUZEzjEgvMDlWNX3zJCWz_hBmrLOf3hWAC1vMYa..wsLidEzwQWOzfoNYaq8zOUgdDDiNu_p.tnJz3YrlpFOrn9ON","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=KSd3W48VpAoSw9R0.4s8hdFiXrG4c5TEcfCLmHXJkhU-1789587793.3767169-1.0.1.1-SWgGE4cb_yHSgvAkUnpAJBAyipGC.Z_1araeDGskUZEzjEgvMDlWNX3zJCWz_hBmrLOf3hWAC1vMYa..wsLidEzwQWOzfoNYaq8zOUgdDDiNu_p.tnJz3YrlpFOrn9ON; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":1929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.901085Z","times_seen":3834,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.407Z","timestamp":1789587793407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=mUAitscyDile2sNco1KWWGVhUvZjf.4cW6NmYe0ZyKw-1789587793.4110115-1.0.1.1-Imd10tVsdIQIN81rqv33W43Zo9ZwMOBTdvkDUiV8w_EyysL1NO6K6NI6522P_nf8qWTwUwOjLSQMkTfnCW19GmuawJ8tA7HzOTmWk7lK9n0.FeZE6j.Y3Ex7pItyuvzz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdccbb45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"mUAitscyDile2sNco1KWWGVhUvZjf.4cW6NmYe0ZyKw-1789587793.4110115-1.0.1.1-Imd10tVsdIQIN81rqv33W43Zo9ZwMOBTdvkDUiV8w_EyysL1NO6K6NI6522P_nf8qWTwUwOjLSQMkTfnCW19GmuawJ8tA7HzOTmWk7lK9n0.FeZE6j.Y3Ex7pItyuvzz","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=mUAitscyDile2sNco1KWWGVhUvZjf.4cW6NmYe0ZyKw-1789587793.4110115-1.0.1.1-Imd10tVsdIQIN81rqv33W43Zo9ZwMOBTdvkDUiV8w_EyysL1NO6K6NI6522P_nf8qWTwUwOjLSQMkTfnCW19GmuawJ8tA7HzOTmWk7lK9n0.FeZE6j.Y3Ex7pItyuvzz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":2429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.914112Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/rest/n/adintl/gray/getGrayInfo","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.477Z","timestamp":1789587794477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"OPTIONS /rest/n/adintl/gray/getGrayInfo HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rekemonedasi-facebook.org/\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\ngetparamsfromurl: false\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":436,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":0,"dns":0,"connect":4,"send":0,"wait":914,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logsdk.kwai-pro.com/rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel","fqdn":"logsdk.kwai-pro.com","domain":"kwai-pro.com","tld":"com"},"ip":{"addr":"23.214.96.85","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.544Z","timestamp":1789587795544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai-pro.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Aug 2026 07:12:14 GMT","end":"Mon, 22 Feb 2027 06:30:05 GMT"},"fingerprint":{"sha1":"3E:05:9C:D8:AC:0D:90:D8:53:19:C1:92:7A:30:35:02:C7:C0:AD:92","sha256":"AD:5F:17:5E:62:1F:D2:8C:A6:81:AA:17:9C:D4:E0:40:02:79:F4:ED:3A:F1:25:D4:22:A6:F3:21:D6:49:7A:7B"}}},"request":{"raw":"POST /rest/wd/common/log/collect/radar?v=3.10.28\u0026kpn=ksib.fe.pixel HTTP/1.1\r\nHost: logsdk.kwai-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3779\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3779,"data":"{\"common\":{\"identity_package\":{\"device_id\":\"web_5310107626042188\",\"global_id\":\"\",\"user_id\":\"-1\"},\"app_package\":{\"language\":\"en-US\",\"platform\":10,\"container\":\"WEB\",\"product_name\":\"ksib.fe.pixel\"},\"service_name\":\"radarSDK\",\"device_package\":{\"os_version\":\"NT 10.0\",\"model\":\"Windows\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"need_encrypt\":false,\"network_package\":{\"type\":0},\"h5_extra_attr\":\"{\\\"sdk_name\\\":\\\"webLogger\\\",\\\"sdk_version\\\":\\\"3.10.28\\\",\\\"sdk_bundle\\\":\\\"log.hybrid.js\\\",\\\"app_version_name\\\":\\\"\\\",\\\"host_product\\\":\\\"\\\",\\\"resolution\\\":\\\"1280x1024\\\",\\\"screen_width\\\":1280,\\\"screen_height\\\":1024,\\\"device_pixel_ratio\\\":1,\\\"domain\\\":\\\"https://rekemonedasi-facebook.org\\\",\\\"fromIframe\\\":false}\",\"global_attr\":\"{}\"},\"logs\":[{\"client_timestamp\":1789587795542,\"client_increment_id\":0,\"session_id\":\"147a897d-0714-4b79-a450-f5c2d3945f18\",\"time_zone\":\"GMT+00:00\",\"stat_package\":{\"custom_stat_event\":{\"key\":\"radar_log\",\"value\":\"{\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\",\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"data\\\":[{\\\"key\\\":\\\"load\\\",\\\"dimension\\\":{\\\"collect_version\\\":\\\"1.2.7\\\",\\\"collect_name\\\":\\\"RadarNavigationCollect\\\",\\\"event_name\\\":\\\"radar_init\\\",\\\"custom_metric\\\":\\\"{}\\\",\\\"main_api_list\\\":[],\\\"radar_main_api_list\\\":[],\\\"radar_main_js_list\\\":[],\\\"is_official\\\":1,\\\"sample_rate\\\":1,\\\"load_device_increase_id\\\":0,\\\"load_session_increase_id\\\":0},\\\"value\\\":{\\\"redirect\\\":\\\"0\\\",\\\"dns\\\":\\\"65\\\",\\\"dns_start\\\":\\\"100\\\",\\\"tcp\\\":\\\"36\\\",\\\"tcp_start\\\":\\\"137\\\",\\\"ssl\\\":\\\"36\\\",\\\"ssl_start\\\":\\\"101\\\",\\\"ttfb\\\":\\\"292\\\",\\\"request_start\\\":\\\"138\\\",\\\"trans\\\":\\\"0\\\",\\\"dom_parse\\\":\\\"1515\\\",\\\"dom_parse_start\\\":\\\"1945\\\",\\\"blank\\\":\\\"542\\\",\\\"fb\\\":\\\"430\\\",\\\"dom_ready\\\":\\\"1982\\\",\\\"total\\\":\\\"-1789587792451\\\",\\\"resource\\\":\\\"-1789587794396\\\",\\\"tti\\\":\\\"1945\\\",\\\"dom_num\\\":\\\"1787\\\",\\\"navigation_start_time\\\":\\\"1789587792451\\\",\\\"fetch_start_time\\\":\\\"1789587792475\\\",\\\"dns_start_time\\\":\\\"1789587792486\\\",\\\"dns_end_time\\\":\\\"1789587792551\\\",\\\"connect_start_time\\\":\\\"1789587792552\\\",\\\"ssl_start_time\\\":\\\"1789587792552\\\",\\\"request_start_time\\\":\\\"1789587792589\\\",\\\"response_start_time\\\":\\\"1789587792881\\\",\\\"response_end_time\\\":\\\"1789587792881\\\",\\\"dom_interactive_time\\\":\\\"1789587794396\\\",\\\"dom_loading_time\\\":\\\"1789587792993\\\",\\\"dom_ready_time\\\":\\\"1789587794433\\\",\\\"load_event_time\\\":\\\"0\\\",\\\"connect_end_time\\\":\\\"1789587792588\\\",\\\"load_event_end\\\":\\\"0\\\",\\\"dom_complete\\\":\\\"0\\\",\\\"dom_content_loaded_event_start\\\":\\\"1789587794425\\\",\\\"redirect_start\\\":\\\"0\\\",\\\"redirect_end\\\":\\\"0\\\",\\\"radar_init_time\\\":\\\"1789587795540\\\"},\\\"h5_extra_attr\\\":\\\"{\\\\\\\"sdk_name\\\\\\\":\\\\\\\"webLogger\\\\\\\",\\\\\\\"sdk_version\\\\\\\":\\\\\\\"3.10.28\\\\\\\",\\\\\\\"sdk_bundle\\\\\\\":\\\\\\\"log.hybrid.js\\\\\\\",\\\\\\\"host_product\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"resolution\\\\\\\":\\\\\\\"1280x1024\\\\\\\",\\\\\\\"screen_width\\\\\\\":1280,\\\\\\\"screen_height\\\\\\\":1024,\\\\\\\"device_pixel_ratio\\\\\\\":1,\\\\\\\"domain\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org\\\\\\\",\\\\\\\"fromIframe\\\\\\\":false,\\\\\\\"url\\\\\\\":\\\\\\\"https://rekemonedasi-facebook.org/\\\\\\\",\\\\\\\"hash\\\\\\\":\\\\\\\"\\\\\\\",\\\\\\\"online\\\\\\\":true}\\\",\\\"url_package\\\":{\\\"page\\\":\\\"https://rekemonedasi-facebook.org/\\\",\\\"identity\\\":\\\"80237e4b-b2be-4f88-9b25-17f836b14abe\\\",\\\"page_type\\\":2},\\\"project_id\\\":\\\"5b88a5135h\\\",\\\"event_client_timestamp\\\":1789587795542,\\\"event_trigger_source\\\":\\\"H5\\\",\\\"radar_session_id\\\":\\\"c2aea649-c2d6-4520-8d77-70ad72a14731\\\"}]}\"}}}]}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 70\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70,"size_decoded":359,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"efdc6da46c0cf2c9cfdeb336d925b4e9","sha1":"ba8bc26c7b93827020751ca2848c0a04d4bf8a7b","sha256":"2bf4560c8891364d9951b0437d169e6ec1c6333832430fe242d2e6584febd90c","sha512":"3fc99787cd02a39efea8c1ea55e5627a9709b988b529282949fe65b44b2cf1f870704ca4aa48160d50199c3d8229b65a7d221c9ce92ae60a7fbca36a0b8f455a","ssdeep":"","tlshash":"61a022082200c800322cbc08088000c3208c0e00efc88a030fb0200882c800232ba203","first_seen":"2026-05-29T10:47:58.457893Z","last_seen":"2026-09-16T19:44:01.973614Z","times_seen":73,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":201,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cmp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.377Z","timestamp":1789587793377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-cmp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 06:48:05 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=G1f_Fl5tgBfEUuFjp5NjtN7r2KRNCTCvAsVJ6XEMTsM-1789587793.3883066-1.0.1.1-epaxaSBD.5Hm54SSEWYKBFKjm4qlkiahGYpFgJl.xiX5bsTjSd3_FjQeJFoyn5FPfsBFI1Yq4y94FQe5yUcwosBggcAoH03_V1bZsRKloXRBbN3Z4rVuQ3c0NXNSMp8H; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=1995\r\nvary: accept, accept-encoding\r\nage: 5992\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcaaf75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"G1f_Fl5tgBfEUuFjp5NjtN7r2KRNCTCvAsVJ6XEMTsM-1789587793.3883066-1.0.1.1-epaxaSBD.5Hm54SSEWYKBFKjm4qlkiahGYpFgJl.xiX5bsTjSd3_FjQeJFoyn5FPfsBFI1Yq4y94FQe5yUcwosBggcAoH03_V1bZsRKloXRBbN3Z4rVuQ3c0NXNSMp8H","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=G1f_Fl5tgBfEUuFjp5NjtN7r2KRNCTCvAsVJ6XEMTsM-1789587793.3883066-1.0.1.1-epaxaSBD.5Hm54SSEWYKBFKjm4qlkiahGYpFgJl.xiX5bsTjSd3_FjQeJFoyn5FPfsBFI1Yq4y94FQe5yUcwosBggcAoH03_V1bZsRKloXRBbN3Z4rVuQ3c0NXNSMp8H; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":886,"size_decoded":1733,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6cb4315352cd82704bcaecbac64ccd7","sha1":"66af4e4de0848500ebc2641527e5ee8755febead","sha256":"67f9d63b2ae81ef3a719dda19901f66528e948c662a58cd2822d679918ade617","sha512":"da4a2f79032ebdc382aa5e20354502c9ca759b7e3820e85675ece4a2f809818d221251a2497b04ab025465cd1e6e65d5aa82367bc6fce7c10d72da4981f61efc","ssdeep":"","tlshash":"b711e698978898aceaabe09d9774bc3a4c0c223ab0009109a4b20dd5520b2603864fcb","first_seen":"2026-02-13T23:33:55.556628Z","last_seen":"2026-09-16T19:44:01.974154Z","times_seen":1736,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/b22d9b2c5fc8d98df9194a9c5d66ec83.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.498Z","timestamp":1789587793498,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/b22d9b2c5fc8d98df9194a9c5d66ec83.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/images/transaksi.png","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.507Z","timestamp":1789587793507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /images/transaksi.png HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 06:58:20 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6h2GUJ0rkzopLa5ivMoe4AfmP8rL4e44l7h%2BWxA6mcHGKf6IYbWV6BYTZhurqTbmGVJuMkCK2j8mrqJK8BsyINe8RKuX2dNVHU%2BAnjS9cPidz%2BgvwvkYZ5eKEFisCq%2Bt2eQMUyDLYU%2FiJfA\"}]}\r\ncontent-type: image/png\r\nage: 2242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bddca21d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 218956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218956,"size_decoded":219647,"mime_type":"image/png","magic":"PNG image data, 500 x 400, 8-bit/color RGBA, non-interlaced","md5":"03ce22f06b6845b126003566c4b55a80","sha1":"b8c6630bf76a1e00e1d3d0f9a09b7111ae2c7b61","sha256":"30e1c5205987eb61c60d00f5826662814303555dbae1373a7dba34bd79c384d5","sha512":"a5d75c88c4cb340eb1c2dbab05873cddf2fe24d3b5e79c2c735fa0a868ea1e095374dec7604af778612c02acc5dbdc0b4872e6051f1d71feb8309cfbe6d78242","ssdeep":"6144:3V5YETujPZrC53dZePFe2+y7BYYvSOTEh:3VO5xu53dZyFeWJvSKM","tlshash":"54242342cd028f89f850bd35e1d8c796ec7ad7d935c9e1ae9221c4401fda89638eb58e","first_seen":"2025-11-19T10:28:57.311271Z","last_seen":"2026-09-16T19:44:01.974693Z","times_seen":1823,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/rest/n/adintl/ad/checkPixel","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.793Z","timestamp":1789587795793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"POST /rest/n/adintl/ad/checkPixel HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 293\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: kwai_ckid=1789587795647_82538530859910318\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":293,"data":"{\"data\":\"{}\",\"extraInfo\":{\"clickid\":\"\",\"pixelId\":\"\",\"pixelSdkVersion\":\"2.13.0\",\"pluginVersion\":\"1.1.0\",\"error\":\"\",\"pixelExtData\":\"{\\\"kwaiInfo\\\":{\\\"currentHref\\\":\\\"https://rekemonedasi-facebook.org/\\\"},\\\"pixelIds\\\":\\\"293299371379305\\\",\\\"sessionId\\\":\\\"sessionId-1789587795546-3392558467072\\\"}\"}}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=UTF-8\r\ngetparamsfromurl: false\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ndate: Wed, 16 Sep 2026 19:43:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 193\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":194,"size_decoded":567,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"88874d858463011d03d1ec9f2a6169f6","sha1":"778e21ddf20805eae389d7b24a8a95c42e4c88b0","sha256":"d9c519c14c061f3796477602ce78e1e2337b311f9096f29535957c46d340d378","sha512":"648fa3e6b2aba0ae6b59c56a46c021770b7812471608ca68b7bd0df8649752a193e6cbf90ba1a1744a02f4cd6c0f5984d4da55fdabc33072276fecff9ed76b6e","ssdeep":"","tlshash":"a0c0c0138cc08700bd46389a61a09e9920fe3f1987fa9833cc0d158c9bc40937105c68","first_seen":"2026-09-16T19:44:01.97518Z","last_seen":"2026-09-16T19:44:01.97518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.364Z","timestamp":1789587793364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=aeXFLM9e9qmcWvJu6ya1KiykGFWtrKKtaVh3x2GFsUU-1789587793.3755128-1.0.1.1-qJVTaVO.V_4rZ9_bsdgdn5KZnsvDjhaAnrwz4tuTjMN6T86bDjRqxIzC5m1BiFO3xBS0AZMyRReQu.wvBPUV.gFfiIEEv_YMm5yKe_iQij8B0UYcWlZBrr1A6loRC5kT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=2880\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2297\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a8a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aeXFLM9e9qmcWvJu6ya1KiykGFWtrKKtaVh3x2GFsUU-1789587793.3755128-1.0.1.1-qJVTaVO.V_4rZ9_bsdgdn5KZnsvDjhaAnrwz4tuTjMN6T86bDjRqxIzC5m1BiFO3xBS0AZMyRReQu.wvBPUV.gFfiIEEv_YMm5yKe_iQij8B0UYcWlZBrr1A6loRC5kT","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=aeXFLM9e9qmcWvJu6ya1KiykGFWtrKKtaVh3x2GFsUU-1789587793.3755128-1.0.1.1-qJVTaVO.V_4rZ9_bsdgdn5KZnsvDjhaAnrwz4tuTjMN6T86bDjRqxIzC5m1BiFO3xBS0AZMyRReQu.wvBPUV.gFfiIEEv_YMm5yKe_iQij8B0UYcWlZBrr1A6loRC5kT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":1621,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-09-16T19:44:01.976387Z","times_seen":3752,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/slots.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.439Z","timestamp":1789587793439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/slots.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3936\r\nset-cookie: __cf_bm=GFqcSh5tf6i_vC4he8BmiA4KGrSDbB5jNdmyNop.6p4-1789587793.4432204-1.0.1.1-9nXtNkJ1SgtCv4GJNmHEn8zu2cHfG7cg8IXzJrZQDrKp.oaD4j7t5w2HBBQ9e1rPOB6Zv577GhHMYRYBda4T_y.NfoBm3ZRa0D9Q9GC9go9ZWqznw0NeDIXnimsbhDUl; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1516\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd0ca35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"GFqcSh5tf6i_vC4he8BmiA4KGrSDbB5jNdmyNop.6p4-1789587793.4432204-1.0.1.1-9nXtNkJ1SgtCv4GJNmHEn8zu2cHfG7cg8IXzJrZQDrKp.oaD4j7t5w2HBBQ9e1rPOB6Zv577GhHMYRYBda4T_y.NfoBm3ZRa0D9Q9GC9go9ZWqznw0NeDIXnimsbhDUl","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=GFqcSh5tf6i_vC4he8BmiA4KGrSDbB5jNdmyNop.6p4-1789587793.4432204-1.0.1.1-9nXtNkJ1SgtCv4GJNmHEn8zu2cHfG7cg8IXzJrZQDrKp.oaD4j7t5w2HBBQ9e1rPOB6Zv577GhHMYRYBda4T_y.NfoBm3ZRa0D9Q9GC9go9ZWqznw0NeDIXnimsbhDUl; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":700,"size_decoded":1547,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49004475ffe1ab21bd1d1845cf3c5bb2","sha1":"5f1b45dbf862fc3b31fcf2995a3d79c85db7e1a1","sha256":"bde4902504d927b3c8f18a0000db9dfd665f16757368d3e225e9c6dffb366203","sha512":"24376af88f7a418d0b2f6b56dd003515b34bb927d5a946171aa0e11690d5794bb41dc524994ce3a67bd5b90861098ebad29bbf565d262d215e4ddf7490577d67","ssdeep":"","tlshash":"440199f8a7e855c24830b90965600cbeccbfc75d3142ec0a27e154c531213e0e81038a","first_seen":"2025-11-19T10:28:57.236453Z","last_seen":"2026-09-16T19:44:01.977025Z","times_seen":2258,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.482Z","timestamp":1789587793482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 484479\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Aug 2026 06:11:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=1,i\r\nset-cookie: __cf_bm=Nmx61OiYnP.kkqAlcxTadI2sc0nng2QCYDV4xqM8fJ0-1789587793.484537-1.0.1.1-J5tfsblaYmFGjbdo7zu2uLg5_Qcddu39GNL3frbIC_Q70qyrf5rk.b2hhuKFDv8MNOAHpWT9gSLEtvTmzkORGn6L_Pb4fBXq8OiHNpFpEFRLVvLdWxjyPkZZoJzzj2MN; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 4929\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3c25bdd4db65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Nmx61OiYnP.kkqAlcxTadI2sc0nng2QCYDV4xqM8fJ0-1789587793.484537-1.0.1.1-J5tfsblaYmFGjbdo7zu2uLg5_Qcddu39GNL3frbIC_Q70qyrf5rk.b2hhuKFDv8MNOAHpWT9gSLEtvTmzkORGn6L_Pb4fBXq8OiHNpFpEFRLVvLdWxjyPkZZoJzzj2MN","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Nmx61OiYnP.kkqAlcxTadI2sc0nng2QCYDV4xqM8fJ0-1789587793.484537-1.0.1.1-J5tfsblaYmFGjbdo7zu2uLg5_Qcddu39GNL3frbIC_Q70qyrf5rk.b2hhuKFDv8MNOAHpWT9gSLEtvTmzkORGn6L_Pb4fBXq8OiHNpFpEFRLVvLdWxjyPkZZoJzzj2MN; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484479,"size_decoded":485313,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"1a55a75119097ec95dc2b69f26b12502","sha1":"d1eb25921b8e416cc2f4f335a04be5ac637d2a4e","sha256":"e8a25d2da2da26aec32e20de335bada9efac15e945c09b1660be21e06c559cc3","sha512":"e27b3bfd2ff093f8538e6655c17051e7aa541e5ddf40c59f55cd857c36300b7c265a6efc8b87c9364fa563af84af4414f47a6c23dcba33b1fb11349efa83d1d9","ssdeep":"12288:Yq63KpBx+WYwHl4gdjgfCo5i5Lh3h8diowpSVnc0de:03ABoPY4ojbo5i5LhZjQDe","tlshash":"c6a4231dbf5a05b3386eceb057668229bf0932c06fb0d104bfd5e906e16177a5ea4e1c","first_seen":"2026-08-31T23:38:12.107059Z","last_seen":"2026-09-16T19:44:01.977607Z","times_seen":33,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.297Z","timestamp":1789587793297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Raleway:900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 19:43:13 GMT\r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":1247,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ee6050bfd81500c68c842417545b555","sha1":"b7f9d8cb8eadd83c45c923344086bf32c98854bc","sha256":"34adc153ea71d3b18a1223373c2cafae877c7ae786f07477c1ee4f2e2320ca18","sha512":"8bbad790c8607db611f0e1be14f05c3b27eac09c10e89862e286628b538a87085670a33ca1eb0d5da2eb19a3b318b268e50504da40aaf4faf550fb2569c21985","ssdeep":"","tlshash":"7f41b0920a1b9010eb435ec663ce7e37bd4d11512406c17a6ffe58e86caed311394b0d","first_seen":"2025-09-13T03:13:37.69615Z","last_seen":"2026-09-16T19:44:01.978179Z","times_seen":1346,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.375Z","timestamp":1789587793375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=PSXQoQYETleACVIpNnF4PnEwgAATguZYgOHcEjkL4F0-1789587793.3785393-1.0.1.1-24yu9XsYBMSAEvuYNSdS7xXjXN1doQPLT9oxNPgGIyXEOGCRbJLxALvbbF53o1U._ATkOst76OkP.fKRAFu11m2Dt4xCqqt2pI9HcVkK1UhmyPQ1CupnPZobjqVKYQKL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 4834\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9aab5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PSXQoQYETleACVIpNnF4PnEwgAATguZYgOHcEjkL4F0-1789587793.3785393-1.0.1.1-24yu9XsYBMSAEvuYNSdS7xXjXN1doQPLT9oxNPgGIyXEOGCRbJLxALvbbF53o1U._ATkOst76OkP.fKRAFu11m2Dt4xCqqt2pI9HcVkK1UhmyPQ1CupnPZobjqVKYQKL","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PSXQoQYETleACVIpNnF4PnEwgAATguZYgOHcEjkL4F0-1789587793.3785393-1.0.1.1-24yu9XsYBMSAEvuYNSdS7xXjXN1doQPLT9oxNPgGIyXEOGCRbJLxALvbbF53o1U._ATkOst76OkP.fKRAFu11m2Dt4xCqqt2pI9HcVkK1UhmyPQ1CupnPZobjqVKYQKL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":2420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-09-16T19:44:01.965401Z","times_seen":3097,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.382Z","timestamp":1789587793382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1595\r\nset-cookie: __cf_bm=lN7QIIceN1B.gO8le7aA.cnWaPiz4C9lNVY0p7vnyBc-1789587793.4011629-1.0.1.1-vN2wjXCXq5awl8yM9Ym0Ftxw.LoRcu5l_VtN.GTbHsY4HpTnpsf8SebLpRMwA9BYS8UBBoRY75aicHK9gPNoQyXPnZ74JqCNBQqsd.haa8P6nv0KE0Z3M3.K36UshM1z; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 3060\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab685a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"lN7QIIceN1B.gO8le7aA.cnWaPiz4C9lNVY0p7vnyBc-1789587793.4011629-1.0.1.1-vN2wjXCXq5awl8yM9Ym0Ftxw.LoRcu5l_VtN.GTbHsY4HpTnpsf8SebLpRMwA9BYS8UBBoRY75aicHK9gPNoQyXPnZ74JqCNBQqsd.haa8P6nv0KE0Z3M3.K36UshM1z","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=lN7QIIceN1B.gO8le7aA.cnWaPiz4C9lNVY0p7vnyBc-1789587793.4011629-1.0.1.1-vN2wjXCXq5awl8yM9Ym0Ftxw.LoRcu5l_VtN.GTbHsY4HpTnpsf8SebLpRMwA9BYS8UBBoRY75aicHK9gPNoQyXPnZ74JqCNBQqsd.haa8P6nv0KE0Z3M3.K36UshM1z; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":794,"size_decoded":1641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-09-16T19:44:01.978794Z","times_seen":3741,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.405Z","timestamp":1789587793405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=9hOgF87Wh158S1weeZy3wlnxkqdApq92lYKp20KK8Nc-1789587793.4104106-1.0.1.1-2Z4M2AmTZoaO2OYLk2ch_ACpXsVtos4N7mUOJJXUAum0YViXF8Mro7RSpEtI2a7TcGKYiz7ckiqgpohZfxP3GtuaOifDX5ureYXSBTG_U61EWVikSWGVefIJBOnngx7f; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=2565\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1858\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdccbaf5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"9hOgF87Wh158S1weeZy3wlnxkqdApq92lYKp20KK8Nc-1789587793.4104106-1.0.1.1-2Z4M2AmTZoaO2OYLk2ch_ACpXsVtos4N7mUOJJXUAum0YViXF8Mro7RSpEtI2a7TcGKYiz7ckiqgpohZfxP3GtuaOifDX5ureYXSBTG_U61EWVikSWGVefIJBOnngx7f","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9hOgF87Wh158S1weeZy3wlnxkqdApq92lYKp20KK8Nc-1789587793.4104106-1.0.1.1-2Z4M2AmTZoaO2OYLk2ch_ACpXsVtos4N7mUOJJXUAum0YViXF8Mro7RSpEtI2a7TcGKYiz7ckiqgpohZfxP3GtuaOifDX5ureYXSBTG_U61EWVikSWGVefIJBOnngx7f; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1148,"size_decoded":1996,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-09-16T19:44:01.979401Z","times_seen":3804,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.459Z","timestamp":1789587793459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3751\r\npriority: u=4,i\r\nset-cookie: __cf_bm=6lpDy0H0T0nWiXHuacIky1QjOR95QpdEHbfQ_Zz2Fkw-1789587793.4614124-1.0.1.1-pM.OvshpVeecq5Qon5ZBIwt0hT39qmhSjB16CvP4cMqmudBQeboNEfl.6CGGtQxre3QbTWJY9DQVc.ByXtDKSf01w3oO.AsnBc5u18lyQaLMT1XZlE4JUoHW8IL_n016; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 1532\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd1d225a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"6lpDy0H0T0nWiXHuacIky1QjOR95QpdEHbfQ_Zz2Fkw-1789587793.4614124-1.0.1.1-pM.OvshpVeecq5Qon5ZBIwt0hT39qmhSjB16CvP4cMqmudBQeboNEfl.6CGGtQxre3QbTWJY9DQVc.ByXtDKSf01w3oO.AsnBc5u18lyQaLMT1XZlE4JUoHW8IL_n016","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6lpDy0H0T0nWiXHuacIky1QjOR95QpdEHbfQ_Zz2Fkw-1789587793.4614124-1.0.1.1-pM.OvshpVeecq5Qon5ZBIwt0hT39qmhSjB16CvP4cMqmudBQeboNEfl.6CGGtQxre3QbTWJY9DQVc.ByXtDKSf01w3oO.AsnBc5u18lyQaLMT1XZlE4JUoHW8IL_n016; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":566,"size_decoded":1413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cabc944e32056660a317f51dcf4c8c70","sha1":"c2bcbfc855467f946dc5fa5b3b562e8895c7b4c6","sha256":"7969b5e6f41c00bb28d7882e001bc3859f49337dcfd9e3b2ab5209e63ebd92db","sha512":"cf590ece4a8161e48e395941c5046acdbea89c6fb8711599297aff86cce1d2617759b5b66e93c10734b4e33fdada0f24e3b126c23c3cec482170c66960d4b09b","ssdeep":"","tlshash":"f2f0418383f44326a600b0d457554504084d038610756b7a7f963c454635da8ee4430c","first_seen":"2025-11-19T10:28:57.237919Z","last_seen":"2026-09-16T19:44:01.980028Z","times_seen":2260,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/rest/n/adintl/ad/checkPixel","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.794Z","timestamp":1789587795794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"OPTIONS /rest/n/adintl/ad/checkPixel HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rekemonedasi-facebook.org/\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 0\r\ngetparamsfromurl: false\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/css/old/new2-style.css?1789386874","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.284Z","timestamp":1789587793284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /css/old/new2-style.css?1789386874 HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 10:09:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7QvSNaTDpOn402GMS7k%2BwMM2L1iePyJG6fRTHfazUESMSPWOKn4IAXCZQ%2B%2BWKOmkGFDWJItFzfwJwBn0X%2FSF%2BbGJJmltupAnF51YpHM8AsKzjcamJR%2FS7dN0KDGpjQbkjPC%2FA8N8u3i5K74\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 2247\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc39c3d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19593,"size_decoded":5581,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01af7e767be5b793b9def25cc5708367","sha1":"f5e928588d0ac5fc97ca65be366db7e5a6a0c375","sha256":"9ecca6a6a96bf6f13b2f733e8ee84c4f6868ecd00a76eb261133bfba42128fbe","sha512":"34ba7ffe63b61df1052c6fdfdc759abbb81b4cdd353d890f0891f449ab718be1b23c3fddf748604d0a8e4bf2f188d451888b759dcab1857e61eb2618ca852611","ssdeep":"192:WoVF+jJSouRa9q664vDL+TRl4y5UCUmQkGyMA+AHFtzTFB5SbbewonOlnUAdhwj+:Pf+gxwq6691fMcDKTVf9rA3v/JZKow","tlshash":"c392736dd512209a2633ebb4af750b19e7698023cb06626d3fdc62844ff22799161fdc","first_seen":"2025-11-19T10:28:57.246484Z","last_seen":"2026-09-16T19:44:01.980595Z","times_seen":2255,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/92fb3cf79ea2ba919b94b04668e13491.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.502Z","timestamp":1789587793502,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/92fb3cf79ea2ba919b94b04668e13491.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.mythad.com/rest/n/adintl/ad/getPixelConfig?pixelId=293299371379305\u0026pageId=pageId-1789587795543-2804991526458","fqdn":"ads.mythad.com","domain":"mythad.com","tld":"com"},"ip":{"addr":"23.214.96.69","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:15.546Z","timestamp":1789587795546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mythad.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 13 Nov 2025 03:07:35 GMT","end":"Tue, 15 Dec 2026 03:07:34 GMT"},"fingerprint":{"sha1":"EA:2B:23:0B:9D:95:4C:93:C0:30:99:B2:B0:7A:94:B1:72:49:59:3A","sha256":"64:55:97:C2:FE:6C:6A:20:A6:23:8C:BB:7B:9A:5D:9E:60:D6:17:97:67:54:87:23:2C:C1:C5:CA:43:53:00:33"}}},"request":{"raw":"GET /rest/n/adintl/ad/getPixelConfig?pixelId=293299371379305\u0026pageId=pageId-1789587795543-2804991526458 HTTP/1.1\r\nHost: ads.mythad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=UTF-8\r\ngetparamsfromurl: false\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 683\r\nvary: Accept-Encoding\r\nset-cookie: kwai_ckid=1789587795647_82538530859910318; Path=/; Domain=mythad.com; Max-Age=34560000; Expires=Thu, 21 Oct 2027 19:43:15 GMT; Secure; SameSite=None\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":[{"name":"kwai_ckid","value":"1789587795647_82538530859910318","quoted":false,"path":"/","domain":"mythad.com","expires":"2027-10-21T19:43:15Z","raw_expires":"Thu, 21 Oct 2027 19:43:15 GMT","max_age":34560000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"kwai_ckid=1789587795647_82538530859910318; Path=/; Domain=mythad.com; Max-Age=34560000; Expires=Thu, 21 Oct 2027 19:43:15 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1697,"size_decoded":1219,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f7e67481a18cafc4d04f6c394343fcac","sha1":"db0213eb68d3dbd5fa099567e99defee0c93e89d","sha256":"d7809da518f6273352fdfaa012b1c66f0412b8c7df9ec41b1306e5b924c52032","sha512":"ae07e35bc41c572931f1b07093e7e713a612c4291937d4290f7b880010f60f3dec4ae00bb6ffba6e574ef11fe645c23cccac2791693ec4af06af4d07474c257e","ssdeep":"","tlshash":"e73156204c86c38487495ddd22f31c33545e90cb6c540416dbff9e4b08c13b18af26ad","first_seen":"2026-09-16T19:44:01.981225Z","last_seen":"2026-09-16T19:44:01.981225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.422Z","timestamp":1789587793422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=lGn5UPlr4jXaRNQuUgvdME8ULnT55BhlAPm_ZCl0ZAA-1789587793.4264708-1.0.1.1-2u.ivj5eCSYczABmiPPCGFRAF0AwiUV45G4pXHb3WXlXh41lLpdl2xSqZ_EmTOhTMot10jfgcHZtx.9trvR2s7EJE4SKXVSrIX3lxVjFe.g6Yrv0Et7bi_PB6V50xqLp; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=1967\r\nvary: accept, accept-encoding\r\nage: 1516\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec255a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"lGn5UPlr4jXaRNQuUgvdME8ULnT55BhlAPm_ZCl0ZAA-1789587793.4264708-1.0.1.1-2u.ivj5eCSYczABmiPPCGFRAF0AwiUV45G4pXHb3WXlXh41lLpdl2xSqZ_EmTOhTMot10jfgcHZtx.9trvR2s7EJE4SKXVSrIX3lxVjFe.g6Yrv0Et7bi_PB6V50xqLp","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=lGn5UPlr4jXaRNQuUgvdME8ULnT55BhlAPm_ZCl0ZAA-1789587793.4264708-1.0.1.1-2u.ivj5eCSYczABmiPPCGFRAF0AwiUV45G4pXHb3WXlXh41lLpdl2xSqZ_EmTOhTMot10jfgcHZtx.9trvR2s7EJE4SKXVSrIX3lxVjFe.g6Yrv0Et7bi_PB6V50xqLp; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-09-16T19:44:01.921198Z","times_seen":3242,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sdl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.361Z","timestamp":1789587793361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-sdl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 586\r\nserver: cloudflare\r\nlast-modified: Mon, 04 May 2026 06:39:32 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1253\r\nset-cookie: __cf_bm=x9ToZGWcsaU5cfVu1.c76i2xSRRz22ofrMAHN4AYLs4-1789587793.3739712-1.0.1.1-HmhG7gi_EOSq0WBy9GTa6yfaoFlwD8VXuThuz61ARhn9bn4zbLRp52TXh1c6LYBp7jTYhDAI_YSVY78kk1dOQZUIhNOdbkwuejt7jvcEyYjx53c.ejP22KpFVcLEDZ7N; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2065\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a7f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"x9ToZGWcsaU5cfVu1.c76i2xSRRz22ofrMAHN4AYLs4-1789587793.3739712-1.0.1.1-HmhG7gi_EOSq0WBy9GTa6yfaoFlwD8VXuThuz61ARhn9bn4zbLRp52TXh1c6LYBp7jTYhDAI_YSVY78kk1dOQZUIhNOdbkwuejt7jvcEyYjx53c.ejP22KpFVcLEDZ7N","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=x9ToZGWcsaU5cfVu1.c76i2xSRRz22ofrMAHN4AYLs4-1789587793.3739712-1.0.1.1-HmhG7gi_EOSq0WBy9GTa6yfaoFlwD8VXuThuz61ARhn9bn4zbLRp52TXh1c6LYBp7jTYhDAI_YSVY78kk1dOQZUIhNOdbkwuejt7jvcEyYjx53c.ejP22KpFVcLEDZ7N; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":1433,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2754a8148a4e553fdbb63492bec645f0","sha1":"9db57ed1d6256916a61d856b8c7c21484d439b27","sha256":"eb50be251aef3eb35e8b675fd69b89a52c97b9cdfa364f67425546a5b4e5d558","sha512":"0c98537f16071734816139b881716b1e50b56ee1a6a8b7d4317a80fe04e49e99227ec1f854cd835f6a8e3e6883b6453470f257ffc0fde8152c01e1d962913f43","ssdeep":"","tlshash":"d3f04181e1a04201097ab2bdb5a9af51208314a1c897bd30bf20d96213ea41c96791d8","first_seen":"2026-05-04T07:28:25.333902Z","last_seen":"2026-09-16T19:44:01.982143Z","times_seen":1132,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.427Z","timestamp":1789587793427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4772\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=6850\r\nset-cookie: __cf_bm=PO6afdP5lvzkXr6mNLYBM.RahDpO5uOXsy7aGLvErhY-1789587793.4330816-1.0.1.1-dEu_Zvf_O3aNk869I8PpjvggW37T7CmrH2dZtw0dusDCEIXBJ_DJcYoKu5KvQdE3vHKltGQYrvavdiGBoQXyYbBS5G6k0sqEMQVK_mEX.t4oKd8vwDzJj3Wi8qOfhfnj; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 2437\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcfc4b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PO6afdP5lvzkXr6mNLYBM.RahDpO5uOXsy7aGLvErhY-1789587793.4330816-1.0.1.1-dEu_Zvf_O3aNk869I8PpjvggW37T7CmrH2dZtw0dusDCEIXBJ_DJcYoKu5KvQdE3vHKltGQYrvavdiGBoQXyYbBS5G6k0sqEMQVK_mEX.t4oKd8vwDzJj3Wi8qOfhfnj","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PO6afdP5lvzkXr6mNLYBM.RahDpO5uOXsy7aGLvErhY-1789587793.4330816-1.0.1.1-dEu_Zvf_O3aNk869I8PpjvggW37T7CmrH2dZtw0dusDCEIXBJ_DJcYoKu5KvQdE3vHKltGQYrvavdiGBoQXyYbBS5G6k0sqEMQVK_mEX.t4oKd8vwDzJj3Wi8qOfhfnj; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4772,"size_decoded":5620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4a5ea27d64b854e9f30ea17befebdf8","sha1":"f8539c582b47cd1cb523804f6043186e93895bff","sha256":"828804c769cc2f44cbf47455da9c8f054ea60d1f5dc8d4341c0be3b557afba3d","sha512":"9b49c58e36c25dc78cca3e3518d3239054a19609163faa699a31ee82056e51c4364bdd1411254e41fde7967d24282d94953ab3f76eac39f89899fad692cdd676","ssdeep":"96:MMETjGJeqfeTK7LHpp2fTU7rMCbdqIzXP+UKcBgpU4Qy:MznGW2zXcQ7rTbdlR3k","tlshash":"b4a18ea11ae0eec20c0a6a16731692d74e75a4756e2ae3387303531315ee4d4b3b5cd2","first_seen":"2026-07-25T07:44:54.512565Z","last_seen":"2026-09-16T19:44:01.98271Z","times_seen":163,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.362Z","timestamp":1789587793362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=.n9hJS4gnpf3w8lVDukvT7TUQWAfarpP09zw8StFacI-1789587793.3747044-1.0.1.1-5XZ5kzsO1PgjY8C.o_NikOX0ELUUKl5Srw7XFDCAIp1cSUWyDbCQgMvMzhjkDQrqrJ2xkOP5cucRv58prVIMe3NJYTCtX1XvztJqVYsMKeUtnot14r3C1Uvtfhyq2SON; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=5768\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2301\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a825a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":".n9hJS4gnpf3w8lVDukvT7TUQWAfarpP09zw8StFacI-1789587793.3747044-1.0.1.1-5XZ5kzsO1PgjY8C.o_NikOX0ELUUKl5Srw7XFDCAIp1cSUWyDbCQgMvMzhjkDQrqrJ2xkOP5cucRv58prVIMe3NJYTCtX1XvztJqVYsMKeUtnot14r3C1Uvtfhyq2SON","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=.n9hJS4gnpf3w8lVDukvT7TUQWAfarpP09zw8StFacI-1789587793.3747044-1.0.1.1-5XZ5kzsO1PgjY8C.o_NikOX0ELUUKl5Srw7XFDCAIp1cSUWyDbCQgMvMzhjkDQrqrJ2xkOP5cucRv58prVIMe3NJYTCtX1XvztJqVYsMKeUtnot14r3C1Uvtfhyq2SON; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1888,"size_decoded":2736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.983267Z","times_seen":3835,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.369Z","timestamp":1789587793369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1160\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Jun 2026 06:03:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2174\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=JZrWHL7HtNHIEAvbj_NkuH14ckz_aaBoRj_xjeoCs8E-1789587793.377106-1.0.1.1-bL0je5RZ1LUY4SAOaQsHDqW3BTISTljn5S5mHIDniW9puMmP3WVUQ3fhAmTHWlmjbtQnhnsn_fUa1EMhzTFEkGD7z.51h9OL91CT2cHKidddjE7pJ.V2hIPqPEDfUlBb; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 5098\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9a9b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"JZrWHL7HtNHIEAvbj_NkuH14ckz_aaBoRj_xjeoCs8E-1789587793.377106-1.0.1.1-bL0je5RZ1LUY4SAOaQsHDqW3BTISTljn5S5mHIDniW9puMmP3WVUQ3fhAmTHWlmjbtQnhnsn_fUa1EMhzTFEkGD7z.51h9OL91CT2cHKidddjE7pJ.V2hIPqPEDfUlBb","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=JZrWHL7HtNHIEAvbj_NkuH14ckz_aaBoRj_xjeoCs8E-1789587793.377106-1.0.1.1-bL0je5RZ1LUY4SAOaQsHDqW3BTISTljn5S5mHIDniW9puMmP3WVUQ3fhAmTHWlmjbtQnhnsn_fUa1EMhzTFEkGD7z.51h9OL91CT2cHKidddjE7pJ.V2hIPqPEDfUlBb; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1160,"size_decoded":2007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3516917a4507c8f1271a6d64887581","sha1":"445a3dc425c97de5091ee32f6b4491a7dbd685bd","sha256":"2653fdba0df4df8bafe3dfed95f0e630a1509e4697e4dcfd8b84886e4b065451","sha512":"e434a6452de7ae2b02c9d734bcdf10b90b274aa7d956fb264756f2c0a97ae94ac63a46f99244c3017ffe37fb1ce454bee19f0cdc8df4309f219a0e7ea9269f07","ssdeep":"","tlshash":"e221b9d86670a1e5444f1fbac1e68d1e1114211b61738f4a36cf4c946ec1fc3bb05d9e","first_seen":"2026-06-10T22:17:35.691708Z","last_seen":"2026-09-16T19:44:01.983861Z","times_seen":650,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.391Z","timestamp":1789587793391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4930\r\nset-cookie: __cf_bm=5mHi5kMSwiEkv6Yv_tMF1aC6CQ6tvnfbUvvOhKntrlA-1789587793.4024043-1.0.1.1-TmboPSfdTnqYQERjGzNKl..7BcpMy.sgXjZudAN3jCaeGhJpLfNJ3XPUJ9oyt2Boc.1uD.erVp4koT95zqGs_deUFEdpq1YrqloANcvmm48F3dvv5hhxW2hSYQo2d2wG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab6c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"5mHi5kMSwiEkv6Yv_tMF1aC6CQ6tvnfbUvvOhKntrlA-1789587793.4024043-1.0.1.1-TmboPSfdTnqYQERjGzNKl..7BcpMy.sgXjZudAN3jCaeGhJpLfNJ3XPUJ9oyt2Boc.1uD.erVp4koT95zqGs_deUFEdpq1YrqloANcvmm48F3dvv5hhxW2hSYQo2d2wG","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=5mHi5kMSwiEkv6Yv_tMF1aC6CQ6tvnfbUvvOhKntrlA-1789587793.4024043-1.0.1.1-TmboPSfdTnqYQERjGzNKl..7BcpMy.sgXjZudAN3jCaeGhJpLfNJ3XPUJ9oyt2Boc.1uD.erVp4koT95zqGs_deUFEdpq1YrqloANcvmm48F3dvv5hhxW2hSYQo2d2wG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":2061,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-09-16T19:44:01.984711Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.411Z","timestamp":1789587793411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=FWDXxO2szkWK6zgjTWKVMOTQxQo0gRGQLC81qTQ5AUo-1789587793.4235227-1.0.1.1-YINyM6.6z1Q69DoesRCr2wOkS0ZJ4K17JE9oIDHES5uyhWhlVKh8YqIWfFgmYjspufj9ijhXSXvhPDajlkljmzzimLTm_8Ba5NkRS2DA7svZmF4vm9tG7vLJcgcOdCdo; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2970\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2306\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcec045a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"FWDXxO2szkWK6zgjTWKVMOTQxQo0gRGQLC81qTQ5AUo-1789587793.4235227-1.0.1.1-YINyM6.6z1Q69DoesRCr2wOkS0ZJ4K17JE9oIDHES5uyhWhlVKh8YqIWfFgmYjspufj9ijhXSXvhPDajlkljmzzimLTm_8Ba5NkRS2DA7svZmF4vm9tG7vLJcgcOdCdo","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=FWDXxO2szkWK6zgjTWKVMOTQxQo0gRGQLC81qTQ5AUo-1789587793.4235227-1.0.1.1-YINyM6.6z1Q69DoesRCr2wOkS0ZJ4K17JE9oIDHES5uyhWhlVKh8YqIWfFgmYjspufj9ijhXSXvhPDajlkljmzzimLTm_8Ba5NkRS2DA7svZmF4vm9tG7vLJcgcOdCdo; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":2214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-09-16T19:44:01.985328Z","times_seen":3809,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/m/capreg.php","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.436Z","timestamp":1789587793436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Fjs1RL1LKlw4hNJm2WVZAMfb8cDy8AazykHXeevicqqTPBXaOSGwEPoF2MaatHfeCTPdxBlQ8tn8ouqYuP5oQdxTl668WupbDyauSnmZT9UtCDCIZxJPEw0BUxFSo6XKfwEmBL%2BR93eZXdE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25bdd19fcd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2511,"size_decoded":3247,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"8bc09acd3f82d26fb3ba2b9a8492d86c","sha1":"79a52c9042f4f5549057ceb2bb3563efb0aecb40","sha256":"49a7cb5bd827ff966245359e0f1170fc39cdce03bb98bdc7f879e7d50f7c55da","sha512":"9f5142d986edf01f5474f87a7180b36ed48796a1b5c6f8cf7a0a38e992ab5f0e290cf52b868957cdf6e6d8192ba9c3205e32157a98af85543150d5199ed0e471","ssdeep":"","tlshash":"04513a57c4b8d724d4679d320a73aec470754a17f68e120822a9f0db000d44bff6933b","first_seen":"2026-09-16T19:44:01.985889Z","last_seen":"2026-09-16T19:44:01.985889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:43:12.483Z","timestamp":1789587792483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:12 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=15342a54443925c207b297b938fcadc9; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBbnfTq%2FZ0DsUiH4oQiLcqXmPHo1IWgr1MGlqBqxe9UYQoWUR%2BtnF5MDsBHHfAs%2Frw6YZtCuKgYmV2uG9d4PP0UOgUtkvu3r%2FfYYlm5mj3YlWddUBZS6NEsIAVizdQEol4u3UKqrZnQlx6Ng\"}]}\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25bd7b897d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"15342a54443925c207b297b938fcadc9","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=15342a54443925c207b297b938fcadc9; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":325272,"size_decoded":38651,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2536), with CRLF, LF line terminators","md5":"4f5f30ba01452939d6b79dd69616686a","sha1":"a86de6f9cfef47c712976287f0a9a7caae4f1a65","sha256":"e769e93096fba957271038453a096936fec942d4930812d6542d6476a7bf632a","sha512":"879d1869c4294f055807fcbd71cf67c842c6eaf22e49c0d45f5ea7668f8303ddfb47850e67044d387cd6162ca053cfb1d61a5924a3021058702d43eab7d6cbb1","ssdeep":"1536:D+0A5OhHLZ/XZhwwxlKS0UpfTsa7JTP8hhA1RJ2fJa0aMF9lsuCf5nM7qUpOs46h:vA8BRXmq/0ATimf5M7qUpOs46KrHK+Kx","tlshash":"0964303140e1146250b3a1e45fb25b1aff95d207ca0b8a0476fd5bc64ff7e86cd636a8","first_seen":"2026-09-16T19:44:01.98716Z","last_seen":"2026-09-16T19:44:01.98716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":65,"connect":36,"send":0,"wait":292,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.353Z","timestamp":1789587793353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2903\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=eJoUS6NlsqGbe8ndYyDn3_lBckp7ID434oklMmjX6rc-1789587793.3575838-1.0.1.1-YY0D67G0ypbiT_5gN5ZSR_wTCl2EK0L0OVCg_ngaFB6trIwuICNCA3rT.OqKTaaCj4W12m0cOmmH3JvS9SlMTBeboOpadlC06r7F0MhDTvg6XsVX5z1.cEyRSiEM5KSD; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 5415\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc4a1b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"eJoUS6NlsqGbe8ndYyDn3_lBckp7ID434oklMmjX6rc-1789587793.3575838-1.0.1.1-YY0D67G0ypbiT_5gN5ZSR_wTCl2EK0L0OVCg_ngaFB6trIwuICNCA3rT.OqKTaaCj4W12m0cOmmH3JvS9SlMTBeboOpadlC06r7F0MhDTvg6XsVX5z1.cEyRSiEM5KSD","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=eJoUS6NlsqGbe8ndYyDn3_lBckp7ID434oklMmjX6rc-1789587793.3575838-1.0.1.1-YY0D67G0ypbiT_5gN5ZSR_wTCl2EK0L0OVCg_ngaFB6trIwuICNCA3rT.OqKTaaCj4W12m0cOmmH3JvS9SlMTBeboOpadlC06r7F0MhDTvg6XsVX5z1.cEyRSiEM5KSD; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":2412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-09-16T19:44:01.954468Z","times_seen":3770,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/m/capimg.php?1350","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.434Z","timestamp":1789587793434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /m/capimg.php?1350 HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Xss7kHmpQowzss4kvIAN%2Fgyew9LkE5nhjDUkUCc6fYwEwJAchIaiLEWbURnNHbgcQ5t46RtRPA%2F419751COj2ZbaH1%2B5NXSHPbH8PTO1EK8HYBDLcZhuHZ4XGR52NVPc%2FPCw5ApFMlX2nRo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25bdd19fbd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2702,"size_decoded":3442,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"9dd789fa61c2be3a41c17ec3ff665bec","sha1":"28fa125e7a8ddfaa9935ee2c449e0ff6fbc57175","sha256":"23963d202b854c492f3becda453dba3468bba1dc66caed50d0ad07bfa680042c","sha512":"bb190b7f82c1bbc9ef13bebaacef300e356f99fc18c383d6f2214adfa38898d0b47f38e6deef4e43abbd64b3a00caba715f1e9313d8ac96bb3caa7b42743a8e9","ssdeep":"","tlshash":"22514b92dcd6100de9486f74f4b47d0c07a647bec903a801bac7a05a9583ad11138edd","first_seen":"2026-09-16T19:44:01.988391Z","last_seen":"2026-09-16T19:44:01.988391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/images/chaport-launcher-chat-icon-new.png","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:19.823Z","timestamp":1789587799823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /images/chaport-launcher-chat-icon-new.png HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://assets.chaport.com/assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:43:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 468\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Aug 2026 10:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knCM4qGd8aaP8rDTiq1ehDUs7G%2FVE3TsvtwWvIdfP9iWRMWWZgGLesqi1h%2BAPKpWotSeyKanKnSA1X%2BRwYIch4hluvboBHStosS3CIB4Gm4vvb6RNuVjCWM8FwmpMGoZeMJc5A%3D%3D\"}]}\r\netag: \"6a91692b-2fa\"\r\nexpires: Wed, 30 Sep 2026 01:09:56 GMT\r\ncache-control: max-age=2592000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=762\r\ncf-bgj: imgq:100,h2pri\r\nage: 1449202\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3c25c04e8f21ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1483,"mime_type":"image/png","magic":"PNG image data, 32 x 36, 8-bit gray+alpha, non-interlaced","md5":"c893cdbf01d4901c895649e653607876","sha1":"53f42045c25f8732c60fac3687e1d6c3c8a75331","sha256":"aa4cae387402003c90d9dce3355e6fcb43c1886a5a3d8f1006c62458a34954f1","sha512":"8b603e4019d23225c936f21e81f8a3519170a714f8d3107452de4561d7b61b3ba180c8c903ba56864e5932f7c21da2d2bce3e60e0d75d132a25acf809344c997","ssdeep":"","tlshash":"81f00ed70348121ed3c211212b1289b8845162b485d02f15f80e8604976926432cb7b3","first_seen":"2024-03-02T20:53:41Z","last_seen":"2026-09-16T19:44:01.989501Z","times_seen":1894,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.372Z","timestamp":1789587793372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=_jzvuBeVvCbhshYyiPZFs.YZLutsa4MjcMjOSKPMTlg-1789587793.3781414-1.0.1.1-hiKKkwfM_2xNLXiEalTwixALwhzbr8ICM1OT5cSk5v8qPFppY8yeLKV6aQvrCa0o_b4WK1QwT79L_EYN3qrmejOShm4RoaKikHy.C2y1aytvSxMnIJnKkapPAX.gA8d4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=2835\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3211\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc9aa85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"_jzvuBeVvCbhshYyiPZFs.YZLutsa4MjcMjOSKPMTlg-1789587793.3781414-1.0.1.1-hiKKkwfM_2xNLXiEalTwixALwhzbr8ICM1OT5cSk5v8qPFppY8yeLKV6aQvrCa0o_b4WK1QwT79L_EYN3qrmejOShm4RoaKikHy.C2y1aytvSxMnIJnKkapPAX.gA8d4","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=_jzvuBeVvCbhshYyiPZFs.YZLutsa4MjcMjOSKPMTlg-1789587793.3781414-1.0.1.1-hiKKkwfM_2xNLXiEalTwixALwhzbr8ICM1OT5cSk5v8qPFppY8yeLKV6aQvrCa0o_b4WK1QwT79L_EYN3qrmejOShm4RoaKikHy.C2y1aytvSxMnIJnKkapPAX.gA8d4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1530,"size_decoded":2378,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-09-16T19:44:01.990392Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/new/capimg.php","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.233Z","timestamp":1789587794233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /new/capimg.php HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:14 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyqgl%2BcgxkVm%2B6PjVmekDuOMTTolfUT4SnGD97eFa9%2F4A%2FlWHmotVqPJ3uOH9VuXUx8YQEWT2%2Fl0DoRit6UHI01nhj9ZzuQy5O%2F3e9zTgVIp7UVFj4caIella%2BE6%2FI7jtV6lstwammArYUNo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c25be20b2fd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905,"size_decoded":1653,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"95020ab5ff59e273bc5b5f68517ada8b","sha1":"ad17eaf97b4586f311a9bcb9042397e89bb3a9d0","sha256":"81c825ffd0977493c3bc75bb8b46da0ef9c24d949e93339c1664f202606b65f6","sha512":"54970f6ade8b99e5b004472bc205453e38ecae3cf803cd4ee1a2672209e5a54d92d98c434904d1334ba68b32e87fa6bcd74d998f7186a02b71ea0d57fde94d04","ssdeep":"","tlshash":"dd11841702446ca5848d1262f269f390dc7a484e5e401076bc69b44d3f34fb4a81ae6e","first_seen":"2026-09-16T19:44:01.991188Z","last_seen":"2026-09-16T19:44:01.991188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/js/old/new2-webduo35.js?v=1789386874","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.339Z","timestamp":1789587793339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /js/old/new2-webduo35.js?v=1789386874 HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jul 2026 05:19:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3hh8jODuEEcpwGJaJtOaeQqdk7moxG3jBmjARqaDgIsRX0RgHdpUCxI3cDybQYlOK2wn9QkuR3VfztdaNttkcX%2BbGI69dVbH3HvEbPatph3GRsrT5UCdco7flHLaZY9kgPWYAa7lakn4o1w\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 2245\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdc79d1d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62643,"size_decoded":10369,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6141b3a762682ccf2c7542caab076526","sha1":"51cdd83fe752f708f63bc8e2931d9d4deae6f404","sha256":"f99373eca55238be9600ffe98ab94c537265f5efbe7ea13ffe8398c46b9ec395","sha512":"a27fefdc4c6f2918659eb18073bdfa4f5398b5f0707d46715e80a3866f08738a33f21ddde1586228f9229d01f4e9ec0a397821c10679fa22d495cfbbd8c1d9d8","ssdeep":"1536:BWBiYT7WqiYD/R4ihiYT/PniYT/tgihiYTX8Q8Y8o8sAMgmMuYUQ6cX:0oyR3ntv8Q8Y8o8dMXMJULcX","tlshash":"66539609fed90b831a7735a94a3f9040662d482be20fcf01f92d55c47f46665b2b2b9f","first_seen":"2026-07-30T00:37:18.670223Z","last_seen":"2026-09-16T19:44:01.992343Z","times_seen":129,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/abbb31d42c55612737713aac6567a226.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.488Z","timestamp":1789587793488,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/abbb31d42c55612737713aac6567a226.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/78360445c12fa3fdc8b489486fff4eb6.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.490Z","timestamp":1789587793490,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /football/team/78360445c12fa3fdc8b489486fff4eb6.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/operators","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:21.125Z","timestamp":1789587801125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"OPTIONS /api/public/v1/operators HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cp-app-id\r\nReferer: https://rekemonedasi-facebook.org/\r\nOrigin: https://rekemonedasi-facebook.org\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 16 Sep 2026 19:43:21 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://rekemonedasi-facebook.org\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJw07cabbjt7uUb6L8BV%2BktQaHugtNq1TT%2B90sw7qN9cCqojsLKCQ1IeGCnLN58XZJyB4DNKc46m7KLUBzl1KedpSzk4qBNqlWklMbNhgFqeB287tMYgnpdJRugdiWUbEA%3D%3D\"}]}\r\ncf-ray: a3c25c0d0b421ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":656,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T20:51:46.370807Z","times_seen":18502077,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.403Z","timestamp":1789587793403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2245\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=PhvB7UGcZFkkDF1xJK.nmJxp02mrK_0yYbAkivSXcEo-1789587793.407141-1.0.1.1-357hT.Ygu6x8if6o2jAvpQ7IBRKHinYmJv9KlfzK_uXDGo.3x7A1_HcbyThvh2k4WSEkkZEjdikUNB_GpT8VAI_E7bEOztjbKtdiWLgmcZkcXCaCRSghNQuoV8cVp9ME; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\nvary: accept, accept-encoding\r\nage: 5892\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdcab915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PhvB7UGcZFkkDF1xJK.nmJxp02mrK_0yYbAkivSXcEo-1789587793.407141-1.0.1.1-357hT.Ygu6x8if6o2jAvpQ7IBRKHinYmJv9KlfzK_uXDGo.3x7A1_HcbyThvh2k4WSEkkZEjdikUNB_GpT8VAI_E7bEOztjbKtdiWLgmcZkcXCaCRSghNQuoV8cVp9ME","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PhvB7UGcZFkkDF1xJK.nmJxp02mrK_0yYbAkivSXcEo-1789587793.407141-1.0.1.1-357hT.Ygu6x8if6o2jAvpQ7IBRKHinYmJv9KlfzK_uXDGo.3x7A1_HcbyThvh2k4WSEkkZEjdikUNB_GpT8VAI_E7bEOztjbKtdiWLgmcZkcXCaCRSghNQuoV8cVp9ME; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":2105,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-09-16T19:44:01.993417Z","times_seen":3760,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rekemonedasi-facebook.org/images/logoweb.png","fqdn":"rekemonedasi-facebook.org","domain":"rekemonedasi-facebook.org","tld":"org"},"ip":{"addr":"172.67.157.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.433Z","timestamp":1789587793433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rekemonedasi-facebook.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 18:27:40 GMT","end":"Sat, 07 Nov 2026 19:27:39 GMT"},"fingerprint":{"sha1":"1B:AB:3A:35:63:2C:5E:3A:F3:22:E0:79:2C:2E:81:58:36:29:84:E6","sha256":"AC:94:DC:5C:37:FD:73:E4:19:6E:48:79:BF:50:D5:5A:26:D9:4D:52:D2:16:F7:58:C7:47:85:CC:1C:E8:B5:08"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: rekemonedasi-facebook.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nCookie: PHPSESSID=15342a54443925c207b297b938fcadc9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Oct 2024 06:49:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5ntWpsKKkdQgYbJV1ofa7G3Cpswf1MLdSoPYHpwv5uJp98KPJMRTbj5q2pWGm27MmsTeSXCP%2BN89wNpKLDU2LWHPMV%2F%2F7RElaM1YslPctlyq7aXKohgYqX8ZNKVpvy2ziOWJNHN3bYQYwUK\"}]}\r\ncontent-type: image/png\r\nage: 2242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25bdd19f9d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38297,"size_decoded":38983,"mime_type":"image/png","magic":"PNG image data, 400 x 105, 8-bit/color RGBA, non-interlaced","md5":"3c83e2a7621f252622cee41edee7c868","sha1":"6ee5ee7f7d4797baca331b16eab6599de2f7b2d9","sha256":"5ed5c61afc64788217ce4124af6c4b89c974063472b1df89d8d0b35c4d516cbe","sha512":"6874a2241b469c311508d7283a786bdb23e3658f8fc51db941d7b4ce249b0b55dd303032152bc4e03beaa84342dac4b1e00b9a5f028b5c20f2b1a8123d5e85ac","ssdeep":"768:sx2X6CWmtOLs/ebnc9gqZaFyJwlaj0htdRpbu66a+rlIWdC6dec:Kq95efncCC/wXb4a+r66hec","tlshash":"7103f1cb87118ccda06bbb0a12c79e1ae7e3cd91f61df2f4488d545858122f9d8891fe","first_seen":"2025-04-03T17:58:59.113125Z","last_seen":"2026-09-16T19:44:01.994029Z","times_seen":11,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"rekemonedasi-facebook.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"rekemonedasi-facebook.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hambagugel.site/assets/google.png","fqdn":"hambagugel.site","domain":"hambagugel.site","tld":"site"},"ip":{"addr":"104.21.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:14.441Z","timestamp":1789587794441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hambagugel.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 06:19:00 GMT","end":"Tue, 01 Dec 2026 07:17:35 GMT"},"fingerprint":{"sha1":"C4:64:4D:0A:69:BC:62:F7:E0:6F:FB:0E:BD:5F:63:0B:14:2D:A5:F5","sha256":"99:41:22:B4:82:A5:13:46:51:CF:ED:87:59:C4:A1:7E:B9:D2:C1:7F:23:DD:28:E5:1F:5E:E8:ED:04:03:E3:D1"}}},"request":{"raw":"GET /assets/google.png HTTP/1.1\r\nHost: hambagugel.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 23 Sep 2026 19:43:14 GMT\r\nlast-modified: Mon, 16 Jun 2025 05:55:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzXZuaBZURYz5ojfvnleUve0DcpdbRne7kGrVWL1AC6Y%2FcDiPrm%2Bq2shUeH0%2FvrRv85Q2JcTbGyTNqb7tdb82C%2FR5%2BHVxvYSAm74WhNJmdq39hujYpHWuf46FPLIom%2Ft83k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c25be399ca1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34165\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34165,"size_decoded":34917,"mime_type":"image/png","magic":"PNG image data, 800 x 816, 8-bit/color RGBA, non-interlaced","md5":"4d4444cb81a6a1ba7959231c7a5482f8","sha1":"d6f778c59d2939562362b08e2b2cceee4eb7f1de","sha256":"37a07e2b30fb3244fa2893c1fbea503b6c2dc60984d4db6be0d2e78b0edf62dc","sha512":"c48a315fe641a7d4e6032d8fbe7c257e001593521106c26997baadeb3b113f1fe3dc46824cd7c0d5f5ea19d7fea2f62e37bb5f3db748968d12362bb59adcad40","ssdeep":"768:2ZuiZRbEITnkSWdHwo/BpFw1cbsvDBqP79A/Av7ef4AX2JPcqLv2:2ZuKRbTTn1WdHduDcJdDefV2JPBb2","tlshash":"d8e2f22e13ead03761e5c90d8dcef619e17a02fc397c86f92ba091de4469548a71f9c3","first_seen":"2024-05-18T04:51:35Z","last_seen":"2026-09-16T19:44:01.99483Z","times_seen":180,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":28,"connect":13,"send":0,"wait":606,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/casino.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.440Z","timestamp":1789587793440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET //icons/casino.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 990\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=F2_dtfEZrd2zFcD_JnGy5RaTWAvFkNHzSQ6iXaMXn_Y-1789587793.4436326-1.0.1.1-91lxOucWuY.c7JYSqGs_6eg1.Nbw1jS0o6xjlP6EtE4bfSpa9ys3aNeJUh1lol5EiMddrMNjae4gIWaMF8HlNyqIY4w9xYWm4iEph4ev3FRz7VWNyZ4Rbaew24CJCvPz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\ncf-polished: ok, orig_size=4290\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2306\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd0ca75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"F2_dtfEZrd2zFcD_JnGy5RaTWAvFkNHzSQ6iXaMXn_Y-1789587793.4436326-1.0.1.1-91lxOucWuY.c7JYSqGs_6eg1.Nbw1jS0o6xjlP6EtE4bfSpa9ys3aNeJUh1lol5EiMddrMNjae4gIWaMF8HlNyqIY4w9xYWm4iEph4ev3FRz7VWNyZ4Rbaew24CJCvPz","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=F2_dtfEZrd2zFcD_JnGy5RaTWAvFkNHzSQ6iXaMXn_Y-1789587793.4436326-1.0.1.1-91lxOucWuY.c7JYSqGs_6eg1.Nbw1jS0o6xjlP6EtE4bfSpa9ys3aNeJUh1lol5EiMddrMNjae4gIWaMF8HlNyqIY4w9xYWm4iEph4ev3FRz7VWNyZ4Rbaew24CJCvPz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":990,"size_decoded":1837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d3f2a042f3a157da682adbb52f3040","sha1":"40066f35a2a29d4bafdcd05179e9f2c7af1666ea","sha256":"3c22945d0cbdf7368c5eaa30f26611147425df5c45d7303551b9ba9ddfc957eb","sha512":"0e7768bd55d719c646cdd57e7b0bb038c668142fcaf10d3d61d33b3d992ffea15a8f48f18404118d64cc3cf791f37ab6b8d0c4f044ca91a550ce0ef87fa807db","ssdeep":"","tlshash":"1011c8a98739c523e226cb39cf0c355a84a86385f031b0bf95c2790c70ea32b3b4c980","first_seen":"2025-11-19T10:28:57.226883Z","last_seen":"2026-09-16T19:44:01.995447Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/provider.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rekemonedasi-facebook.org/","date":"2026-09-16T19:43:13.510Z","timestamp":1789587793510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 04:57:06 GMT","end":"Sat, 31 Oct 2026 04:57:05 GMT"},"fingerprint":{"sha1":"22:88:4F:0F:24:2F:30:5D:39:68:D6:47:B2:BA:A7:F0:FF:60:C9:F2","sha256":"5D:51:91:2C:EB:11:3C:D0:E2:95:67:81:89:09:BF:1C:97:E6:32:3A:AA:9D:E1:E4:48:38:1D:EE:8E:8C:31:5C"}}},"request":{"raw":"GET /assets/provider.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rekemonedasi-facebook.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:43:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38260\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Jul 2026 08:37:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=P5EsSEmZKHd7EsrLBYOHdMuhZpv8Y5oiG.KKfHpw7ZU-1789587793.5142705-1.0.1.1-pY799sQb82ZxfGu24MQ9t8yJbjOVWyJoUuVI0.J.sldbUULmfNPp5ddLfiIZpAB.V2.erio2V53pgiEwVf7YdXBG9r3f6tBziwdo2rBId3x0TEJ4vnRw5LE_d0YxEfiL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=73295\r\nvary: accept, accept-encoding\r\nage: 4254\r\nexpires: Wed, 16 Sep 2026 23:43:13 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a3c25bdd5e965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"P5EsSEmZKHd7EsrLBYOHdMuhZpv8Y5oiG.KKfHpw7ZU-1789587793.5142705-1.0.1.1-pY799sQb82ZxfGu24MQ9t8yJbjOVWyJoUuVI0.J.sldbUULmfNPp5ddLfiIZpAB.V2.erio2V53pgiEwVf7YdXBG9r3f6tBziwdo2rBId3x0TEJ4vnRw5LE_d0YxEfiL","quoted":false,"path":"/","domain":"viva88athenae.com","expires":"2026-09-16T20:13:13Z","raw_expires":"Wed, 16 Sep 2026 20:13:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=P5EsSEmZKHd7EsrLBYOHdMuhZpv8Y5oiG.KKfHpw7ZU-1789587793.5142705-1.0.1.1-pY799sQb82ZxfGu24MQ9t8yJbjOVWyJoUuVI0.J.sldbUULmfNPp5ddLfiIZpAB.V2.erio2V53pgiEwVf7YdXBG9r3f6tBziwdo2rBId3x0TEJ4vnRw5LE_d0YxEfiL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Wed, 16 Sep 2026 20:13:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":38260,"size_decoded":39110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef63025666f4fe9501ab13d3916d9858","sha1":"7b81688e59d400ea1eebbfcdc25281f84d20fb09","sha256":"b469fe01faed89a35f6b02f84570477aa4ebaafbdb839fa064643b811ec50d9f","sha512":"0ed2c201214c6bd9c33b2f72000e4ec664a9adde4bee834db432b49ba41c166b744573e189d8bf0f76cdb446a3835c20c9cc73c01c2c87b0a0ac6305dfdcd28b","ssdeep":"768:+QCiI1T5atfl0mow+bSsLUvNLQihccjvMbqTRkTQBwavyUTkK:7C3T5ahl+w+/SOihccrqQSSyUR","tlshash":"8203f1a75b78992f43eb14e25d803dbcfd4f97c9d2d9918385ba60f81ac947080ac8d4","first_seen":"2026-07-23T11:04:32.778414Z","last_seen":"2026-09-16T19:44:01.996046Z","times_seen":186,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}