{"report_id":"6841b886-9bab-427c-a2fa-bb2f42af52f3","version":6,"status":"done","tags":[],"date":"2026-05-06T17:29:22Z","url":{"schema":"https","addr":"petirkuat.shop","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"104.21.63.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"title":"PETIRWIN: Agen Penyedia Situs Toto Slot 4D Resmi Terpercaya Dengan Pasaran Togel Terlengkap Di Indonesia","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"petirkuat.shop","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"104.21.63.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T17:29:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"iframe15.otomatis.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"majupantangmundur.pro","ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-12T06:41:32.988433Z","last_seen":"2026-05-02T14:44:20.479157Z","alert_count":0,"request_count":7,"received_data":7297548,"sent_data":3113,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":1,"received_data":24745,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"simpandisini.site","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-09-11","domain_rank":0,"first_seen":"2026-05-01T07:24:44.501755Z","last_seen":"2026-05-01T07:24:44.501755Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dashboard.alcopay.com","ip":{"addr":"104.26.5.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-11","domain_rank":762171,"first_seen":"2025-03-17T04:35:05.964001Z","last_seen":"2026-01-15T12:15:34.303683Z","alert_count":0,"request_count":1,"received_data":624,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"petirwin.dataklmsad902.site","ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-24","domain_rank":0,"first_seen":"2026-05-06T17:29:28.167211Z","last_seen":"2026-05-06T17:29:28.167211Z","alert_count":0,"request_count":33,"received_data":1247062,"sent_data":16634,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"petirwin.dataklmsad903.site","ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-24","domain_rank":0,"first_seen":"2026-04-11T13:46:31.946021Z","last_seen":"2026-04-11T13:46:31.946022Z","alert_count":0,"request_count":10,"received_data":7123884,"sent_data":4908,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iframe15.otomatis.vip","ip":{"addr":"104.20.41.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-30","domain_rank":92817,"first_seen":"2024-02-01T14:48:17Z","last_seen":"2026-05-05T11:36:40.724811Z","alert_count":1,"request_count":1,"received_data":6378,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"s13.gifyu.com","ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2014-06-29","domain_rank":1541371,"first_seen":"2023-12-26T07:35:28Z","last_seen":"2026-05-06T03:24:58.612599Z","alert_count":0,"request_count":1,"received_data":137729,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"onelive.dataklmsad902.site","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-24","domain_rank":547063,"first_seen":"2023-12-29T20:09:34Z","last_seen":"2026-05-02T05:15:06.708544Z","alert_count":0,"request_count":74,"received_data":5275530,"sent_data":38057,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"goodlife.rest","ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-11-19","domain_rank":0,"first_seen":"2026-04-29T07:06:56.481127Z","last_seen":"2026-04-29T07:06:56.481127Z","alert_count":0,"request_count":13,"received_data":7065302,"sent_data":6085,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"petirkuat.shop","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":178616,"sent_data":2875,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/js/custom.min.js?v=2","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b9747914181af517c780d7bf9b48a13","sha1":"8d6ffb5b713b33654cffaf3833682337045beddd","sha256":"3cc83bdb3bf9bf5a74d1e45dd42bd31dcd18efc2d43108cb397a503c716b9ae1","sha512":"a4361f3d51ca58ac7cede211c987ebdb3e9da8e911f54a8d852fb3dc9e05ba49ca6d54852fed7039421166e072b975217f6f95242838775d5703e8f7a35545d1","ssdeep":"","tlshash":"be71b329385371aa72b3421c262fc009772fdb8c6a770ad3f07b95142df8e702597b98","size":3483,"data":"","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:21.083311Z","times_seen":400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d86e3b96cce7cd027b90309059b9c233","sha1":"7cf292f5aa911a9be9c75de18c2d57c6f90ef97e","sha256":"2873846cd7515818b85b6d5b4f996abad3c9b49dda220364a40e3bc14c351ce6","sha512":"033f1600b0bfb6f7d57943d353a0fd151c8a085d92386026899bfa3bafa621930e04566e4a2b837cb77cfac9fd66f88fc7088d81184fafba4b1b759ac17050fb","ssdeep":"","tlshash":"9341ef992cb05064a36a83af783724c1e368ec5e75cd4019f00c75947fd06b8caef530","size":2073,"data":"","first_seen":"2026-05-06T17:29:40.163741Z","last_seen":"2026-05-18T15:44:18.608822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c36270814a158e37d88d982a07a23257","sha1":"ae79a8fb448311b930dd3fe277c22173d02c0072","sha256":"08e486b5b2b9fa86809518d91c7c70cf8bd776f45d003959886cefcd0b7efab5","sha512":"cf86b2cc104555c972477a36c0edcec043aa4c0371950048d951ce5a2c5d7438c640f65472e16ea03830916c5f0ccec8cfd4fed76121ce90b2be568cb1f229ce","ssdeep":"192:eydDR8fo5Cpf8dCbo+rqcl4jntee1aLsLkNwc6pICllbs4ZE0AO0TLqcVXtMvsTb:e0qmofO0/2UPA2U8/R3kC0bGyG9F","tlshash":"cd92a61ad5a3103258134ce89fb7be94b6345027c905dd283b9ca2e85f3d68ddeb179c","size":19918,"data":"","first_seen":"2026-05-06T17:29:40.164682Z","last_seen":"2026-05-06T17:29:40.164682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-13T19:20:19.339022Z","times_seen":97898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c72f58ed316c15dafa449a7fdfc57c","sha1":"7f4be4e934e909763f8940a8626afd558a419872","sha256":"80c7a867956e9a82e8eb70f79a5c949f70749223a9d3bbdba20797343f68a592","sha512":"e5cf2dd270cc0340c1aaa7a7d9eeb8a689a8bc6bbd53e5b660b277cb0ea5f1afa9d3e9054235ea33694a25ad0c80fbfd29144106a2bfaec520c28b355374696d","ssdeep":"","tlshash":"4d21e1da453840134732a2d45ec79464e2db400bef4ae80d3b79f912bfb91699e724fd","size":1324,"data":"","first_seen":"2026-05-06T17:29:40.165797Z","last_seen":"2026-05-06T17:29:40.165797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"343c700364a304711b4c12ac627a6ae8","sha1":"c41b8dde12cf5fbe011bec04977d422f2d2fb4a2","sha256":"061f824fb65425aa5511d07bd086b603efbf672eef92bb4b852e648d9ec26e0f","sha512":"2d24f022120bdc18899a74f6ba06c2ac0f594a60cbf7c082bc04ec819b0190f5f3d830d74ea61ce0755360ca8021589acdb7098a6ed59d5de3aa42b5ec51f81a","ssdeep":"","tlshash":"94217b28aeb30074e61f130f23bf5398bee0601be594dd00715cdb954fd0e14e29a4ea","size":1189,"data":"","first_seen":"2026-05-06T17:29:40.166726Z","last_seen":"2026-05-06T17:29:40.166726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1b1eda82d7731bba2e37aa1a1d83fb1","sha1":"cc6fa8831d91a9c1185bd27237f5b253a6a538aa","sha256":"f04e3c6bd43c7378f21edd8fcdf8a5f1d0dcbab10d61ec2c1ecd7505e17ab4bd","sha512":"e1f4351abf4f4bc69d0c65c1e1620056c0f38b9f37e92374b20a60ce2aa35b62af2440bea6a9602eadbf57f75e13b005f014fc6a04d231d7cfe83284919b4492","ssdeep":"","tlshash":"75015c1a72e1373248fb1bea319b43d03824944376468825376c8a478f51ec684365dd","size":839,"data":"","first_seen":"2025-10-27T09:22:47.327797Z","last_seen":"2026-05-17T07:11:02.233198Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31fc7f68bc3ff847a7e5ff0f6e7229ce","sha1":"54fba023d29931be5b88bd294be0cdb3006eaec8","sha256":"ef9a15449ae3cb84bc99ab1394a5ecb040d324a853874a3666fd23764c714e85","sha512":"c8abd1e1652d3aaef672544498c1ff6334a4537f98c880566760fd0279cfed7f9df70e1f9945bb094d211ffaf78b42520606985f4f1e2817cefb69cf7f6cbbd3","ssdeep":"192:ba3Frqcl4jntee1aLsLkNwc6pICllbs4ZE0AO0TLqcVXtMvsT2ITc2T6SYhk4TYJ:ba3JmofO0/2UPA2U8/R3kC0bGyG9F","tlshash":"98828715e5a3103268134cd89bb7ff9476386017d505dd283b9ca3e84f39649deb27ac","size":18763,"data":"","first_seen":"2026-05-06T17:29:40.168905Z","last_seen":"2026-05-06T17:29:40.168905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62bc6be88e85f10f8ec0e3ddaf6951e8","sha1":"f97585536dbdd353d210b3ef5543bb21adf586a6","sha256":"8deeeaa9e3b6edd899d21db7df8450105fce2767daed68e99d831b6917c674b0","sha512":"724df981de29d4ddf903537c253f8ef359cc6cf49c8cfa5021ddb4e48cd3778fee7859a3becc7ba734f414d40af3a8c67b9c15b92acca20c92c56a070cf87e4d","ssdeep":"96:CfZakqzPlUhu0I+vLHXG1oEvwlayirhWg29jnX4++q0vvqceker0ZRSU0LlE3CEU:iVhu09THlEvuKrMg29jXmq0gILB3ny3l","tlshash":"f1c173932761cedb03998dbf331e7881f126c42b444488d1f561fe1079e8b26eda973a","size":5711,"data":"","first_seen":"2025-01-27T03:56:23.948258Z","last_seen":"2026-07-18T06:09:23.991485Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c72f58ed316c15dafa449a7fdfc57c","sha1":"7f4be4e934e909763f8940a8626afd558a419872","sha256":"80c7a867956e9a82e8eb70f79a5c949f70749223a9d3bbdba20797343f68a592","sha512":"e5cf2dd270cc0340c1aaa7a7d9eeb8a689a8bc6bbd53e5b660b277cb0ea5f1afa9d3e9054235ea33694a25ad0c80fbfd29144106a2bfaec520c28b355374696d","ssdeep":"","tlshash":"4d21e1da453840134732a2d45ec79464e2db400bef4ae80d3b79f912bfb91699e724fd","size":1324,"data":"","first_seen":"2026-05-06T17:29:40.165797Z","last_seen":"2026-05-06T17:29:40.165797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"343c700364a304711b4c12ac627a6ae8","sha1":"c41b8dde12cf5fbe011bec04977d422f2d2fb4a2","sha256":"061f824fb65425aa5511d07bd086b603efbf672eef92bb4b852e648d9ec26e0f","sha512":"2d24f022120bdc18899a74f6ba06c2ac0f594a60cbf7c082bc04ec819b0190f5f3d830d74ea61ce0755360ca8021589acdb7098a6ed59d5de3aa42b5ec51f81a","ssdeep":"","tlshash":"94217b28aeb30074e61f130f23bf5398bee0601be594dd00715cdb954fd0e14e29a4ea","size":1189,"data":"","first_seen":"2026-05-06T17:29:40.166726Z","last_seen":"2026-05-06T17:29:40.166726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1b1eda82d7731bba2e37aa1a1d83fb1","sha1":"cc6fa8831d91a9c1185bd27237f5b253a6a538aa","sha256":"f04e3c6bd43c7378f21edd8fcdf8a5f1d0dcbab10d61ec2c1ecd7505e17ab4bd","sha512":"e1f4351abf4f4bc69d0c65c1e1620056c0f38b9f37e92374b20a60ce2aa35b62af2440bea6a9602eadbf57f75e13b005f014fc6a04d231d7cfe83284919b4492","ssdeep":"","tlshash":"75015c1a72e1373248fb1bea319b43d03824944376468825376c8a478f51ec684365dd","size":839,"data":"","first_seen":"2025-10-27T09:22:47.327797Z","last_seen":"2026-05-17T07:11:02.233198Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/jquery/jquery.min.js","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-13T20:53:04.686751Z","times_seen":142787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f84c4f2372c71ccddeadffe3c5915f0","sha1":"d988a73022b924a40b811e3b2085812c73b48a95","sha256":"624c454c7a92fb6816794e91b6d29dddc3094d6eca9ead693a00ccf9ddeaff16","sha512":"307d4b27563e8654d887802e084ff0b3f8064cec8c28499afab74fbca83634281cf06500d8bb698bbb0d2168af2dc7533b6d23fbafecc92bbb3f58acdcd05cca","ssdeep":"","tlshash":"71d02249bd72190250ff302b7d6f89001a42088fdb0dce08fdbf1ac20f35048a0c210a","size":232,"data":"","first_seen":"2024-08-19T14:51:55.838708Z","last_seen":"2026-05-23T06:01:24.614127Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/4/AmP6vVPdnSTmjXIy.png?s=b6f407b9561083989d26487e5463c242","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/4/AmP6vVPdnSTmjXIy.png?s=b6f407b9561083989d26487e5463c242 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6229\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pl3sY1TTUMumo9B3rBhrtCap5ACpmtjdqP1oHK1BXcelAxEJxEgGpD64xafxfmq37Ej7NHhiKHsm6O0uheSU%2FftTzS2PeSbxbjMjMB5a0Sv%2FKtxlXxn19dd5fo9mf%2FeQHd%2FpUL1DQuAA%2F%2BvW5oQ%3D\"}]}\r\ncf-ray: 9f79b45708db5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"d653e4cf1a85aea0ba8f33e8454ab23c","sha1":"b796b09a54bed7273653a9ab521a976e76985f83","sha256":"e78a55455d6e18266beef250541247823bc5d62732f23873056b7a2fa6a97403","sha512":"45279c38d29a187cab547b42a53492e4cb393ed0f09fb8e471b720613c8b544b1970e561eceee058d066016e1a0b661d56f65fd6ef1673096fbf13d2e946df77","ssdeep":"96:1+U3YcI5usCg0yurs6LtqY3P+GLpFKtP7rzZbHytdZxMCj5uZXEBXYGxBzaJ8qgD:FoV5uAunP+GLpmzBHaBEG5naJw","tlshash":"6ad18e7b8e13518df3c69c8cab09004af35b1295673e9b8f53daaa6373914468431a2a","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.115524Z","times_seen":338,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/12/ApAdJUPi82CnZTCY.png?s=8ec2da22891b85e71a18b776af3a503b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/12/ApAdJUPi82CnZTCY.png?s=8ec2da22891b85e71a18b776af3a503b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11784\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-11783/11784\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1392143\r\nlast-modified: Tue, 21 Apr 2026 08:55:20 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F4coClJE8ITqcs%2BaFeniuYEzWjaUeB3m7P0dv0c0ZuNadx4nvOGdImv9%2B5xdHyILM7%2BDAojFqyYAqlZhSrQ7tjEv58iOhIhSKK%2FoAgfw47b0VObaLOwORLRfs9eJHO4xhrna63qNx4e6kagQw%3D%3D\"}]}\r\ncf-ray: 9f79b4577bd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"4a0f902f325b2c385f7bd661bd16b5ea","sha1":"65164876662f3b7a5e130b474b54545fcd01840d","sha256":"2c92d95e89f871e9df205866efcc6968818d42b4df6596ca7482e5c04da6c6cd","sha512":"2607c335fd0edf7caafeb1531627f52a0fccff169f697bd9db8b6f31ebf98efc9d5e9d3d0e141506119b053768ee5cb429a4e7c69f04111701c6a7482ac55e4f","ssdeep":"192:UthLJ+Ph3aikeJ8deM3oGkFmj2banLreACpUnSLfIfhPuEpYElBtze+:UkPhDJzG4bgrgpUnSShPuEpFzze+","tlshash":"4f32bfa31f1187a36dee19b58b872520726896e3c861f3e53460f3382cb9b742ae8514","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.974997Z","times_seen":425,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/35/DPmzuCH2rQlEDfqa.png?s=8c89e3800cdf86711f4eea6475553294","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/35/DPmzuCH2rQlEDfqa.png?s=8c89e3800cdf86711f4eea6475553294 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 3287\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-3286/3287\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1096027\r\nlast-modified: Sat, 25 Apr 2026 08:18:09 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnX8QUooOi6JFnsTrZqqMdUMM4cttyqgHYxfUxwUchqqreGOikghpkOOMMaBe3HxbT3oWXlYaE4Ozi8ZopCIRdyMPgTVTX%2BjxhiUvX4k3ASAzfctlL%2BhirYVYKXJQ2hrfizGDYimbmrHANAstQ%3D%3D\"}]}\r\ncf-ray: 9f79b4579c84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"88cd5d9f548570ca1d3c2a7976cb4251","sha1":"82910aab32634658da4d60c2b62530c008769470","sha256":"cf4ecd77eab78255892bcf63a59c840045e7df974e02192620889ea8a8eebc92","sha512":"4eebc6da47ab9d8497f1435ecd58e1cb536796277c357861f27ed39b26f2660d0d9a63cd183c0e310519b9019b70ecf72332abaa7c8bcb7ac9a1ee3177305bc5","ssdeep":"","tlshash":"cc615cf7316fc51ca04b6e8b059e75310fc25ba0177fbe00ba1e711c54ea412c6a2bb6","first_seen":"2025-06-07T17:06:06.454588Z","last_seen":"2026-08-09T11:55:20.957455Z","times_seen":409,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/icon/hubungi_icon4.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/icon/hubungi_icon4.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 19:59:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119590\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":119590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"114cf24353d474f9cc25cfd3c582e4d1","sha1":"092b79b7305632341657fc13789348b748d02f6e","sha256":"358442fd4391003d990d7db5197c77f68f8b9c349a0157cafec52431fa17384f","sha512":"0375fefa3efd8097e6af43ca04d336aff31eec929cf202eddea6d3ff4169d7831cd54f256538f239371071a17d2bba72c45e4d8d98727114a23371e1f958b2be","ssdeep":"1536:Pew+yHMP4GwSGtIso3sKkmPBS9Plj5c2VVy+OsbUEOWzokIxkJ+jZwsplf:l+YMwGdLs52BS9VS2OxnWz/IjZL","tlshash":"07c312983644297f6e30f7a6cbec51976b7a012795cc0422ee1cbae4dc088adc547b79","first_seen":"2026-05-02T14:44:32.516061Z","last_seen":"2026-07-18T06:09:23.939903Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/jackpot-desktop.jpg?s=05e786b10d912120226da4ed8bc7d77e","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/jackpot-desktop.jpg?s=05e786b10d912120226da4ed8bc7d77e HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61023\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:01 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPFDYy0E3TcBwhHobdngl7M%2B3n93etq63LyoKMlZdYbLDbgclmRL1wyMZoL8ryyCLSBIaGa%2ByHcqFXIZFu%2BozEV2JnUqoJiaXU2SBLQ%2Bqqz4itNfa8NGN%2Bfrrqn8Hj%2Bhu3h7oCKwOns1QgcIo9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4673840b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1280x223, components 3","md5":"a8d7e3619bdcf997408b5df5be950e81","sha1":"105427bd6d5e79d859158680700afc6f879b686c","sha256":"cd85d07e06eff76c65c2ac64be4381addd7f1f5643beac95ce26a3367d777cc4","sha512":"0ea10a4d068e71ca9a157f5f99d5219a7965021e4bd6397e2be743407b676582fb2074bbd2a72c4323d99978dec009032e5602b546cb225397abf8803eefd3ec","ssdeep":"1536:2+VAoLPgp4uuVMLfNE+kwII521uU1A9mcOi2rLnKHveF:7ADp4uZu+kwIsreymcOi2rbKHWF","tlshash":"fa53f0745d298583392e5b2fc14a0e5d71ac8f3e23ac990606f51c6ff7e2b802b2d15c","first_seen":"2025-03-06T14:46:29.555378Z","last_seen":"2026-08-09T11:55:21.011274Z","times_seen":29,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/22/YMB5vRqv4ay7ACM5.png?s=6670c3845f2da1827a55ae1bfa2462f6","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/22/YMB5vRqv4ay7ACM5.png?s=6670c3845f2da1827a55ae1bfa2462f6 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 2543\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-2542/2543\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1709258\r\nlast-modified: Tue, 21 Apr 2026 08:55:20 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdAVi3PLjZ%2BNBamvm3XPOpoi7cQZ1Yl0WKkYnN2vlb1jddF4tzLlEqverwtKQGHxT8KKmonc0bOj0UkafpZ6L0Yg6VgvbbETITLCRRgpRpNtmJJjClds%2F3Nh%2FE3lgeKpTp%2Fx%2FqlDgk%2BO4k85IA%3D%3D\"}]}\r\ncf-ray: 9f79b4579c53b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"dd39895c421b358951c1a5ac9b5f4125","sha1":"e09a9a6d7edfb138c1a9e44f6622b1f4e5cc92fb","sha256":"46b3566214f6311763d0eb44166e7c13775a3c447e3c02796306ede8be900a6f","sha512":"59b7f74187de11184eee0c999a056a9bbb00e1b9d8bfd155970006124aef83d42a8cb305780e7515b98571cea535b2ebba5e2e8b3ed01d70ee2003b8408aca97","ssdeep":"","tlshash":"aa514c77344106e37d2b098fffb976122299839b9843aadce302a507c75459b1b8cd6f","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-06-13T03:37:44.777934Z","times_seen":369,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T17:28:57.516Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: petirkuat.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.0.11\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImNUWGduMUliMjdwcTRHODFlTjJwTUE9PSIsInZhbHVlIjoiazc1OWZ5cnM0THhsbkZxOEZZN0xUK1d3ajY4V2tkeHRmMEZJWEt6NUZRWHZ4NFlXcHVLNzJiMWtCTjQrQ2pNM0ZGUmVMT293anlweU9aRk5mQ3FYSGFVNmI3NE90d0MwcERLZWtxQ0RIVE9zUCswMXdWQnU4dzMzUWozOUp3OVUiLCJtYWMiOiIyMDg4OTg5YmE4OGM1OGJmYWFkOTk4NTU3YjRhYmNmZjJmYTI2MTUxMDA1NjQ4NzA0YjA4YTI0YTkxN2Q3NThmIiwidGFnIjoiIn0%3D; expires=Wed, 06-May-2026 20:28:58 GMT; Max-Age=10800; path=/; samesite=lax\npetirwin_session=eyJpdiI6IjJRTFRpZU5HRkNqcDhwVWxlVlBUZ1E9PSIsInZhbHVlIjoiM0d3bkpDMmpVN0JudDdFYnZLNzJFZjhoWTFpeDN1Z2Z0UmNQN0tnRnIwQnhnUStJYWhBNW5OTml6bEZrc1pvWk8xM1BCd3E3a3hmSnFkR3RlZHlCVnVjZEdyclB0VHpoeWRyM1huSytJVFhTV3RGL08rUW16QmZ6eERuYWJhYmciLCJtYWMiOiIwZTk3NDUwYTViZTk0OWI0ZDkwMGExZjJjMWU0NTQ5MWUxMzM5ZGQ4MzIzMThjZjJjYWNhNDZhNGVkMzRkYTk2IiwidGFnIjoiIn0%3D; expires=Wed, 06-May-2026 20:28:58 GMT; Max-Age=10800; path=/; httponly; samesite=lax\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-CSRF-TOKEN, authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vv4ON%2B18ETiALtQ42qQiskXwM13euqfyqOpgkuP4D0iy0GYTlhfWnGaaTrTeyUgeB%2Bey8i7xXIsZmxR61fl4uVmVlG0j4OOm9SZNqaAX5E26g37nbTf9vt3dwg9gJ6YkMQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f79b44fc9f0b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159637,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (465)","md5":"5507913f94730ba9f66f999e48d84435","sha1":"cabdd6c36023599422382ddfb4f6caeeb77a5d01","sha256":"d2fc7581ddeac87da4baab9018b6daf03bdca3feb0337ac421163b79be3cd4a5","sha512":"e6e1e31e6904af0d184d768226c3d1b1f2abea7c0067acdbd0c0f7d9f2040bb150fa369e617270ef30104513e397f1b0001469c7efec0f66496bf94b00560412","ssdeep":"","tlshash":"d01144a70d60250d125142d164fae5111aea1563bb412974fcdcdbb91fe83b086e376c","first_seen":"2026-05-06T17:29:40.020045Z","last_seen":"2026-05-06T17:29:40.020045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-6-mobile.png?s=7925b9682d24c145c273d393f412ebe4","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-6-mobile.png?s=7925b9682d24c145c273d393f412ebe4 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 17005\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2Bq6Qq2EDY78NQjDGbN0LlY%2BenrRH8q%2BcWTdibCx%2FT9F19DemFmFqIPLzMx%2FrNcIN18N3F%2FZRzMFBsRUvOMy%2FVAGnKvh4HTqIv7jJA4%2BSeSNUJs6WJIPjXWIJCvqQ6UVF5AxAQJwTQxPFTFNAkA%3D\"}]}\r\ncf-ray: 9f79b45678095690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"594933737e1baab7a1f78e536b42ac43","sha1":"2d6b22052f97be15396f1281b05aa32a7bbd8253","sha256":"6d6f4cef269acaecd8770d5f3319704c1176c97595b7a74f0fa3514d242d239b","sha512":"13f261445f6570145d2c673ba37b7f51053687c01c9bd8a09f46c9ac991459b49d43a737bfb9b50d0c7c40caf451ba31cbf55ea53ff185f0e585341619e37454","ssdeep":"384:dk247Tcw51QU2BjR1r/QnCB0MBwHxLBkWAmFa:J47gwLQU2t3/ZGHxHAka","tlshash":"ca72c121b1561b9f54c9332c60bcd2dd3ad2b2f10d56f9b51f41f231b486bda246c261","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:21.039903Z","times_seen":387,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/53/m1fRdR6E58N0sxkh.png?s=c325cb3fc34333b23f2bddd0479ca2d8","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/53/m1fRdR6E58N0sxkh.png?s=c325cb3fc34333b23f2bddd0479ca2d8 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 122780\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-122779/122780\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:27:18 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1686437\r\nlast-modified: Tue, 28 Apr 2026 20:13:35 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tc1bsNEEkBccCI358orqWJVU1888KG7z7ikoMXLimudyqwl3sbRD3bZ8L0qKQ%2F8JdyAscpeNw0mMDWHT6M416HRd6vzb%2FLWhV9SAhZU%2BumAl5yTlOGW15U5gEA9dFqtrUFMNeNZkyX26vwhOvA%3D%3D\"}]}\r\ncf-ray: 9f79b4575b4eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":122780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"948d59e0ac99c5c68965124904898ca7","sha1":"6a0b87a9c86102dfbdece37c609135d69ea9be6c","sha256":"794de77b6a36d6eddc274a81daa685f8fb9ff4e37665ccb69e88fc84d92c8f19","sha512":"7df9bda5fb12f0ff7b0a08a54f897dc5ea44b24b3077e49d719befa76bc8691e0cb0d2716e8fbb83a9079613cfc405e1996a53cbcabc4d9f8876723d10702aa3","ssdeep":"3072:u4Up29X35YAMveKN6YyhyRWs9/sFSyJsj9zWehgAJ4X4ZPo:JUqXDMveKM1h+v/sehFr1e","tlshash":"e2c312661d0e9b02619153c2b7742b629ff1d050325919f6f1e8bee289be18f04fcb35","first_seen":"2025-07-09T04:38:23.207111Z","last_seen":"2026-08-09T11:55:21.040775Z","times_seen":296,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/19/qB9EJ8LKxCbngwsy.png?s=32d779b38cf5675830a97ef8f51801de","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/19/qB9EJ8LKxCbngwsy.png?s=32d779b38cf5675830a97ef8f51801de HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 155601\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-155600/155601\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:34:19 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1886365\r\nlast-modified: Thu, 30 Apr 2026 18:47:33 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRXT%2FC0H9Xa4DlrZKkhS9tc6ktnJGlamJTwsZU1XEjnpRl6M2vgbIEnDXFUNLlPQl8jfY%2FIrdGvCPoWWboVsRQWGQERSNipkFGTTquKEoWK%2Fe6yQd5kjCZHICoykYENHezN%2FZb3hgxaaH95Kdg%3D%3D\"}]}\r\ncf-ray: 9f79b4574b2ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"c14399dca783d0340fa13c3f7476cf6f","sha1":"be3ee867e913661a714c9337dee7dfc5ce39e669","sha256":"a1613bcb146f26540c2f8e167f8c2c4a6086e0bb6cc50c8add16782082cea4ca","sha512":"92af3300bfac10c013c9ce9bd7cdcad05dc8ed98bcbf93dcc55bfe2653fbf6f4c1b851f3615fcfe2a86df3987165838a2e52107f1c5a975f3e8f368972a31c5a","ssdeep":"3072:KSdU2LAutM0Htn8cnQNoSgrMFXBurKXQNK/gY2kvoQydV8rL7zna9YpJ:xdU2dMA3nQNoSguXk2mkgY2kv6dVsL7R","tlshash":"5ae312a72606dc8dc34f3b027a1598c1fd8aa7f22f3f22c65176a795c81a44799c5f34","first_seen":"2025-07-09T04:38:23.222947Z","last_seen":"2026-08-09T11:55:21.066597Z","times_seen":293,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/42/eq5acZiqygkylKIX.png?s=a091cb47b6d9da4832cddc6934fde165","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/42/eq5acZiqygkylKIX.png?s=a091cb47b6d9da4832cddc6934fde165 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 136240\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-136239/136240\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:37:26 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Mar 2026 22:32:38 GMT\r\nage: 3524180\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7MhEYJ%2FjQDZSw%2Bk74Qm%2BQzknWPdrzRdXRp3LeeBz%2BHRNQCUPJuoTmQ110G4WNrPI%2FWM7%2BchQe8MYI6PegiXzD6r1Wq8en%2BGuAlSioM5Mc3H6lG6dJ3TTShV%2FBcPxsbAFcQGUMziqxLH1pQhRQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b36b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"be1d121496c5ed60b6c3baaefdfb3bee","sha1":"248af30fa43eccac9975a5900391f3793d22a11e","sha256":"9700fbb74897c86d67d731ae83314d14e352a0c2d43d96980ad358a050891137","sha512":"d80ca8094465af9d4f4fb00fe992c882b6e5f3b1807addb31955037df463eb82b396e14d5309a94be2d8882095abf5423e40099e821e5234b8fc8afae7f5e105","ssdeep":"3072:bxnt3GhrBYa9BrninDbXHw7tOQdTKJ49FyHbEG77A:b90h9Ya9Fi33kOQ3JGI","tlshash":"20d323c0e27c9f32498daa38eff2160b3e39ba65791654d603d433a91ca78475f37149","first_seen":"2025-07-09T04:38:23.144752Z","last_seen":"2026-07-06T01:32:41.054133Z","times_seen":264,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/20/G3v9ogj2MIWqihMQ.png?s=17bae1caec2e6604bbd747c089ae3769","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/20/G3v9ogj2MIWqihMQ.png?s=17bae1caec2e6604bbd747c089ae3769 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 124939\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-124938/124939\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:30:37 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 19:04:22 GMT\r\nage: 4141476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUtlSleUt13wbr7FZSh%2FwjW2WL61IR9Pr%2FsW%2Bv1tJ9lzuRXq9TURnBo%2FaGNPoeWjveVTq0Ykn5E2jv1qFrRqn1Yg4BzZ0DdERXTN9XRqY0DCypwL5m7HLvaEqd0i%2Fyi5gTg%2BsZb%2FYs73TdiXog%3D%3D\"}]}\r\ncf-ray: 9f79b4574b11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"1a7990db25d29ddbd1931236f5599636","sha1":"91f89b9eab39c958e526ac1440584f2cb0c14a85","sha256":"85c6cf928cc6557dcd9efdcbc2f63964c7e0a7679b96c3a28fc91fb2d70aa18e","sha512":"f4387b41cf1bd9cef582b755ce1052ef58c852ae3ccd082e112f0608b26de30eb17fbe8cf845b255ed8403c8f5faea35b3fbec9ac79593b26b3e3b7e5fdacc2d","ssdeep":"3072:qSaambzeHmT6mVKBMJVt5mTKYY7NtiPMblqBa1ZNt+:Bgze3BMJVtcTK/LiPVBAZNt+","tlshash":"63c312f953ec1171ee6f35af11d1c2712f832c17bf269a4aa6d9b1ad8304745f628a03","first_seen":"2025-07-09T04:38:23.197418Z","last_seen":"2026-08-09T11:55:21.084963Z","times_seen":295,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/29/800Y9WGx80B8yVoN.png?s=73d476300052f4b055d9e282419f540a","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/29/800Y9WGx80B8yVoN.png?s=73d476300052f4b055d9e282419f540a HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 144479\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-144478/144479\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:44:36 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 00:26:01 GMT\r\nage: 4208577\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNFtNTzPNs2tG%2BggFNQMszJEgUYUtT5NtASL9lKBKuoxRxz1RlXSsi%2FDqu1%2BZPiPHAkb4lM6fxQQFQokY4pbSyw%2FSqbCgn5Z5wZyVWgbImj0iTPffrxXeXbAKnd1xBxKouty%2FCMNashcLR%2FBTw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b26b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":144479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"4ed9002cd65bed76e3018cfc54d08d65","sha1":"225db78655868e5019143c7ebc248bda26b8bbb7","sha256":"ceec1e9e289de48fa1f14ade4ffa5d8525f1044103365397164c59b2de5891f4","sha512":"3885fa1299cefb07b624976dca6073449fa6c8de75449eb9189c85e6fda61a5376fcc5371cbd318c43f58ce09f84141b5991d18f9120f84e30434eb45946d858","ssdeep":"3072:yOZHxMKjAHy/+VJLEWGp3HjT2XbsdpsmqQ5RQiErO63sH9CQHpcOK+/had2u0xy:yOtNOKF2XoTsE5FH9FHpcOlJadHqy","tlshash":"e5e3125d5b4ba093945f0c3d3d7ca83cda0f6aa084c2368d6e97edd672b72367852b10","first_seen":"2025-07-09T04:38:23.245167Z","last_seen":"2026-08-09T11:55:21.003182Z","times_seen":292,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/14/61Zj0bRT9O1uR5m7.png?s=fe5333056a6537531e9c84b953fdebb0","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/14/61Zj0bRT9O1uR5m7.png?s=fe5333056a6537531e9c84b953fdebb0 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 12501\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 04 May 2027 21:14:38 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dsAPg9gVMl3CWrw8SGnILx4xKXyCTyVW%2BvW9chT%2FlTHTT3jJ0MFRphe7l%2F%2Bi3FMgpS02xhnT9Crv2WR1hLwo5VlV2Ysg8ymugOcuwKtuaKL7eyaf2g94ktbiMZ3F2RZtbILeWiOf40ryJVLAN4%3D\"}]}\r\ncf-ray: 9f79b457491f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 120, 8-bit/color RGBA, non-interlaced","md5":"71d83b405aae0ace57e58d291e79043e","sha1":"00205c697dc63669200090b3bbb0af1d0ab6dd63","sha256":"5d5aab823f8f6c07501258da5185b7f702a5f92e301d19765eb5afff868cca56","sha512":"6929931dc3d8df65338ab3fda5a8d6fd5ef26da5eae2209c7ef9ef74cb649b30cce0b3e9dbe31f144b5de724a9022fbacf77960ea277373cfe16f850096f2814","ssdeep":"384:m7MxrbwEKxo/4CLIX0PeSVk2pDSeN3rSrJ8oO/aaj:NxPgAC02INSUQJ8rz","tlshash":"fb42d0fd9684f329e508af38476bae905fbac3ae437c200d0900da579c416a58813bcc","first_seen":"2026-05-06T17:29:40.027122Z","last_seen":"2026-05-06T17:29:40.027122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/27/p7g9ot1imVr9V8ei.png?s=481bfbc292f112106c975ca6ab583900","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/27/p7g9ot1imVr9V8ei.png?s=481bfbc292f112106c975ca6ab583900 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 9280\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-9279/9280\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1867968\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJd%2B1iVp7aCgbs32LoGCW7zakNZdZtiXFXMy%2F%2F0tkdGHg1zRWTroZnYLvApW0QLDgEGoSYA4s2qe2h03l7WnWvygDNZDCOgnDX2Zg3I%2BDteptV%2Bo5D7XPbS8yOHvG438TDPbNuI1p8nkOq9cAw%3D%3D\"}]}\r\ncf-ray: 9f79b4579c61b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"eaba4089af104372405954d71b59edcb","sha1":"27ffdbcffac1452298ddfabc173a8307edbcf83f","sha256":"38137baa1270ec79df5e19c9797fcc41a3482d069c275f1558a30bb23c6f605f","sha512":"f31e3c7b9e22ef5851d465a8fec635a9a45c1e84d9b72c37db4c3e482c11654adef05355a207043eb19dac7a36a404b1177bc24b73f21b688aa560b8acfa5599","ssdeep":"192:glY7NRqUKteMpn2c2R8Bmz0sC5PhjpDj1HMmsC2m6V4IFzAbP1qb25:u6NRqUK9p2cwsJhlDj6msR7FzAbP195","tlshash":"1112c00bb2091936d2aa0ddd0da406e4d82774a6d1b08908a7f7e4a4c4f5e117f3a657","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.990379Z","times_seen":425,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/menu-4.png?s=480315067fa1ce583c60094d4f2f7eb8","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/menu-4.png?s=480315067fa1ce583c60094d4f2f7eb8 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1422\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrdIagGcFYmlqASQyVqoAq0MlnO1mgxf9qYRhg4QZnHRv5czarKW2DVv18BEdqxugj8uCXGOxd%2BbiEBn%2Bz7Sexfi5Y7O5PWaeRu%2F3pnWAznDDEt3rQBPkqC6Ras9Q3p1y321ppbzzJnxmvobNbE%3D\"}]}\r\ncf-ray: 9f79b455ff6c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"48c9fc7225521ccf2b9a2aee220ad8c9","sha1":"2675ada7d020a791d6039b16ecf7d8e955975078","sha256":"6a4d3c6673b4f35e6326f774a0486dd1e94b921d10790c5809196fdab4c480f5","sha512":"a1d90748cbc0090ed84e55163e33f34ae6b716bac109d53a146738824ba718f28bc3d643d2c7ee204e50c34253a255ec8b9dd031dec0475be6505e0394e65884","ssdeep":"","tlshash":"0a213bcca796024482a0509fffb05779292ba1a0321433a0bd68e0a777e253f2da09c0","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:20.984818Z","times_seen":420,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-4-mobile.png?s=63e6251efc14724ae072b55306ab484c","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-4-mobile.png?s=63e6251efc14724ae072b55306ab484c HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 17840\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeTtokAEZfdiMdYrh1fTpSZj8pzy95V3LJk2vJK04eIo9E0Y%2BHVPflLoRpS7%2FkrRQMxhW78GwGNbiXb1iBoEpWC5JKHIm85%2BymZ9%2FW0IKV%2BSDUyA59BHxY6%2F0rzI%2Bxvjd5aOC0Vg9d7LwUCr34M%3D\"}]}\r\ncf-ray: 9f79b4566ffe5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8c5c91288013ec303176768694c9fa59","sha1":"f7a8af667dc5abf624c24b5077ba520b961e2a0f","sha256":"8efee44ea78ddc6a542c8cb7422eda8caa8fe14bdecc38f53938169b7a34e916","sha512":"2ffd654b17fe54af3926911495c52bae38a134b71e0e20fa3b277de629d91e6643844ae13b5049eaab77a1b40d9b5d7e9a9fb35c20b311f45213ed9198d305ee","ssdeep":"384:1eGBNcT6zVaakILby9kEZK4QYYXRPSPWnqDd7UzZuDiquFTKuWkb:oGBcKVaaVbyS8QYYhPSPyq1UzkWqubWQ","tlshash":"1982d0e4df5d6c4b8b6c8e0b75ae68568e313eccb8bc44057189187f6da06d9882125f","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:20.993536Z","times_seen":387,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/36/gQsHrMWuWIn6Jkwd.png?s=f1f892d7f39f91d3dd064087aa7febca","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/36/gQsHrMWuWIn6Jkwd.png?s=f1f892d7f39f91d3dd064087aa7febca HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 3336\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-3335/3336\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 21:34:11 GMT\r\nage: 4132487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42fdDi2yoD%2FwoYwds9syWBFZCwWMC6lR4Yv0pilYzF63wvK4WSDfHSE08fMKJ%2BzgqqdfL2HYDmbTa4itS58%2BMrGEbatAbo7uPdySJdQRn%2FMwAua%2FSFH5Q8Kce9w6DR1%2F0HjMfYoWj%2BtYE0Xn5w%3D%3D\"}]}\r\ncf-ray: 9f79b4579c86b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"e854ea172ea1455d57aa5d745e1dc42f","sha1":"c2f785f15edae97443ca79d9b797ba852cfc1864","sha256":"1dd33535f5407bea96192dd853d7bc6d0bdbb0d2c54346390b85a0ad5f60e925","sha512":"2ec28baca81d5f8741925447cc444f68e8c5391bd4ad6dd39b92bb87653f099f7626b3319f335eafea56aae99dd48993359ceeb40fafe0aa3f812cd1dde56b13","ssdeep":"","tlshash":"97612b37b4021545b7132ada866b3e417aba2136e3847452b864e36cd3bcc228904b2e","first_seen":"2025-06-07T17:06:06.356329Z","last_seen":"2026-08-09T11:55:21.069583Z","times_seen":409,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/virtual.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/virtual.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 791585\r\nlast-modified: Fri, 12 Dec 2025 18:11:24 GMT\r\netag: \"c1421-645c53080ffcb\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTaZO%2BIfQ%2BhO1zz4rnWvxvKQR5PZrTpcOvBt6hFl%2BSGV3FrlZBrXX%2Fg7UibilwOOFzknRiQdfQUAW8ztkbNU26riaKqL6Lv%2F1u2GffZhSJIPdtQpzWTb6xrAV8SOF39lVUxXQRGyHRM%3D\"}]}\r\ncf-ray: 9f79b46879e00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791585,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"e4b85a5354c330f4dfeb6b50aeba5d2b","sha1":"e0e558a960bb33f80a1db48d32d766cd2d923b7c","sha256":"e8fd18ce85e5c95a4ff21d2e6d654fde2a66fe396931c83629434857be12f7ad","sha512":"066754a192862dff9d8fe7685ba18ee0cde0a26d08b45c16675d23da57ca98c7e56401fc115ea637ea38994799b977cc0e62d058cdef94acc54a061792af777d","ssdeep":"12288:uJAbnVIOnKi3ScSaU4tLXlzn9Woyumm6+QrNx7MhAWsQ+58G+zFbNJsB4EK:1fS4L79WoyumxzNRMh/sNYzFNJsC","tlshash":"eff4235fcda149e3c25a43f30acab48945847b311d43d91bd4a9faa2a0ed1c0f67a7cd","first_seen":"2026-05-06T17:29:40.032222Z","last_seen":"2026-07-18T06:09:23.986608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1606,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":770,"receive":756,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/26/YhxpfaUCngU9U9zA.png?s=ef4e33962413316e2636f1b9c752c97a","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/26/YhxpfaUCngU9U9zA.png?s=ef4e33962413316e2636f1b9c752c97a HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4573\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-4572/4573\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1098174\r\nlast-modified: Wed, 29 Apr 2026 17:56:17 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JBGR98C%2B3uoTu3qhYdK6oxQQXwQo07EDOt0zgBbmvmkR%2BSRw%2FReg3jA%2BWjmCu5IQVGoqkw5%2Bfv97dID7wWRMGueS2KqoI7YAoPV42uVRhAvvczo87OZ8NtF0KiL7p9v3IDVuczIobuhnGqlrA%3D%3D\"}]}\r\ncf-ray: 9f79b4579c5eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"12bf66b65e03d95b93009c857839dadb","sha1":"83e55f58c398e9563d2035cd21a473dafdf401a7","sha256":"07e3469d59387c8ed146a45114a0ac0c2f193c054ac36c515c9d1e4d7d90d1ed","sha512":"4e45e4edbc4c4b5b2bd8d4b75ee7983b2d4e1e8833f4e43f9a6c50bf30c27df2795c034141630a1ee286a8886930b2119fe2385f0a5fd300f6629a17a19a8389","ssdeep":"96:9Zbmg2hTrnYJcSqZg7sWaZsAPy9vBj6W2UwrvXzbHe:9972gJnqy/a3Yv16y4vXzb+","tlshash":"6f91bf3acfd166aeb4c2dd1072ca4a8594dc489f2389d941ec85c1c8374bc4e04475df","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.050218Z","times_seen":415,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/main-bg.jpg?s=c01af1c6edd24b60eb5f28c06f6e6762","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/main-bg.jpg?s=c01af1c6edd24b60eb5f28c06f6e6762 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159203\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 08:10:27 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:01 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e28YJnXdrVdG51deyhDMayRNJI5FpyssYLxBYWDKJf71vmWdtyb9qMzPj6%2BTwomG%2FbbbTZRrfXKMAwc1QNY4B%2FiE9f0MZkiM4t08l0EBGxJ82jKcWe119UBSea0eWCDMVRCz4Oqybie0yFgDang%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4672838b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159203,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1980x1403, components 3","md5":"c00534ef98e7787e7910df81b155fdcb","sha1":"8ad3184cd1d8349b0ad6c44655b5b4ed296de3ba","sha256":"23543d70ca90ff2ba964fdc58b368d35f8413945558ac7f3204e61e68f998a4e","sha512":"1ce6379ad7506365a81640a73395477200224009b5c12a3ec70839185817df6dceaa05346bb3c6a6ffbaf219cce1033ed30776c634435e34a4cbe6e77c86aaba","ssdeep":"3072:rz6U3YH3ijeP5LY0dWixBsLxsKB61IGJtNXyG:rz6U3YH3iiY5nLBB6tJ9","tlshash":"32f3df17c918c3c2e96c66f5bd131caa1f84370dba667cba81534f9b3c612352c4e6ad","first_seen":"2025-03-08T22:01:37.821995Z","last_seen":"2026-08-09T11:55:21.023927Z","times_seen":27,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/popup/popup-petirwin1.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/popup/popup-petirwin1.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Apr 2026 12:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2246252\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2246252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"e4ba3c5441f82535b6c8010ffe3396a0","sha1":"4d5d51c0b7dc3cd80827af6fe8d0e7134e547062","sha256":"adb6999ac3caa49d6ec3ab8d873a1b45fa2af0f1d0a17b6b904ef2e17f5a93e4","sha512":"ce2f6ff7c38fca0eb26ddf344e8bd181871f8b774040a3c1eeeb6d8a567d03af85c8e866030426f98f80490a293d7955bf8f097f2267b698059c26c082373c45","ssdeep":"24576:Gm8AKUVTDxQM1a10O+qzhZkuClUshbdpcbs:vtdx20A0UGdpF","tlshash":"392533e199b37222c4411ebe7e9f0a0b4d4cfb31b1eb147b53e9b4a370446d17c81a9a","first_seen":"2026-05-06T17:29:40.037143Z","last_seen":"2026-05-06T17:29:40.037143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4471,"timings":{"blocked":940,"dns":0,"connect":163,"send":0,"wait":199,"receive":1654,"ssl":1515},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/9/5eZSoNx0KHg8HJnf.png?s=397cfc7d69330b33c94ff28eb7a09125","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/9/5eZSoNx0KHg8HJnf.png?s=397cfc7d69330b33c94ff28eb7a09125 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 127419\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-127418/127419\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:41:50 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1931810\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIIq3CyBj6FmzDgh9pEJRID4YXBbKeTBgEHppdZ4isRFXuxB88ZC1fHkEvEpaHt5r%2FqtOjrUifyPVF51GvC8Vb7BNO63FAr6amZau1vpVHB1cUMz4dRgSd%2FDJxlc%2BvnD5AOnjmS919R5VIE8Dg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b5ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":127419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"a2ececd572ab58c1bd844a3f59a2823e","sha1":"60d439bb936e0e3bb749b98c02fac844bbe97f52","sha256":"e8b40d1ef7d19ca81f54b12b71db8046a2b6d95ec3b825e74d20913223530bec","sha512":"bf4e02d30da51e8c7cbe39dceab33e250cae0cf04f9bd90b9e7ee5e78df9093d58ba0d79df4c98eea1bbd1f4f3e91f95e51944d3642f057d4740559a266f3962","ssdeep":"3072:h7EAR9NTWLQ753ydj3SOYWLf3/T49BpUg7ivM3Z2IxPRgs:hgAR9Yk75+j3kifb490KiMZ2IxZgs","tlshash":"63c3125dcea5d332fd3bcf20a722c68827aaa4a45962ab7d38402f6814c3576c05b71d","first_seen":"2025-07-09T04:38:23.156338Z","last_seen":"2026-08-09T11:55:20.956638Z","times_seen":293,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/64/xIeKDf4Wu7169iak.png?s=d45ecd90bee9ef3281a6e62c9941df54","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/64/xIeKDf4Wu7169iak.png?s=d45ecd90bee9ef3281a6e62c9941df54 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 134378\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-134377/134378\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 05 Jan 2027 16:19:53 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1690229\r\nlast-modified: Wed, 29 Apr 2026 01:11:15 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFtgd7P1zrohS3oTK1lZ%2FHQe74ubukW1h1%2Bjavg8flLvGGb3L3dL0C1IBKSG%2FqdA%2Fvvb6BAnXt4JuLuiFBVgWSc0mbRsNNiSflkeyfOnThAtO58LO6wZsaCkm3PC2LZRP%2B3KD60EevUBMuKXRw%3D%3D\"}]}\r\ncf-ray: 9f79b4575b5fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":134378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"c660d91479fe8273e7649e7c667c5012","sha1":"f8bbd7a7dffef2ba5ebfa22ea72c1995618448c9","sha256":"bef6705a2c03f1c553be314da12e4e8b65733c91b3ea877a22dd5c36775a7958","sha512":"12b4b12b1f1c47ba4f73a8c10b30fe04452a8177d98cbfbab018ecb8ece0e1d22bb903f0801e5273182c817b9c44b095faaeac72b72a898c1ad1b306ed203353","ssdeep":"3072:z7nPAdF6fzrrpVNTJnXQhM49gF/WJ2SOWnXvrvp9+9m:z7PAdF0zr1fTJngjc/+2hWnXvrL+9m","tlshash":"88d312a35e18cb21e4fb7fb6c1814175bef522309b1cf31f85ad6821bb5f196062153a","first_seen":"2026-01-17T15:04:12.8742Z","last_seen":"2026-08-09T11:55:21.102327Z","times_seen":136,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/8/qVj2pc4tq5jNTETa.png?s=1f2d4b59d3451cf46899c2e5c69fb208","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/8/qVj2pc4tq5jNTETa.png?s=1f2d4b59d3451cf46899c2e5c69fb208 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 13723\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-13722/13723\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 02:19:35 GMT\r\nage: 4201762\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FFy2q%2BFFHTxZs%2F6da9P2bOB9gv8yUoSlkDhtb%2BQKhNK1t5qr2tbJMhmR4HZ6eqUFbITq4ZGHmF1gT8yq9ZdWfii2ZJ0%2Fz31%2FyKmU%2Fzd90si0XzCOYJSnwhlV2G2IRoQnQur6USfFFis4bYvuQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"18c2514003fca3e37b4cb752c6009cf6","sha1":"c0fa1810dfe745c48fb6c11993736e14d1639478","sha256":"965f13798ff2b617514deae6b406eb8ab372efacc02dedd866017976c4b4dffb","sha512":"eff03d141f8c2579aa736e0023270ad12eed6c6167d5a351ada7ba8a0eb84a033ce968474a967d3bf072bf2a842d9fa6e7b71867c879dbdd3fb3aff2604dd973","ssdeep":"192:SwB7cS1J452hn9oHPJVdq7Qs1Mz1G2kxSJQcBCvqCft4ysWLCCArXeqSVG3EVcap:lcJ0SNjFkM2NqCZR4X7YwEVh","tlshash":"f652c0924c7f8d4bb539071ff661ff2ac04a6a8037e1ee91e0a9d5a1034d5fa021e919","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.131834Z","times_seen":424,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/13/TIHHJatZGX0j0E7O.png?s=fa3e860d0ce82599df6938a010f1628f","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/13/TIHHJatZGX0j0E7O.png?s=fa3e860d0ce82599df6938a010f1628f HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 8139\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-8138/8139\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 22:53:29 GMT\r\nage: 4214129\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqKtinzxZizeshCO1Lmfq1u8i4FtXgYIf62OhCSrWwj4iIAgkDJ2sUq6fhhQn9BfDACV1Or7o90cVpD2re3m3YqC5xFO3ZIXTUacYkOy5bN%2B08bJuQEKtljvm7uUHgZOT4aFPYm%2BXqeDYUOvfw%3D%3D\"}]}\r\ncf-ray: 9f79b4577bd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"cba3dbd3c76bfc4012f0d4ce27d36379","sha1":"91cca92137df2dbbab2c2aa3486afff2ec5b1e5d","sha256":"8746fd05ef482bfb4c4e0dd1fdccdcb6cd02970ae7ec7b8dff29b7bb1bf7a610","sha512":"3e11d7a3ee5ceba109fe1168466efc36fef3181880e23c8902ca1bf1ebe343f6392dd11e98ae8d1d13586cc5dcc2e443c227b2ce1f65d4d627513b3664994770","ssdeep":"192:8KmmQQnL2mQluGjCfq3RV6ob2IBNilKYVnQpI+vOD:BmNQnimwsq3Woq0QlKYVnImD","tlshash":"12f1ae1968796896c38a3fcb38b200a523905e4cd749388cbdd0b5bcacdadb600b44ad","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.135432Z","times_seen":424,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/13/PEaoYuBeMI6hH5zd.png?s=23564c422ebeefbb4702e83def173d05","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/13/PEaoYuBeMI6hH5zd.png?s=23564c422ebeefbb4702e83def173d05 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 50099\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 04 May 2027 21:09:43 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BDrBp0qe7I%2FuFvdd4l9IItedd1vTJuQZBkjrzYP%2FH0nI%2Fi%2Fj9IOnSbSRV1dAGFlM8fwhXfL6JF4hDiVdbSjjZA1fv4Htd5DkNwtixWzT57fs16nxU48T7NDObqOyrjyFF9gudioHblcyTZXc1U%3D\"}]}\r\ncf-ray: 9f79b45749195690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":50099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 412, 8-bit/color RGBA, non-interlaced","md5":"7fc7c9e63981fa72bfffb97b6ce38ba4","sha1":"03553da262d7ca405ebbf4d2c720dd23cbc47c64","sha256":"007bd2d315244baee4978f6897e1db4c7091adc2622b6fe60b5865a6fb485d72","sha512":"e922351081e804e990dee17e8c533bb333b3ef843b332088e744e8b273cba0e28ae77592dc34f7cde6ff6993b99d62419dcbe93099e52ea4e6ccc96e3991b996","ssdeep":"1536:dS9trzdz2MhSHmJ+z9QcNS5Xk0GuapYPWkl:492gYuwSS0Hp","tlshash":"e623f178852bc126cebf0bf0715e46a86e58258e9054fa36303cdc1dee8fa65354b58b","first_seen":"2025-10-15T04:39:11.468009Z","last_seen":"2026-08-09T11:55:20.988378Z","times_seen":12,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/5/TN7zdjgvovZzcRc4.png?s=d5d3a30e4c3e6e157bb3d162445c8394","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/5/TN7zdjgvovZzcRc4.png?s=d5d3a30e4c3e6e157bb3d162445c8394 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 143611\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-143610/143611\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:18:27 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 22:01:19 GMT\r\nage: 4217259\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8TNbZCUjZcE93kpph8Rp4x7lr%2BZoxhbvr%2BukqctQSa%2BpuYflHRvIKsMlMc2MjHE6%2B2YIHXVgotR%2FwhiCLexIM2qkqmTAhiMzwzMRSK8yQkq7I8IRuZFA8hs8mrnfaSh7bBnNvBC3WNNX60haQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b43b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":143611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"9ed55e04732546f025a7c04494f6e023","sha1":"b5e846f9695ca66f1cbaac4cfa18335babdef828","sha256":"b3508b7af9f23181aa42a070d1411f32f82db3a5bd7cf2c18aefe287776616fe","sha512":"1fedf4cbe7259ffcbb6868e8da6d3c9643f383d09ceb57747b4e34a2d9f851841771f3f9dfbbf0fd6e1a972d8b36bc2429460a67d30ac08359d021be5f0ca004","ssdeep":"3072:/zoy9QMSpQVYE6RFmS7uz2scZOorsAbnxq+4mARS63Ory7rsZC958:kyOMSpQVYE6Nuz2r3rsMxqhfSJ+7g0s","tlshash":"55e323c57dc2823d0afa4130881f16fb35693e56c24e38d97cf98bac3f74a952695e06","first_seen":"2025-09-06T09:10:09.896037Z","last_seen":"2026-07-12T20:13:29.300375Z","times_seen":102,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-5.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-5.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 445898\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":445898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"9357165a7473e130ae59c85fc8c21db9","sha1":"30e01a8ae052777358385dd6af9b9227cf9fd599","sha256":"e6a5a2ff8980ded812e72f506bc5a5aa3d6145c665586f2fcd8e2feefff7f92c","sha512":"8ef784ce71b3ce8dfe29154602cba368bfedc56cbc55e7ba06ef39dcedf7b4ad48a6e96188e8c17c0ae53074f011e5bec05b98515aa226055c1a3a6c15c4dab4","ssdeep":"12288:/77RJsPndeYMNy/J6toeTYrYCDDXzmlEdeH7:cPdenNyI5Fajtob","tlshash":"9994230d071768b3de3e6df73bc2bb4c51d44d2ce868ce046476e295c45a2caa9fa489","first_seen":"2026-05-06T17:29:40.044944Z","last_seen":"2026-07-18T06:09:23.992103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":643,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/8/8C1SyARjimAKLuoZ.png?s=47eac78be553890f84cbf6334f2e54ad","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/8/8C1SyARjimAKLuoZ.png?s=47eac78be553890f84cbf6334f2e54ad HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 4108\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:59 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DB%2Fp4WffW11L%2FvYe9lxKkl4ACqMnWcI6XAJSzYUqa4KsdRM94%2BQh0OwC9tXf38pDf%2FZMdCD50F%2FjuubjtLOxN9FKQJqVujRsFu3KL9N%2Bm%2BOFVVbPxmgaX1d%2F8ggBTVmXsKz7ZphKDXDFE2LEj1E%3D\"}]}\r\ncf-ray: 9f79b45718f75690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 70, 8-bit/color RGBA, non-interlaced","md5":"07557c11b9141036f115fd72e35edc82","sha1":"b3d9ee6f389a1818b2e114235961b163c88ff57b","sha256":"af8620f3be9b42b24d75217bcf6c3314fadada0235af00e820f238974ec8637f","sha512":"1071d83680eec74905923362bdac0537a334217ad39bc8c0bfd43e5dea78b44fda44322b2c13d4024ac651f03cbba20f160663382f40964102efec8c78101462","ssdeep":"96:AlP9eNaQDUS6qky5TbsHDZ/DJ1vWTe3XU4q0x:GUNpDUS6b6sj17vWT2R","tlshash":"77815c18fd6ba614fbcac81e27cc33b679066e5f8b139525f11c658a44db03213f8da8","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.08785Z","times_seen":321,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/1/hP4uaW1j9K2AlyVv.png?s=0c1a06e119b58acd698ef1091217d552","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/1/hP4uaW1j9K2AlyVv.png?s=0c1a06e119b58acd698ef1091217d552 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6132\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-6131/6132\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 01:26:35 GMT\r\nage: 4291343\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwM5ot03lPPi6Cg23INVBcFytsXP%2BeosfBeamhBogZR6Lcq3eeuL7Gtrmki7osR4cyFhHLIAm9INhWGD%2BBx7o5OJdlWakuzOTi2VpbwfivZtOXBIVUNrQet%2FXyBzmUlZjtnoyXEltXUKdxGoaQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b60b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"f308306ed5f70a83b0e1eb4a1f6923f6","sha1":"a85ae009d41a7c2cfb7afec3ff3b332fa10c4671","sha256":"ac2e34bd0589bdf30a35065c67e51ef303f78944f9b1070279b86e9ed34c3481","sha512":"4a441f23c188c244a3ce2505eb7f174a55f3b84829d9cead1df3a3c80cd70fcefa23cdb0eb10b9ed60fb57214f0a7dd8d295849fecf004e3ecf35759760b4115","ssdeep":"96:uLaFh6Ejq0x2+e+NDaxwt9wYgZzvDmqEIL5uEgie6E/4g8abyOqfMENTq5YJMYDE:uWOE+0x2+vte57mq1NuEve9wgaTMENWd","tlshash":"15c1af9264019bbc600045acde4ccf449d2a8323592a332279bcb32eeb3ce58d9717b6","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.080932Z","times_seen":425,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/welcome/1/38IsgnoPz1qigTtl.jpg?s=c54a4c9e8d46e7fc2b5aceadcb2b1ae7","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:02.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/welcome/1/38IsgnoPz1qigTtl.jpg?s=c54a4c9e8d46e7fc2b5aceadcb2b1ae7 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 326419\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 23 Apr 2027 06:51:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:02 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efOBPbMyqobt5bjAlSyhKqZp1MfgbrkVPPPk24T7ZLezWKAsPYAtS87iySW7z%2BUbIpucsKmacKEI8LBmlILMGoyniii12msfRSLHdmgFMTSNErA81R4GTw4DvFjbZpjIYXbixCDth6K%2FmXJh40o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b46bb8ceb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1280x777, components 3","md5":"89cb750b093ec50c5c9318e605ed309b","sha1":"261e525eab9d5748f2a01b88a4524be08f300c83","sha256":"2a3c1517e2e3be52dffb98cec70d7d5da46d8c7b9fdffb3b6db85f3615b51f38","sha512":"e3e053c63d3d0b3de5e6ed9f27e9315786b4c758256e9984dd8b936ba328cefabefade623155d97eb696cd19e2721b100e5af2f7a7577a6d2604ebb6a4f8d8fc","ssdeep":"6144:bMwVrUH99OdkPDk5njizMBjrnyeas6p0B8b83e/+jdFZ1E1+fFjc:IwVwSiDk5j9ylX0B8ueWLzE+FA","tlshash":"396423bd6185e9e2695c276e5090ecf4c3b90968338511ccdbea4037f78b5b03c5a6af","first_seen":"2026-05-06T17:29:40.0478Z","last_seen":"2026-05-06T17:29:40.0478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/book.png?s=966de68cbed901786ff61b13eeba2fa8","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/book.png?s=966de68cbed901786ff61b13eeba2fa8 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 2226\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjMGluIPVu2yXEmRHJmNrV8TNTj8WxyGNXsAYKzK4dEFfk0V6wwlOwSTl4R5oTMUg0mQyp7A2x4aRDHez0OjoVpcdVrIvXG6w9jk94JLBBXLvj%2FMsFijuqhihGsmVNaV%2Bbpf1TyynzYNT7jdfzY%3D\"}]}\r\ncf-ray: 9f79b455ff605690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"87494cf8a318889ced6c7539bd61f85b","sha1":"9ec2acf0aa3646a6428fe1a370dfe04c955e94c1","sha256":"122f2c112fab71dbb970291f53c2825c97d7325bc474ea98c9ea9754dda7f4de","sha512":"eff047db91dc7442949f9316a8b0a6e8cb90cf13cc37f55cae2fffd24b7555a52117e5b87248024b8156a69a707ba07f0ea20389a821a72d752d8d4fb153a649","ssdeep":"","tlshash":"ac41944240b7da2553d66c232f61f329930833ef1d05baca36fb91a2257605b99b734d","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:20.985602Z","times_seen":366,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/15/z3JBuC9gdC8YRGi5.png?s=90fed7dc3a7804421e6c655d38f3d99e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/15/z3JBuC9gdC8YRGi5.png?s=90fed7dc3a7804421e6c655d38f3d99e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 8186\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-8185/8186\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 23:31:13 GMT\r\nage: 4125464\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmSgBPVcrjcMXsolcWVsetcJy%2B%2B2cMc4HUf0bvpgBO2ED2bx6VcPUeLd%2F5sb3nZ5jxHgBilZyV4tXc9vbTxQxlA3UUo9Uf8W0n0HHWtmR%2Bn6WdhwS1fZYCdEt2mA1UEc%2F8r8LBbl64cKb3oWzg%3D%3D\"}]}\r\ncf-ray: 9f79b4578c2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"12ce1af849da0cd6e7b9cabdf0a31892","sha1":"b283c32e9567eeffb9c5634b0f10c5c0c2374fd9","sha256":"da836e1ce37d3b0f9ecede07569202213c5a65709942f072aeeb9cf690b60dd6","sha512":"41873d824bcd50b48ed3163c7d26e4cc209053a1ca4e82a83e2ce56dbc5da07e0c8a00a5ea1e4a1580a0f068293ccc70d4f2c8a40172f19cb831a58b68cb6ccb","ssdeep":"192:NA8xE6wZRlhKKzT9Dc2EHiAF0uZ8QOwlKa5+Nq/D2xfYOhOlmH:Ndxdwxd9UHiy0m8oEa8NqipY+Ols","tlshash":"6ef19e5de6e952912e48eb4f015bc519d2ef27813c02512f8f7c237aed2734bd10ba92","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.07337Z","times_seen":424,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/24/OxRGZisxBcqAj8eM.png?s=49da75707fdd923721f606337fd4c28f","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/24/OxRGZisxBcqAj8eM.png?s=49da75707fdd923721f606337fd4c28f HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 2944\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-2943/2944\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1097471\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoiTz1O9%2FrjUVolCx3gwk2M0cTY3Eq8UJfDd0v2XGlzW5O0UvPBigxAa1M445Xe5G0it%2BXoLLDx2bz7wyIHDbOVsxdWTo5ZBSMDe%2BOzRU3gKVBPy8eUi6agbC941kL02M1i1wulK8S9zH8Ua4Q%3D%3D\"}]}\r\ncf-ray: 9f79b4579c57b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"13450417eae29819145dc0a74a390641","sha1":"80bcd8d5f59a01f6ab28435e635bca28d35d955b","sha256":"11a74eb49d0716643051e9fa3c63b2aed43a4dd8115ea8e660f7b8c4c0f76148","sha512":"41c55a5fa4a4c9d190a594f230c5163f196ef5dfe2cef03d8c122c4d8d7108a2bd70501c39d1e5b9dfdb8f284d111ec3ea0bf2a970fefc943b23f8fbb275522d","ssdeep":"","tlshash":"9e515d93a235a93a87589686f94b7412fde519b7c950f21efb162b53a0841828f4cc3d","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.0442Z","times_seen":425,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/34/ECNzxNfUvkFm4fci.png?s=ed0849f8c5261b233b51afae96f1609b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/34/ECNzxNfUvkFm4fci.png?s=ed0849f8c5261b233b51afae96f1609b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4067\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-4066/4067\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 02:47:10 GMT\r\nage: 4372907\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlhlKl02bJewqpgeVP%2FurFKGTG799vBermbUN3zyveyIYzb7q8cubgyWl%2Bze4VG%2B7nYyu6PJMl%2FH62FsTQa1WZ2lJUmxvc9vWKnXow9zth4uWKrFoxxwKNw7JdzWOAFi1w2j1hpZZG50%2BLS5xg%3D%3D\"}]}\r\ncf-ray: 9f79b4579c7fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"efa22c9900c6452a392b304cb9cd6553","sha1":"8fe215b8246d9f04e475aab0c0ba2b5b45006a70","sha256":"73c49a4431180f48d0c4101507220e74bed8f1936e8a3a63077c5c04f09a7ec3","sha512":"9dbf1f0ad8a20025161c11040743b748d7e4aa9f8daefb6367eee8ccb0c0fa1df8aa85891a5fc9ded9b6039bcb2be9dc8a15511a98781a480b7b7fea653c2dac","ssdeep":"","tlshash":"cc816df144f60caf6f7c45203569fe206a1115588e150a9e7851c83bf432afbe999ec1","first_seen":"2025-04-08T02:51:48.308126Z","last_seen":"2026-08-09T11:55:21.146784Z","times_seen":411,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/fontawesome-free/css/all.min.css","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /vendor/fontawesome-free/css/all.min.css HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4LrQysVtiw6kH%2FkwkLODkaCD%2B3t5ii%2FmsIY4frcE2dcz6TvAJi4s82i1OLxLTcwn6Lb7xdv7kmdhjHuSgRu1oo7nqY9dNZFNNJfXS0VCUaadEuOMwVynDW%2F6ZLJKSADgFHRrNGxDgBT2pZ1xls%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f79b4554ee835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-08-13T18:33:00.500431Z","times_seen":15263,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":52,"dns":1,"connect":1,"send":0,"wait":192,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/css/Poppins-Regular.ttf","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /css/Poppins-Regular.ttf HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://petirkuat.shop/\r\nOrigin: https://petirkuat.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDBa5fU%2BQhi12AATrAUw46EY%2FQgci51b1fk8V%2FOBO2ou%2BGf5x%2FHm1HWD6cVKYKvIEzo7UaGUl%2Bfm68P6GhOLSqYRJNiTkAlmPr8jdOcUnD%2BJfX6wxQSmyNhTYMXYxXyWLc7SacNeMf4EmjVcXTQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f79b4559f79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158240,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GDEF\", 17 names, Microsoft, language 0x409","md5":"093ee89be9ede30383f39a899c485a82","sha1":"fdd3002e7d814ee47c1c1b8487c72c6bbb3a2d00","sha256":"707fdc5c8bab57a90061c6a8ed7b70d5ffb82fc810e994e79f90bace890c255a","sha512":"4be480df0b639750483eb09229b4edcfdcd16141eb95d92a3f28a13bf737146d7cc5db6ad03a5cde258f71b589e5310b6d9bc1563ac7b1d40408eea236d96f4b","ssdeep":"1536:iBLCaPkPJr9Q0T+GNqUESJ/8w/lF703hmTWH6lrGcRAbf9EpthYp0wf0IDh1jlG4:6LCY8zQjGfJ/AaHjxlzOk7gb3Va4J","tlshash":"50f3091bf6e7ceaee7672a78ea72636614dce8362d7f454b23016913e8da441cdd0301","first_seen":"2023-04-10T19:18:16Z","last_seen":"2026-08-13T16:48:27.004567Z","times_seen":7068,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":96,"dns":1,"connect":7,"send":0,"wait":290,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/15/bB5pJwPHpcwM1ddA.png?s=0fc9e9002971199a08b68973dcbbd81c","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/15/bB5pJwPHpcwM1ddA.png?s=0fc9e9002971199a08b68973dcbbd81c HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 142069\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-142068/142069\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:19:15 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 01:21:08 GMT\r\nage: 4118870\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FS%2B93swi%2BRrRHd0rHWJxGWgqwELGjVOkEBRTXP6nq3xv8Pbu7htFjbqoLee%2B6F5H0%2FdfeFxJ5xgkxDZo87ntOuD06TxZOcoCUISq6uWbjjAraZJamUT7%2FxzCbzGZ3PBIOQxLI%2BQ%2B4sf97DHV%2Fw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b3ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"c6afdf7eaad0ada0f31247d8ed880ba8","sha1":"4c4df3c3227e7632101dbf47e58e722a4ac0e251","sha256":"1d554188c4891c221e5c5d33d171589788e98ae0747a0cced33ad6b7a4428a98","sha512":"a5d0a55bb41f9e57087d943c9a1bfab26237467ad3b407ecf2e48cc953dc222f503fe50ea9b808acb3872a21cc003a8c599989eca492e489351532e5b73a902a","ssdeep":"3072:10WcudNo8pKlIghYpe/quky0ffpzAzqZxUto1YYSwF0163J:LdN3UIpnm0ffp+UYYBF0k5","tlshash":"8cd31241297ea610f008802dcb7b957c6bc06b5963cf3589481edba3a68f176fdf1751","first_seen":"2025-09-06T09:10:09.859792Z","last_seen":"2026-08-09T11:55:20.945413Z","times_seen":144,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":28,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/16/1EztDL1p1Q95q433.png?s=33caeaf404c9c7569c3fff9c9a5ed15d","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/16/1EztDL1p1Q95q433.png?s=33caeaf404c9c7569c3fff9c9a5ed15d HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 130156\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-130155/130156\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:35:52 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1713175\r\nlast-modified: Wed, 22 Apr 2026 22:31:59 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXbH4GlrJFMtk%2BeI%2BtbRc%2FYrjmyscku8xtckSeFwiXVZOmR2LQErxsfpEaf6o3z7gdEv3WOiArBnl2JX%2FY4H08ibkSjybD%2BhmuaXITCvFlVnXsSHytpmTnuq0hirbu8lk3jzIUooTtQ9UNddTQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"eea47ca00ae927d96ddf218d0de9abd3","sha1":"6947ba762d4b7582d674cc62e0b6d538c5124877","sha256":"43e889f9b27ed82f9e880f93987432f5112d3c329f43f3771d5757d724ea4944","sha512":"7ac5d0ffc8453fbc3995a27ae491695aee791bf4aa1822335ef69cb8a12ac80e56a64b60de448d861f0389a35d526a6dd9f51e15927cf69e35e88647d1770f30","ssdeep":"3072:fUThNVfk0bZ5n87lOpKiyWcjvU1TmqfImw9JKFeY3kXWSUB37:fUNNVfVaOpKNWffxwHkeYXh9","tlshash":"58d312b546aaf9dd391bd79d2779d26c13a140e1eb784bc0fb3832dd4780a86891e07c","first_seen":"2025-07-09T04:38:23.163384Z","last_seen":"2026-08-09T11:55:20.997442Z","times_seen":293,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/2/w9D4o4hXE6Ffxkct.png?s=0d3f7c6effc1f0253f6e2c444b7f90cb","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/2/w9D4o4hXE6Ffxkct.png?s=0d3f7c6effc1f0253f6e2c444b7f90cb HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5793\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5792/5793\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 22:40:08 GMT\r\nage: 4128530\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yStmsrESbshTpZyRgOuorRM6uU%2FKdXot1bLqKOzwnAttqMhFOrqMRTg7pby9hGDC0iVaWMT80hwn3qyWAjDKcovgmWwCRPN3yndmZCiORD97wVK82xQpwbyhnCywJN%2FhcJcoookBSWz%2FPsesNQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b62b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"2b0c853f0446749aa135f7a56693ffc9","sha1":"693132dd3718051e673f02c0f056697c532ea6ce","sha256":"0921922da3ba575acb44538f5d606061e20e5528a470c6f61a838356fc9e3314","sha512":"22dc5c23443f9ecfe6feef40c7824ca10e564a287ef098c7f639189a2071558a52e61a7f7ef9b4aa1279846e19571c08d27dbeee82e42c032b1b4c1a5debb418","ssdeep":"96:FHKFCPlBhtwR92Sr1DEukZmZhYK/WJi+59M8NJn4p8ZCbGovx3HybSsLle21YQsj:6CPNGRga1DgZ6hJ/Dk1RoJ0wGRW1yJP4","tlshash":"62c18ef1edbac07b4a5e4153bc01c16acaaa25eec64be8f351c9938dec413703acd009","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.968409Z","times_seen":425,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/icon/rtp_icon2.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/icon/rtp_icon2.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 19:59:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92173\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ffd3dd868109e7100d6ea24b9559cbd8","sha1":"7272564d852d951dbdd3ce1e5b66dcb927f7408a","sha256":"23e9474e9d08e7b93c545209b61ed40079cc7b56aa27ef8f4b9844b024ecca25","sha512":"0b8e149adbc5e0731539f9af7e3e33effee5487d7f262c02276b58067251d6f2730b5ba3bfa7d5c7fb681e26e307f9e6b08509b9a1d9523d01f271d7081ef242","ssdeep":"1536:Pwa/OqPc/yXVNPhrrF8fu0tIb/7fN6qVUW2/pJO3Bw1M7+TQTnSZR9gXLqiXzqgd:oa/O0c/yDPtSfVtI77MYTSeB+fAnazuv","tlshash":"2e9302d1b348edfdd9cd7934b0fbc66bc1973e7528f0597a2a4f82424d206b290605b6","first_seen":"2026-05-02T14:44:32.560212Z","last_seen":"2026-07-18T06:09:24.036595Z","times_seen":6,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/21/Ne1B9q97ZW6fSA4P.png?s=af060eb94b66b2290ecfcf72f5661f5c","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/21/Ne1B9q97ZW6fSA4P.png?s=af060eb94b66b2290ecfcf72f5661f5c HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 131650\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-131649/131650\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:38:45 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Sat, 28 Mar 2026 01:08:57 GMT\r\nage: 3428401\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkfC66Eyoh%2FusW4yUZ8Nb15MXH83IQ0gVs7eiwaQ5DGwi0Sxsw8aIyw8ohvVa5LKQ%2Bdon8Qg4DEUCCCCNLnK%2BUlXh1t5RXI5sKFuNd9v1qmBLPEBq3ThFBM95RbWeCrsBv698i94MjuRI2XaBQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b17b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"dc06c592029136fa2cac268b090f4b9c","sha1":"28bf69c3b81ebf346f0989f3a0ba3964f5acaf2b","sha256":"0190e174d75dcf0d8c8cde3e8a55176151fd024cfda0be7424054d27eedcc564","sha512":"74880aba5badbc8e208f73d98b8ad76b1d2d47ff095f3f2a6412674dffee1d1bbdd6c224f654d50026e958238735c8f839b0c563360feccf7d9e29f53c26809f","ssdeep":"3072:01z680qFwirwg2CzGxQyrf3XqJJFIVFAYLxQqeLVFBY8Z8gpPmP:M+irwg2CzGxnCkIX3NmP","tlshash":"d9d312f653bc8ed5cb535a0228273b3e01662e03d5d7e64d10a462f1eb8d8cb61a7b1d","first_seen":"2025-07-09T04:38:23.179106Z","last_seen":"2026-08-09T11:55:21.016396Z","times_seen":294,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/7/HMpuXIrUfXrysLri.png?s=b18cdbb6cdfd597b4582d3604ba17535","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/7/HMpuXIrUfXrysLri.png?s=b18cdbb6cdfd597b4582d3604ba17535 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 131674\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-131673/131674\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:41:24 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 01:12:20 GMT\r\nage: 4119398\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9C8TYJs07HzoIFPTQEcxALaCll8sL22dAzb53%2FawmT%2BEpZF5PaEqeweumr7Ykwaink%2FgSh1kV2a%2BQHWymbmsWu1a0IfhH6in2WuxysGK%2BZVtw3nQ2BwnNC5yH4eT5W8yCq8VXhX%2FgkIS5Nsyg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b58b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":131674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"131003e94a1892a055ceccdfba0770dd","sha1":"fa3d415f024aaa29f5a03e6b013b257547187b36","sha256":"8096468f4a770436ff8e351700acba06782c6b2f2c4e922df6539d6251f33496","sha512":"5542acb61e231a4d67ebe90a5b7af18bdc6409814a247a27ac1d6e841e584e7a3ed9d6105a851bac6de2583f55e61d3fc176886ac015785fb8e6290758e75896","ssdeep":"3072:m6pMhBFTHssmI1gCQOkFgYeHumrYo9eDC5J7:myYTHFjG2sJwsC5p","tlshash":"68d3126be2448935eb4257b9e35afb0257727de30a5b8411316c972e4f0ffc11b82a52","first_seen":"2025-07-09T04:38:23.189148Z","last_seen":"2026-08-09T11:55:21.106572Z","times_seen":293,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/29/4Q4HAv8VBYlUHAjZ.png?s=fb6b8024aec84e0d49d5dc459a1130c2","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/29/4Q4HAv8VBYlUHAjZ.png?s=fb6b8024aec84e0d49d5dc459a1130c2 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5689\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5688/5689\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 05:04:48 GMT\r\nage: 4191850\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vV1ZcODy4%2FQgYpGyvgzRajbHaawHLb82aydEiGKlCqQ3hHS4vGiwku9rWGKuYpw4C4LkY9egfWeonrQQqL3Lmr4i3o5w6l%2BdTi7YwL7MrJvhvCW6%2F%2Fy6rcfTN4J1vP50X14NjOegS%2FO%2BmPnW3w%3D%3D\"}]}\r\ncf-ray: 9f79b4579c65b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"44a7f075fdae5ad1d42faf5d060e1f9d","sha1":"cb468b2baa1d5597b2b6f36d2cd521e79e76bc85","sha256":"80cdb0acb09f4c8dab30f5cd6c832c98865e2edcaa473ce821f6b15e4f06f098","sha512":"e9dc906a497f78019e720228faa579b1b63dc16c51e8ef08a9a88cabf833f6fa5c40f037911e4908688fbe43f38c73c25a6fc0c2bf6aa1ded5f5fa0e47d61839","ssdeep":"96:yjQKUj3Pu8JAKstbnJbhD7NUeHa/7jJNvBz2uqJscZVo5kHjKNCVj/dwZuOWbKAl:yMrzPfuKshJp+qm1b+ZVKmKKFwZuOk1","tlshash":"8cc1aff6b24b11acdad04c50323c52a9b39adb6f80b7f1dce00466e1fe1b9356541957","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.975786Z","times_seen":423,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-1.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-1.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 552978\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":552978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"a58ceb4c70a65a4f509a0b5c1b7bf330","sha1":"fb058847bbaf612966da9bed4c0c5d21b346163f","sha256":"ae7e7a6124d5bc46d71903e2331b4fab133e0e95b752df370625a21adf4ce2a2","sha512":"3d33e077a2cd325086f0026d55afbbf6c7c623f51505eb7731145f009782ca525e622dc47e458c4ee0758eb2645dec9cb4fbbe427b21320a26697af15b838a99","ssdeep":"12288:wahFlASaY9xyMdnX2NNZWZgy4KXO1G5WIR9RA2e:w6deZcjO1MbR90","tlshash":"12c43303246ab966f3d8da39b8f8f4d57667d31de31388ec1015803b8449aadf18a35b","first_seen":"2026-05-06T17:29:40.068792Z","last_seen":"2026-07-18T06:09:23.966142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":669,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/togel.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/togel.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1554233\r\nlast-modified: Fri, 12 Dec 2025 18:11:21 GMT\r\netag: \"17b739-645c5304c8a10\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1nW5Kw%2FhYkmGW2l3sTAoaeRQkpr0yhHlrM77z5o8iDnBJ%2FrwXR6s3i%2Bu7QfuCWEfzmMpaxD7BuBenj2ay9XfR%2BKEhkKAxlV7eOGRsLTiXdwDzOkAzTw22%2FgANWblCfsVEtipu7DA78%3D\"}]}\r\ncf-ray: 9f79b4688a050731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1554233,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"f2f0c858284477b01b3f199e7a80b883","sha1":"d70c6781d43174e934317e9588cc5daebf1c7b3f","sha256":"ddf20241c5a5011338d8ec897caad21ca12b6f3bf2ecc7380acb6b2c6bf8bffd","sha512":"12d6375928c158da91324342e5ef9019500221a1aeed192a582df0048fb0d6705780e6207b824374fc5068b76b47e0ce5c1da68d5a8eeaac529434ca7accabb1","ssdeep":"24576:qIvqd2pDuy/rLhnNMXRMvew2i8iDcy6IJvkymkSS:qIvp1hnGXWX2i8BHQRme","tlshash":"382523f7852980cef63e8eec4c979d08545a80e3dd21a4261682fd93399475eb09ffe4","first_seen":"2026-05-06T17:29:40.07053Z","last_seen":"2026-07-18T06:09:23.977387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1982,"timings":{"blocked":98,"dns":27,"connect":1,"send":0,"wait":779,"receive":990,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/46/XXZ8IGid7TGHlra2.png?s=0a5cb481f658a0ceb47539f41e994fe0","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/46/XXZ8IGid7TGHlra2.png?s=0a5cb481f658a0ceb47539f41e994fe0 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 182502\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-182501/182502\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:27:59 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Sat, 21 Mar 2026 22:50:19 GMT\r\nage: 3955119\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hFKTRhR4S%2F49FXqW3XRNd3Krdi7MktAets9Ssg1Vm6SpPhTPU62vCj1DvWRUoFzMnwli4KAzv8l7rDFqr8xjfN%2BfhlxLjb0izLu7hdj1zyyxg8OT8XAtX%2F6vHFBT8%2FKvQHD9DBLbCuYWSYC4g%3D%3D\"}]}\r\ncf-ray: 9f79b4575b52b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":182502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 315, 8-bit/color RGBA, non-interlaced","md5":"fc6df19199f379f344d0b5dac341d7dd","sha1":"da7a98d6f537349d7a2d0595a9b9f2d2b866e342","sha256":"556638fc8b24c21785fb783f5c0a69eb8f679618ba9841a16f2fcf512c3a86bc","sha512":"f1830a4445a4651f2724b5cdc2ceb533d80b842fe0f0b6d21cceb999ea148e4f277b1e1d43ba9663eaa47e87eb39d49d7b523dc4701e54f801f72d50c84940e0","ssdeep":"3072:9Af7XjZXixGmispBKQl99a88nQTuduou1D5dMa7OosXTpUcfLyJSc/9X:c7XjwxGk+Ql98JE5t5dM8OosXTpTMScl","tlshash":"a60412ef8d4e8755a5bac38d773141a61e93b2fed9d8797ce00a81266c1344486fc3ca","first_seen":"2025-07-09T04:38:23.235559Z","last_seen":"2026-06-20T21:19:02.350923Z","times_seen":258,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-3-mobile.png?s=a6a5f2baa715e01c443800b8ba1510d7","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-3-mobile.png?s=a6a5f2baa715e01c443800b8ba1510d7 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 13594\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4WzCmTtRMcQ8lQPHxWqlOqw98JeyDZ0yAJh3yId6LBYLPmTqDuv98KMjw%2Fr%2FFKG%2FbFUWJxBUwSOBFstZ1%2BSYcNdNE6T1jejiYE6ZTYlcDbMA%2FrcWgFLvmpllaqlNSs%2BMLp2O3Sp1jB7O6nlkeQ%3D\"}]}\r\ncf-ray: 9f79b4561fa55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"a45c3e20a40d4217f48dc847d9925678","sha1":"c759fd3ef461bc686a9c2b35c1cbda5744d97243","sha256":"2e9edd1d6998e1a01806939249446e1afc3279d55afc0c18596d2f514f8fa79e","sha512":"0913ccefbe83816a29dc98e1e346bf4e5b76612a7779bcfaa6b8fdf9e126b85e0c8b720276ebbdccbef11f4b6a2ddddaf9082c707abd4ad6a76d28e9a88fb0cb","ssdeep":"384:36SSe6nJHDbvMozzyfTXr4YDAM9E3hblK:36rl1DbD67td2bK","tlshash":"5452d099e7b210a1512fa752032afb6d811b131812d25ee6c8a3a640b3481be1e7ed4b","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:21.08577Z","times_seen":388,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/9/J2i1YOnAlsXKrqWH.png?s=41e7eee31d70f7a4ac8b07ca093c5d2b","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/9/J2i1YOnAlsXKrqWH.png?s=41e7eee31d70f7a4ac8b07ca093c5d2b HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 6988\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:59 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8r1vv%2FlHrUzRlIDnji6pLYIYRr0XiJ6yrRGQW%2B6TIAWB2ipI%2FW4O0SmJE8ElyxOOw%2B3SDAgBLvLvwZSSu7cvfn%2B5P6KpRc8iZV4uuYOA%2FamV%2FwidJ1xOZ5Dgo16mhgdkS%2BaKVgotnzm7wI6Y%2FU%3D\"}]}\r\ncf-ray: 9f79b45728fd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"f7fa9f6e7d5a3523693d4bffbf30bf42","sha1":"4b48a17042bf71a32334a8fdef65a5672846047d","sha256":"f946157ab701ac1e02afe4561c85983fd1bfed35e73b63d8eb533b412162714a","sha512":"daeee84ce21c4690387e7345a4c1c1111468bc1824043af839d08d70453ae1011b41d23216edc44fdad57aa29f036a06a69ce317b05abeb5d891a9adbaf0164f","ssdeep":"96:Exvc9sLj2PDa8/Ptv23zbOfc4NONRAOgw/Lhkqrd3x+e2jfZfzz2gXj1:SWCod/F23O8uw/Lhk45oeUfFzzZ1","tlshash":"d0e1afbe5951888a1bd20c3bf40390854de30a79febac248511ea9f2db8eb860043b42","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.062443Z","times_seen":358,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/10/eT9FaHQYdnWFKL9b.png?s=4db849a0002a854b2057085ec5b72729","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/10/eT9FaHQYdnWFKL9b.png?s=4db849a0002a854b2057085ec5b72729 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6698\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAzgPgFaXZL%2Fb39qSAOjl8vDs4VfdnP3lgj%2FrkbI67Hcajzyri1EU0Py4jvxnDMcPkSiOyrg2aiSvdaufG2zr4kdLibC65l6Cn03yu37xQlf9fRsNwIFk9ckVUQ3pg8UhFbc%2B7eRMLV586cShGU%3D\"}]}\r\ncf-ray: 9f79b45728ff5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"a5aebff7de6ccf54892780bac3ba9b16","sha1":"814cdedb36a756723e05f0b016516f6315c8428f","sha256":"970a0f781fc5760863c82ac19f8a85c1d3a217983b2e11b3270bf6a59f23e3d2","sha512":"c03a1600b97650c011ae578e7cc57769af82a72a3d7f11fe0bb768a68f1cdf5cbc1928abbdfcfca36f0cce8a878d07aabcecda752f009e73abac2967cf8318ce","ssdeep":"192:ymiYR2dLylwyx7csH4+T0bn+CdCU3zUGTHjt:ymXRiLylwKcsH4K0b77UsR","tlshash":"42d19e428a0ae2121e83cfe0dc59b3d0196ad7f444b2ea543339d0ef5a914d4d5dc565","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.144684Z","times_seen":342,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/tembakikan.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/tembakikan.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 840988\r\nlast-modified: Fri, 12 Dec 2025 18:11:25 GMT\r\netag: \"cd51c-645c53084b11c\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odLurJKMSSd6NbyDz43GrhxvGvnGjkBcRnTDoKJJrFuBv%2FrCMOuJdvLgR%2FS1zxRtBctS5b6YCkATVnDAAHfKb0fAwRdO0Ga2A8t1B60JtAO8pOkAxeoefko%2FKqzkTCXEBTqpFT3nXUw%3D\"}]}\r\ncf-ray: 9f79b468aa890731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840988,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"179e87df9a3b85c3696d13ead9f13ca4","sha1":"e7630035d15f62b3a2cb439840dbb9f440b4536f","sha256":"acd5a85e1e700388f564f814cb92b7d37b297e4dd38fe773c87f0fc447be8183","sha512":"9b58720cc5671e0a1555e8b8b0356cea17f2be616ffbf878b95a7fb81d75f7cbd96c82b2e9cf2d87286649b4f05e363bdcbc06f0fbf4089fe8e106d6408af74d","ssdeep":"24576:G16pkAU3jtY/YXc1jUQLLdXqWv+F9BVVnM:snju/INudaLpM","tlshash":"33052315ccac5cc2b7b7e1f38602a750096cbdd19d5b1b76f10aeab538741b63ad0b21","first_seen":"2026-05-06T17:29:40.074397Z","last_seen":"2026-07-18T06:09:23.949474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1841,"timings":{"blocked":106,"dns":23,"connect":3,"send":0,"wait":818,"receive":790,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/18/8txgJayRQEb6bL12.png?s=669b1d10d409f465fda22de247387347","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/18/8txgJayRQEb6bL12.png?s=669b1d10d409f465fda22de247387347 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 13733\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-13732/13733\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Mar 2026 01:07:27 GMT\r\nage: 3601291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6WF6eM3q7G7H%2BRgeGKNeYQxz2CSY5MbT0W96bNa1PMlt2Nx5YxpU2fqw8C7iT62EM6gixS0gDE0BBAEL32bjHZedmkO19bsmBo4TZt574ocqWRNdFo2nzi%2BJs54%2Bvc%2BUoFB17bOEVGt56sOJw%3D%3D\"}]}\r\ncf-ray: 9f79b4578c33b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"95f2e929edc3e891b6f5b1cf7a3f5283","sha1":"f2dc85f3cf1c3d220ca8f881fa35a7edad5adfbb","sha256":"eae6b78d56fb6e937535b66d6609584483f03c164d7bfb3a2dd58dda89f1f835","sha512":"4731170533bf015656fa74688cb86e616732dd323a46553f29b02cd7281566290572da1a5a42dc14766e3a8298c2b74c8730240c33ec21a23e95982825351d90","ssdeep":"384:6DsOO6QAx3Is/yCWMk3k3wE3UErB1MT6d:vOO6BIs/yCcEwYr3M2","tlshash":"ce52d0b427efb06f13c59ed83b94c1a2ec6895ec5d7e8cd54fe1a30a85511664408c3e","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.0976Z","times_seen":424,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/32/ZUufeXvblsUsV0sh.png?s=fc71f7d2a7d40bb5db4156dc226b0a8e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/32/ZUufeXvblsUsV0sh.png?s=fc71f7d2a7d40bb5db4156dc226b0a8e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 131142\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-131141/131142\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:29:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 01:17:38 GMT\r\nage: 4119080\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIMXYtu06qaTjsBUhjBWT%2F997NTb2wiFG0IuG%2BROGj%2FREurOIiBGsO3ZQ%2BmELfePedcZ8GfjFsGT5k8sY1cvGqxENxcnQSHUO77u%2FeNcNEtr88IZWf93gYL6buBCaUoU9gDSSq%2BUz8BN0bqlAQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"6666d184ca6ade0d36abe4b0ee1864fb","sha1":"72e271c1c16624e21267a720ff9dceeb0987f618","sha256":"44ecdff7993c9dad2190054cc897c6fe761162fed0c34302cbeba6e557aaed28","sha512":"dd37e377530c949ddd8d5fbe43be4ce77bae026f83f4c5beda6690865ede3ae3079900058956a221c20f77d1c095899b0b5eee70171b0e10153b9b66156d866c","ssdeep":"3072:vXenqN0mVgeT1HA3cBJRQHQw0IUI3jgrFi1UN/bLJDse1e3JXudz:mdgHA3Ll0u3jUVZD/cZ8z","tlshash":"46d3120dd98b26505d0d5daf1d1ae4d3c0abab280f718aff1025facb2d571a74a07b23","first_seen":"2025-07-09T04:38:23.15445Z","last_seen":"2026-08-09T11:55:21.065903Z","times_seen":305,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/11/lDS4scCtfK5jn0rM.png?s=0de760c86f11e140c88a604ac283f470","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/11/lDS4scCtfK5jn0rM.png?s=0de760c86f11e140c88a604ac283f470 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 146319\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-146318/146319\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:35:14 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1935958\r\nlast-modified: Wed, 29 Apr 2026 00:46:27 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn9rK%2B6eG3Gs%2F6IALVrf1xHN2G%2Fu0N4kQSBnqswx4jfh1NruWJlkzz8yHcmWKj%2F4UKaRXBGed4g8penqK6sMsxS5EIag4vEX%2FN186WY%2BkT6tAokSAsKKHwFijiIiUsKmr1Q%2B4uK5irA95SnK%2BQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b2db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"9486f52e31f740d365258ac8233569cc","sha1":"37cad4e0919d6705494cc56af44c52c26e9d4d23","sha256":"d692bc5232cfad88784f52d229bbfb15c20b1ed6750992b985eaba9bc93275c0","sha512":"ae8932885b58e2a0a5b290d444e77b17e1ab7d6fffd9e291af520527dbcde7602d0a1f9a111c1dd310ef7f70dce8f5805e513e1bcd0d53be7bc7952c1a6db45d","ssdeep":"3072:KFD+lee8UoZUmoBw09CktRq6C5F4naJrcfHWdOpGXfP2VeNa1V:KJx/ZwBP9Cx6C59JYf2dOp+2VeyV","tlshash":"04e3125c4ddc56083a3d05aae21848a4f75e093ff4e926743aee5ced03ae7e622d03d0","first_seen":"2025-07-09T04:38:23.224314Z","last_seen":"2026-06-06T20:43:14.909029Z","times_seen":238,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/17/kFdpl9SeA38NdO7f.png?s=d01692b4234fe3f2985f293e266606c6","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/17/kFdpl9SeA38NdO7f.png?s=d01692b4234fe3f2985f293e266606c6 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4397\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-4396/4397\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 22:43:13 GMT\r\nage: 4214745\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6AP8gqQy6%2Fxk1fQo1RPSgzsSH%2FwNngkid8ttY1fLqs%2Fyy1RpxQTyjJBE03FPIq1tGBcw3jwqvX8iZcAZZjBI4r%2Bzuqxc29Ihky%2F6w0mwBKI5M6O7YwtVyhIP9gSVZ7%2FeCMDJUsbZKTHXLAbkg%3D%3D\"}]}\r\ncf-ray: 9f79b4578c31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"218bc81f1c605a99badb1a5dc1383429","sha1":"e4b532b820871ab6d5329e2d33da763056ff26e1","sha256":"3bcab0f24b82d0065dcaadb0f6654a27a3495c67dd73e4dea7489e70904b6450","sha512":"0d9b7282e73bf9e375119ce17991bb64571d89cab9a7f99d2700caf69a7688d550e0a62ca9006c186ec7de72f8156ec98644d357a532c2bacd58655ab39a5389","ssdeep":"96:EiERWFo84bNTE9dv/BcXBqTBIeVgIUBCa2WudLyeqUSty4UNv+X:EiIcLKX4wIUBCLWudTqUSty4UNY","tlshash":"76918dc93ef2007a6b949905fc7052ae6e3b782661af6c5557848f817e872d74cbf203","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.991203Z","times_seen":425,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/38/JMWGAwRJouC2hmH6.png?s=e405cc4886eebb07f0ce0214d39d3ad1","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/38/JMWGAwRJouC2hmH6.png?s=e405cc4886eebb07f0ce0214d39d3ad1 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7186\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-7185/7186\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1527572\r\nlast-modified: Wed, 29 Apr 2026 01:09:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxlTXEP86RtUhMaQe3F%2F0cYRQtYMV0c68IcTCd7m043ts6b0JRov3kJuDc970%2BtQXq2G4%2F02yq2NF9%2Fn0%2Bi0EkWgx0JpROMAgU006wGs4GAP7XS12B%2B9AogBRsWuklIqhNs628BTdkyUVKDAEg%3D%3D\"}]}\r\ncf-ray: 9f79b457ac8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"0e4de30df7c7c8a35fb06a76677126cb","sha1":"d397a94512b690bc4b451d08afe2c9c704f511e2","sha256":"d53075dac9283d576254e9a702c61f51828508404faf6e525bdf4e298a2590d3","sha512":"7612a6780dedbe44f8a307af796b3a790e6b458d86cb873700c8fb704f95482399820d8da6dca7569954db40766ff277fbe1e6effff275d184b2eb6c51178280","ssdeep":"192:sMkB9OfkRmvWS+gYM1Qab0SWnRPh1R7XFPA:sMg8fJ/YCQab/QhO","tlshash":"0fe19ef901790603b577ddeeab0fc24d05f04b2d1aa4699853bb637c8b2419d7db6842","first_seen":"2025-07-04T12:29:12.792082Z","last_seen":"2026-08-09T11:55:20.998454Z","times_seen":377,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-2-mobile.png?s=bfbb653b50a0f71bb7967b94f73febd7","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-2-mobile.png?s=bfbb653b50a0f71bb7967b94f73febd7 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 34691\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zKOm1Sj2XQDo0y%2BgUer%2BBW97sAoudbTWrcRxaSPt9K%2BXZOeWU%2BAUlndTIoAn2cNF5r%2BxLVvQOP8Bcfqops0e5rF%2FoFt5h7qWQWVJH60sRePDtNIkvEkJJ7Jzr2r1G6bnoQYe0inD2BPmlIaPZ8%3D\"}]}\r\ncf-ray: 9f79b4561fa15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":34691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"01f25dafe9ed132d82fe0ad183d0f5ca","sha1":"9bffeda1b8c14d3bff9896213ec1ed039b3e4839","sha256":"b3f809d2deb1706580aa11055380433bbaaf3b85b6892479d7b3632ab5d42cb1","sha512":"480d05fafbf2ab76f628b5617bc16a420c9f43394927cbfed8620bc43c66f1c3d0c6770276716238cf7410416c90a85e1c63b3104372e465a7dabcbe4a65bf64","ssdeep":"768:l0PgBQDF2QsGj2uW4NbrfOIlpdhc9M9u3/Dd0F0sYIW8sjitN:aJDF2QBjFWenlpjcSe7d4sGtN","tlshash":"84f2e13bd513e03a9d5e1d01221ebb0bf377b8304d4279b9061c29936ea6855fba944f","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:20.977441Z","times_seen":387,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/10/QRqrYVJObmkaVav6.png?s=b408fbfaf3670d466bad4ff24e58d75e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/10/QRqrYVJObmkaVav6.png?s=b408fbfaf3670d466bad4ff24e58d75e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 153568\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-153567/153568\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:21:23 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1929721\r\nlast-modified: Sat, 25 Apr 2026 01:19:15 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36h8yTCrwvEHtZ8bG3zagSRi%2FsffIacay15nl0AW4oGqP%2Frl0ja04L%2BGMXGzfJbjsf0Y1dY5YJg7RVE19E2Hv%2FVj3e4ynC59Qki9grc71FkKd2uharoGll1seDX2F2IqKhdpSXh35FTIWDsHfw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b3cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"7d0e166b13f9dc20722543a6fd299662","sha1":"1c0c5f32f9cbd5a4747ac6ac70baea041bbb6ecb","sha256":"60b5ffdb4881cb558cc75a5cc2f80eb1775cfae26cc00ad51eaee132978db879","sha512":"de93b53e36fc7e4387b92f696d4048cd7336233b9e504c9046986638c07d484c21030a9a78dc6796b11ee35e4ed4dd91ff35c518e8e70c65e5da8b244de555ff","ssdeep":"3072:7V8/U40b7DrRTbdx7wjLvLzseM4W44e1I3EJKGOjqG+4cbeUAd/1:7vjxbdVw3jzsMWkYBGOd+4caUit","tlshash":"64e312c195658d7d370b3b2d32450eb90fc92a232a76ecd973ccda2919eca0716ca70d","first_seen":"2025-09-06T09:10:09.830541Z","last_seen":"2026-06-05T19:22:08.221383Z","times_seen":89,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":28,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/25/TS5Hs0Er3bKNf1Gm.png?s=4dbe1468ccec4383f16da320a5819a24","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/25/TS5Hs0Er3bKNf1Gm.png?s=4dbe1468ccec4383f16da320a5819a24 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10089\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-10088/10089\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1908569\r\nlast-modified: Tue, 05 May 2026 21:09:41 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65MI8qHrZCsjL3NzVf6EeZz9bKQONV0wd2eBC9l4XG%2BZIMqYTAo2gZvICUK3IsuQRnumQ0%2B4X8uG65WD3s5fP4BIXwmUPTqsjcOKy%2FSBL89Lx%2BDdtO2MYB3ImEXEDEkpBiUSm%2F2z1DG%2F%2F89TbA%3D%3D\"}]}\r\ncf-ray: 9f79b4579c5bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"c3225083102511bfc78f339dd0f5fded","sha1":"f475c9326e8caedb82be83447d83e674f1f4c42f","sha256":"45f10a1f9725183d5612ddf112d389e7fe4ee838efe9f6e844bdeee376a59b9c","sha512":"18b755aa0814a0e58a03d456c968355dc8359f3d60e57cde6f39f50c70a643d40995705ec67df08149be09297fc0b5551148d615ff4bf97cb36ed547c5458ddf","ssdeep":"192:kZsFASakSJsT5esX8IZ7jrQZy5d/Yw+RY/ZqohUDFF7lGVMgTdGRSk:ysFOkntn9QZad/YfIwQUDL7ozTd8H","tlshash":"a822afd5d720825664502d1fdbfa6f2ab8ea3848420bc1f2157aff1bacc1b2d879c553","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-06-13T03:37:44.841928Z","times_seen":369,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/css/Open24DisplaySt.woff2","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /css/Open24DisplaySt.woff2 HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://petirkuat.shop/\r\nOrigin: https://petirkuat.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6100\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKx3S%2BFnznQzKHF4YUnZPagQlCd26i29ca0n4Dyt2QWZZhQwX7Poki%2BU7zveG4NUVdaMDN6rraFmtRXYrmpGle9upanSEmbkjtKLUvNPcS55akPvuk%2Fu9c4eElumlvh%2B6C%2BNiLaluq29Vispm%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4559f77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6100,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6100, version 1.0","md5":"0f2d5fc9491ac57ea4b438701910bfb7","sha1":"46f0b89842f26f1ee13cfbe09acb8a326969443f","sha256":"2991f771f85700b7f88a8944a66afcd96199467920eec36cbb7ea77b6028f1dc","sha512":"61267eeff9b063e89ca67159de856cf6490b704b3d78dc16f483508500ea1c41dc973b20692771938665f2da48f832a3093442c95a69c64a487777d239fcb1f7","ssdeep":"96:Y8JjTdCpwgz/fY5AR6PcoA/So3PwHQXnyoooNXCpkP2aCuFz0r6hp6XXANrgCz32:Yogp3z/AiRYsvPww3MUXauFzgIECTiz","tlshash":"4ec19e0bec4d1963ad8d8af101e6d6ffb59f528e8dc365642d7d180a794aa243683812","first_seen":"2023-06-13T20:17:51Z","last_seen":"2026-08-12T13:53:36.685481Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":98,"dns":1,"connect":4,"send":0,"wait":189,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-9-mobile.png?s=8046c23620a8f1296345390df52c8ec0","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-9-mobile.png?s=8046c23620a8f1296345390df52c8ec0 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11707\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BnPSA2hJFZWQiIVrLDeXdgEYRub7GuO0UYtJgYyyoT8rU6jGY2rr0QFsZ963A5RSo1vQg6hDkt3TyS1i5rcdwlKu14Vpc6TC6ioM8vFtuoPHV4IpG%2FIZGfpAv5N7eZN5z75aGe5LPYykYiROqQ%3D\"}]}\r\ncf-ray: 9f79b45678225690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e96b94a4b8910cd2b6bd716764520625","sha1":"d8f8764353bc2a72a1d87958c1e56035bd2ceac1","sha256":"8a626b5f7f9ce514043178f67bccd1a3c2f441316b924194f64d6805ff1a0260","sha512":"dfdb450ed4708cf5eb7ca12f3d087ef9097500b0e53cd2ae01126f66bb9b1775972e95ff66d3d22a5f499c8faa30617bdc3412932af6b3837230c51094b3c715","ssdeep":"192:yGs2X9EgoSI7lcPn0Ux8yn7cV44qfM6kn2PxZ7G2fluxhzo3dksQcRrcNYiSHThV:yEXfoSqcf0uB4m4SEn259j+k32sXxc4z","tlshash":"0332aeab581de36403217abd042376e60f1d010df2ae3e5a9c0570a6b8ce613def25d7","first_seen":"2026-01-17T15:04:12.891492Z","last_seen":"2026-08-09T11:55:20.95967Z","times_seen":138,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/43/ezHXoITZX0nrD2r6.png?s=e7e153bace7e8feddaf113fd7459b40c","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/43/ezHXoITZX0nrD2r6.png?s=e7e153bace7e8feddaf113fd7459b40c HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 9108\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-9107/9108\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 19 Mar 2027 14:33:40 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 24 Mar 2026 02:47:49 GMT\r\nage: 3768069\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzTWefJJ%2FORERgW97C0jB2jKdiISP8iySxvgHFoQnZRE53eb0SgNv97kF%2BRTSCKYHh9JeTxG9duStvb05J34%2BwkNQ6%2BlEqLPxl5xeIwQ7LTCBDd8Br0dkegwv08HGie2GuoHOUwFBruS6P48Aw%3D%3D\"}]}\r\ncf-ray: 9f79b457aca3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"757eca5626e5d97a3621567ff0c2116d","sha1":"a683b347621f57e1ae6ec0a5225132d8f30b85c0","sha256":"ab9a44bb828318547c811a90ccd422266f0720e639fb072a6d6e78f139309706","sha512":"ddee73fb0c785015b351ab2c1e8d5d24c6673d1d7156fd9c7a05dad7fd026110d52374eb2053f0b98d51ea11719c3d20c1ba362c4d06da647865f1552c00632b","ssdeep":"192:nRUxG27m7j2K5grU758S31+GKDKS2Wv+rYUP8zKLcfyB35RCr:j27aBdlFkh2rnGnfcHCr","tlshash":"3612bf2c57cb8ca293e684e889ce8a63fe7914fd8dfc53e9d4211fd1b8181468d2d649","first_seen":"2026-03-21T09:26:08.593158Z","last_seen":"2026-07-24T20:34:11.412322Z","times_seen":78,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/14/jGj8pj6ltl74Wgvf.png?s=b72cb07a5bb1f466ec4ef010206717e3","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/14/jGj8pj6ltl74Wgvf.png?s=b72cb07a5bb1f466ec4ef010206717e3 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 130265\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-130264/130265\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:43:43 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1932067\r\nlast-modified: Tue, 05 May 2026 01:19:55 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nWEnbCYK9hnFHM%2FB14jWlv7hYF%2BCJcXQWdWgJqwMIoWkf8FAUj88mN5IklgWhqK8cbeySaOkNxpo1SKeARN7RD7VpUg6Z7psuwjO7g8%2BaQsENAaMW6aBKvQkl7tOLVzccYH5p5mJ68nYnrFYg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b5cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":130265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"881120599ea08cb2646e39bc6c3678ea","sha1":"e9f42ea5c2850055e29765842e32b4b6ccb5e25b","sha256":"3cd81517064cb80f349d4279bc2a43f2136d408e3553ab4a3ba08c73bfb71e4a","sha512":"ecafd4f20626dec48b394fcc4d9af698883f72ef97b5d84f454291ca20bc47186d77e3f8176897571c4fbb3826859c7eb56c23745631c713872f3d6a869e30c1","ssdeep":"3072:/Pa9qWcJfa1uxNeM5dnN9HuVX13nJXjKfD6G0LAwccr7i:/Pa9jchiXMDN9HuV13JzKf2G0kwcsO","tlshash":"f5d312b168665d3fb103d36ad152a4211f89c7c6ba3f17fad2c00c8bfe021209e7566a","first_seen":"2025-07-09T04:38:23.150962Z","last_seen":"2026-08-09T11:55:20.987453Z","times_seen":293,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/casino.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/casino.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 826523\r\nlast-modified: Fri, 12 Dec 2025 18:11:23 GMT\r\netag: \"c9c9b-645c5306843be\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANnknmT8PiagpWtqk5ODJEOE3qd%2BfsmLTFeTps3QycGrMDBhYjAEmwgAYmd4YFoheuFjhDTkdbyc88KqO3QkEKV8ftAAIQNoNn2Zrh0%2Fu510BOta2f4ak99u5QPp50SectrMwIbUfk8%3D\"}]}\r\ncf-ray: 9f79b46889fc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":826523,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"096ecdf388dca32ef20f428c8dd46288","sha1":"1ea9eeb9befb7f11037db20bf250a5976e9c8493","sha256":"87cdf9312917a6dc57e908cec22c67d76218493a84a6a05b091a89521fba61ba","sha512":"6614baa83f30390533ae195f258f23240c2cafca8428fe04ff52a2e76c96f4ef30a10859f329db08386e2a7c7e75e5ce19a6949ee34d75404557d7b5013c76cf","ssdeep":"12288:J13FhgP9aO9iMbFcX38lrp6bW0/hsA9MIUSKm9Yt4PRptaJuMpkoBUyC:J7hw9auiMby38wbZ/hvRIsR6JjrUL","tlshash":"c80523ffcf19a5d3b61bbae2012741895939013c01fd59869670ede878e82ec73bc198","first_seen":"2026-05-06T17:29:40.084303Z","last_seen":"2026-07-18T06:09:23.879732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1796,"timings":{"blocked":90,"dns":24,"connect":4,"send":0,"wait":784,"receive":813,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-6.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-6.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 446829\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":446829,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"045da05e7dc10c100e63e4d6a3dd9a0c","sha1":"58d49da838043d02422e74d2d9d439ed59e0fdfc","sha256":"ba2fe3abaeb8efcfec5e3d1197688e900050d8fd73fe495e4a890b04c94c7287","sha512":"c265f39a0d250b3125f7eea4f37cec93f36da18e6e24febe43e7b49139dcc094bc4d7d850b0ff83d010078ca1fc24957133710989ee394038a9409a25d35e23b","ssdeep":"12288:PS+YEC/bAPacJrf7dU2128/KvmgCJotFT0rSsciv7eZAl:PvXQ0pdUIOmAQSscjA","tlshash":"959423e29d35792fc87041775ca17baa14243db2d3964b3ea56bf730a7e4093a12c2d3","first_seen":"2026-05-06T17:29:40.08537Z","last_seen":"2026-07-18T06:09:24.004901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":681,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-7-mobile.png?s=d820bafb22680078e57f7c8ef81ddbff","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-7-mobile.png?s=d820bafb22680078e57f7c8ef81ddbff HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10074\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NnsCgtYXIzaO6BmNrc8MbVuLnDzXmel0z4F0LQUHHDfP%2FDmqfi%2FTVty9rKSWw9yu56NRZT%2FaLrYwLuL3ZbKlGQMesruHweGnjWZtrSI%2FDNyhQnRhKhex5aTUflW%2BHFfV2kKtUuQZdmvARaJbIk%3D\"}]}\r\ncf-ray: 9f79b455ff625690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":10074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e688c3bce186963d7b21762080177735","sha1":"cad1211129f8c5a29ea5ad61eab5476c4a1e93a0","sha256":"f1eefee3908c8b961e749597db8d5f054cecabe4a81a65c8c48d8a50c7d88ea5","sha512":"b9ba1e2036e06e003d9ed38ecad14fda86f718531ebfe0e99cfce910181367df3a587826fabd5653d7a752cba1ffe3de91c1005d4ccbf0df386ffad7b690be31","ssdeep":"192:HVH2RQjVaZwNtNIZzQGCSDMf7CnvmwKvjeoNjSiqlMUIShvXt3:HVH2RcaG5Y/MTa+NvqoR9qDIovd3","tlshash":"b822ae43de6a1b7291fd3dc2539c4503672d897554fe00730c80db73d6ac956bad12ab","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:20.970034Z","times_seen":363,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/1/jLFiz37YpqPM3mLj.png?s=e3a68d2baa6203007f7422547249bf2e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/1/jLFiz37YpqPM3mLj.png?s=e3a68d2baa6203007f7422547249bf2e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 144862\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-144861/144862\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 15:00:31 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 02:22:14 GMT\r\nage: 4374404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oILxrOay40xOkRFhWJJ8%2FO%2BwdXVATKOQQGEuLWUA4an8eQlRezURuOv0h9rZurE0N6eoGsF4CeX8pn7Vr39qTlczSAejC1goVdxwcKuR0dx3NUdcGxvqt3IWcYEjymznja2BwSfZm7KH33PiIg%3D%3D\"}]}\r\ncf-ray: 9f79b4574b37b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"0be5f907027852b30e88945f6c643b1e","sha1":"d87c59a1d67d6b15179074243664dd8d7165f97f","sha256":"4cf81d2e646703f753b415581b55a420c3c44eb3ed0b2554a1cdf5afb697bc6b","sha512":"5a3d15e184c282b3417b8e29bcbada666f5fa2cf246093342267cd823e77c125f4934b974cd2fe4665d20e51a6ab530ff19a3f4150e289e24be5b28e05bfa825","ssdeep":"3072:L+1H6US0Bj2W+Fkk2xB5v6jjCubJvi47BsovfNQ4/W:za3Cob5v6jeuJi4rvfNQX","tlshash":"9ae31334db47094bae449d106e4597ebfe789ec043f121d8b4ed58867e2e2ed82de306","first_seen":"2025-07-09T04:38:23.142644Z","last_seen":"2026-08-09T11:55:21.06117Z","times_seen":305,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":27,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-5-mobile.png?s=ff35fb30d93a8b38470bdb515ee0f5b2","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-5-mobile.png?s=ff35fb30d93a8b38470bdb515ee0f5b2 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 31432\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cS8VWYyfHPL4yo4ulaL5Wcab%2FpZXsBj%2BTQKs1yU1FBQ4g7KmwRkQ97f7f4TWdAHbfbhqQbrbNIJtUhfzkhzdtv2Ad1ZlELoIMn3Nh6x0%2BGTfPa7jrG4pqGix7ZeDALhengcTXNI56PWUO6z5zh8%3D\"}]}\r\ncf-ray: 9f79b4565feb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6cf031bd9d741e5866f12711b1393c6d","sha1":"474d946007b2f733611262751cc70d882e70dad3","sha256":"263843d8d4fed841931a283243e6b635f2797ed921a86aa37b3cae4eb42b4ef4","sha512":"a5718327aab5ff1e5982defea4086b77bc0e207d1044d25a47e9d36fe25ad920fa76bd612777d96aafbec88513b3657aa82e1099fccc9cf0b4c704328c95a89c","ssdeep":"768:omxGxdtrS4er00R1cDnAkXCpQT7B1Wxgc:omxGxdtrSVI0RiTAk+mkWc","tlshash":"88e2f1e31db75e7a02c4a2c6890d647df45a309e8a74ab48a31d769002fefd01b15a36","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.068923Z","times_seen":388,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/4/RqH3JPihnUEUZnbt.png?s=e816963aa1dde0d0409f574e9e5cd00e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/4/RqH3JPihnUEUZnbt.png?s=e816963aa1dde0d0409f574e9e5cd00e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 145438\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-145437/145438\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 16:58:27 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Sun, 22 Mar 2026 03:04:46 GMT\r\nage: 3939852\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmM7atmTpxSv7yB6Tn0MyoT18G06w33MCl%2B%2B%2FTHnvRztkrrjdvHa36aJ0qR%2Far1NJcoR6hKvLqiNjQ1wQMizrpven4SGV%2Fh%2BRWY9EdEqozYA7RVaA065QbdgYSCKRyhNri9jTxmfpm7nJ%2BfD1g%3D%3D\"}]}\r\ncf-ray: 9f79b4574b38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":145438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"86d1a3f708165fa0c3fb81f670f4e2f2","sha1":"6401b6685a7c10bbe9f5f0c450d82922a90c2484","sha256":"c0ca1ea2a1dd99bd9024342925af1edd7023a9fac44d9f7858216d4dcec5ab97","sha512":"3dc251f74fbbbeabdade1a5aa4b66c1c305c1a27161a9335aeafc0b1b317111fa9dbbf3139dd8600e48a9e516e13b0a472c718bad8d24a09a44f62bd3f102f11","ssdeep":"3072:C+vYqCJiMr+83FAGFYfUNZ2GQcmetyPFGjdT4OLUX9cx2/:9CJiU+P6YiZ2cmkyPUjl4OWb","tlshash":"16e312d192984b4bf96606428fe11269e1c8b3329fd04e4ee3f0d8d2fd0b717b99da54","first_seen":"2025-07-09T04:38:23.240543Z","last_seen":"2026-08-09T11:55:21.134847Z","times_seen":305,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":27,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/37/PcM0ND3RJmzOwkyM.png?s=5479cd9954b747414f0c5d39c18cfff5","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/37/PcM0ND3RJmzOwkyM.png?s=5479cd9954b747414f0c5d39c18cfff5 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4786\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-4785/4786\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 23:43:32 GMT\r\nage: 6198326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YD3CSAzdYdusrSeQ%2FGwVbwJAAkBlF267wI8bVfZJACTbBIEOhBWOBtRrYhqm0GT3AXSd71haaea9aRq%2BsjLeWfxVlaVNr0Ag%2FHSxMMvQcJnoi28Ao1EvIAb5wKyVmHfmZr2VtERbPNMKae2EqA%3D%3D\"}]}\r\ncf-ray: 9f79b457ac8bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"68810f6a748dd390090f2e5ce18235ca","sha1":"8aa3a299691ea50cdab5b3ef378a6f047df2804d","sha256":"1a6f34fa4aada332fb52853bbe2ff76a9e1c5a05bf0c7e03479ebb4105f862b4","sha512":"8b088719a6be1477c0e284e87b3b9a23c606262490e9d6874f6007e15e2c780c3b5b3e00b841d8302d20873f45de55e7e06434c04f01467839b8b2e91ed42cde","ssdeep":"96:eRYH/xxdKodnszquPXvES3RKY8HPxfLl55RRtwSu:eW5xdbsqCXvbBK1ZzRRtwSu","tlshash":"c4a15d1fc7e278d53bb48efd9872d57f40714206e615f230ea5ee14ad0288555b088ce","first_seen":"2025-06-07T17:06:06.373657Z","last_seen":"2026-08-09T11:55:20.950011Z","times_seen":412,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-3.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-3.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 452094\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":452094,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"fb4eef78a6db940216ced1cbcc981b9b","sha1":"c0c6b3aab393e8b7cc90e02bb9b46f688005d45a","sha256":"9f93c0dae464bee274b0e67ffcbae28c38b9e3582832176a6c654095eb091894","sha512":"f72930d6d04e1c24261256f94a172c047432a0ba7b2d72589abbecd0edec19a2ad93b1a62e1d7ab922c02f3bd78e5f25ca95808b4401528fe0832d954b4c4e25","ssdeep":"12288:cs4DBsVCaTDvPQ/oN6CPPYXSuNa8fhNnGKhNI45BBvqF:M6VzXP6ocCo/GYIaBve","tlshash":"5ea4233a6e4a4056e4e4e33c9b7d522897233f2fb52d6452ec41e71a70d8e8f086774a","first_seen":"2026-05-06T17:29:40.08951Z","last_seen":"2026-07-18T06:09:23.909664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":671,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/28/wbqQE1MyfQYM6gIG.png?s=10d52b5156314fe9fcfde983e7704d32","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/28/wbqQE1MyfQYM6gIG.png?s=10d52b5156314fe9fcfde983e7704d32 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10221\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-10220/10221\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1623429\r\nlast-modified: Tue, 21 Apr 2026 08:55:20 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMqRoD3X5nMG6h3afMndlIkTbNUUFIJ226KURsijOKhSX9p27MoMxg7Dq5ljIzJv%2FP%2BJUHHqiN13mNIWVHaVwWtc0tILYrxchdo6UJUizgzaudR5xl4hFu%2BzIAS6RhbT3wGWSoDkHEGjzWc7%2Fg%3D%3D\"}]}\r\ncf-ray: 9f79b4579c64b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"53f736a23cd2413724daeaa3e5a87d4c","sha1":"2f6dd9e0ca37e148fa936faf8da43fa959ab0cc5","sha256":"2c8e00a3fe9d80d360883bee7ef9a9a4936f96e924f067b1448c35c1284246f7","sha512":"bd2254eebec8b72d7a30543ffdc2fb8e1ae4dfd68534b0702ba408418d4288456b199cdf9decced5dc302e5cb3827f952247bd1f09bd2c907459f4c9ff3396c1","ssdeep":"192:rf9qYoikQkx7jdDKi2nF9k5yeTj+D2RbROSazXOj7FY2wWdf8:jmvx/xH2FqnK0OSIE4V","tlshash":"6822bfe389e460e97ab076ce56d7c154d0c2250c53a8db2430e8bca310b8ba959b75af","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.086915Z","times_seen":415,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/mobile.png?s=7069dc6050b90d29193922c60e4eb9ee","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/mobile.png?s=7069dc6050b90d29193922c60e4eb9ee HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1982\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0a8y8sY2nDcxBJ%2BSCJBpKYOuBGe%2BL1MIglxbGinAUFOrBGgQ0PyxJFgcn8uOLycB%2FR82McQHkIfUtxNQtrRXalgitlS64J5wkoKmZ1qkx4WSza%2BCqmTKzTKv3FiQ%2BNeURuA%2BxJusDYcqfLWn18E%3D\"}]}\r\ncf-ray: 9f79b455ff6a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"bcc9a00431ea62975b57dfbab946fea7","sha1":"b65e9e72d00193364bd874f08af37fd3317b9707","sha256":"9526053f1b823393afb820885a032716a3b9e7a9b1dda2341e712de6f2a87812","sha512":"c0566fa8610f132ba8890c8ab313c4e208b6834d7b0ffe508e53bb00d02c299054dac33e3b7197b84b0644e0d0ca9cfe141241a9f24c6c03dbfb28f667a69090","ssdeep":"","tlshash":"b14173bca20634368ffc94a27f833179a74f11ddc4fdb628626ccd634916699961e1c3","first_seen":"2025-03-04T14:40:44.793582Z","last_seen":"2026-08-09T11:55:21.084196Z","times_seen":103,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/menu-5.png?s=46472c1cf1d4eeded053e05496a93ae9","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/menu-5.png?s=46472c1cf1d4eeded053e05496a93ae9 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1648\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8bYeQUPMynQjMerO0NxQ0aOMTt2Z9L28tjxIjGEhtpEle1%2BKFmYM9jskKT0y2VwM%2FLiWJtBRWCaK2QVtZbeOvZvyDUe5U4g7YycBi%2FrdWIMTZqk2B85LP9uCLVCQrDrZX5BGulGxEXiAhjqUR0%3D\"}]}\r\ncf-ray: 9f79b455ff615690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"86c24909a172f769a75b322aeefc89a3","sha1":"4c9db63e1f0111c3e0f0cfdc2089079510301c4d","sha256":"2bb6eca8c21d2d12eb20bb4531695ba88f5d93093e9f69487b3a1b6a3524adcf","sha512":"0b1f4ce81c3b0b941b3a45f65dcc9d954d78fbad4d35a462d94ff8e44b8f88869a6640e7cd6222ccf6bd2707cbd8ece0926723095a5ee43d7bec005c0cda1c68","ssdeep":"","tlshash":"6a310ac72ffc62edf24ac015c2c8707438153a6686512b376355d8be6bb1a440edc865","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:20.972735Z","times_seen":420,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/jquery/jquery.min.js","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /vendor/jquery/jquery.min.js HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxnr2dGGucVn236%2F%2F6x8hm8bW5i3xHtLGfnktRuwydtH%2BXsCf8dchEC9U%2BmIL1Bgwta4O%2F9Ct67zil0wcLKBNfx4aMTYnaakb8jpxgZ5f4%2B7zYOvoU2FBuxGBbI1vImwVYw2rPcjwwBQHse6GbA%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\ncontent-encoding: br\r\nlast-modified: Wed, 06 May 2026 17:28:59 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b457ad33b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-13T20:53:04.686751Z","times_seen":142787,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/10/oRI9UH3PqlrVdkrc.png?s=d76ce8d95ac4aa522adc4367a9a94e3a","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/10/oRI9UH3PqlrVdkrc.png?s=d76ce8d95ac4aa522adc4367a9a94e3a HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5876\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5875/5876\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 22:47:38 GMT\r\nage: 4300879\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRyXmbCf4bMN4UxAuF8%2FRJ%2FtgB%2BCxIfxNqFMbLrT4Auwwwy7z5WpZXsme7poo6tlGy43sD1ZAOhfvws29l%2BkJRGKCQvlCckxWzPKHBa6YwgicPuAv8sjMlYm7KIuu3ULgDeccX7B58zu8QaZjQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b7db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"088d4ac6c308283f136b67b4d6088335","sha1":"c4966aa7e8a6366262fe7f086755f4d08681be6b","sha256":"22530073121d07738fb0ab1dd7cadf199b2699470d85d3b27346e9fb432b6bd4","sha512":"f7c0a763cc5fb25ae57c93028fe340c3d87a8e1d7bc45059047efb2c74e8543255a70063eb31fefedd0fae46ae87dc397e7fa5249ba7dc4981d0da5bef75d740","ssdeep":"96:OSSVcBSWPCRTnCrSWNVJQowF+pTK5CM5gbgYbS9:OZGvPCRTCrBLQCYCqgka+","tlshash":"2fc1af4d80b47d68eb493be78ce891d00cce21e9ba91800f6d1de4b5b4ec638e56d6d8","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.092037Z","times_seen":424,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/sport.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/sport.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 832527\r\nlast-modified: Fri, 12 Dec 2025 18:11:23 GMT\r\netag: \"cb40f-645c53071d4f8\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzELVuiBBQ6mYqO3NxAVsJWeY9WfhDQgY3OeDjtC4xgJVn%2BTMGLrTfOEWEFrEp%2FtNdZzYzxBvSweUFanndOaNAEySoEzNJGDet9%2FVFSvpFPCTymddAOcu3tTmAsJ%2BVYM7UzqNgXKSfM%3D\"}]}\r\ncf-ray: 9f79b46889ff0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832527,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"71fe9f610898c3cccb050170f3d55054","sha1":"59c68782058e1c7cce5c43a261499fac5339e956","sha256":"fed353a246869e2d036a1ca09e7eb2785d777aac3338d150fbfc83fb5a5ac040","sha512":"85fdd556dbbe0af830fe84f052a22f520befd5f3a81338936cd2a4cb5a2d66f24ecd374196ec9c2cdd9306ec9808b5fc5e589937a109c850503f4fb754b70076","ssdeep":"12288:we5ItNGiAAy3Q/qGoYjTAWHYZS/5yzd6Bply5Cltiho4CcU9eMW1/mn6q9RIjEfy:5e7FA4qGd8ShCgUKtDzi/dqFig+f","tlshash":"8005232cfb134ed3e5379ba3431285961ba89d352ac2e4c4e614f581fabc2edb4240dd","first_seen":"2026-05-06T17:29:40.094803Z","last_seen":"2026-07-18T06:09:24.039896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1988,"timings":{"blocked":90,"dns":25,"connect":4,"send":0,"wait":895,"receive":892,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 06 May 2026 17:28:59 GMT\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24059,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"064e23edde1d9451aff01d4aa91d4512","sha1":"057eb55a343840904be545eb1af40d1e38494c81","sha256":"3dc530ad1c79e5fba62c4249f4fc85ee460c53b7e132b925f138341a306fdad0","sha512":"030f8e27533808e4b3f057f97e52f2568aef6876c7cdd6a1206d18d3e33ba14e6dc492850fd0e11d96778b7a16f7f916075d27254c743f747bb10d70e8ba123b","ssdeep":"384:mv2rbj8YK2sbip9921bBmaj2HbnAEe2YbGNZh2hblKGE2KbcHxhD4xD69rkpfv2Y:B","tlshash":"0eb2bce2041bd00067832cc267df3e36dd8ea25434548976ebfd9898eca7d672274b5e","first_seen":"2025-09-17T04:38:39.075968Z","last_seen":"2026-08-13T16:37:38.305205Z","times_seen":1280,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":910,"dns":4,"connect":23,"send":0,"wait":34,"receive":0,"ssl":888},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/23/Z6ZKopAHr1RiUza7.png?s=e9e99b80bb506938f8cb23c159794afe","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/23/Z6ZKopAHr1RiUza7.png?s=e9e99b80bb506938f8cb23c159794afe HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 333908\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-333907/333908\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:39:57 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 03:32:27 GMT\r\nage: 4197391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pd%2FoxuAKw%2Bl8vu38le%2B2awyl5qCfMIjxkZWhpaFXdLxeeWQ1%2BY3LS%2FiSuWJnRXEGzW58TDPSduDhU4eWOaq5ewdxNwKNXOEozCgN7FpJm%2FLFwbKDQUoglbT86NfJflPWfPPTBQKhga0Z8uFP4Q%3D%3D\"}]}\r\ncf-ray: 9f79b4574b1ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 420, 8-bit/color RGBA, non-interlaced","md5":"22391867b2ae01c5025c3a169f5b8bc5","sha1":"36a88e45bbe21e3cb1dfc5738dd981ef2dc96ade","sha256":"a52ec74296290d10c7f97dbfbe6f75384b56617e9bab6522ff68327877cdda04","sha512":"99712b21ba821621d9c383a184be47b5f5c9506939731f6747368dc1412a3107bcf734448cd4ece1108953b183ca73d032bd7b132943d4537bbd090fb4c5207f","ssdeep":"6144:JK56bm29ecYpGFgu8nJym2r1zg6lA5vt7HaA+szfi1cF6rrvDx:U56bJhY0FvaJym2r1zEFGA+sO1cEr3x","tlshash":"8164231558fb2b5bec23327af4b0c44dc1a5e3667461a6c8e4bec24871f9a997a0f341","first_seen":"2025-07-09T04:38:23.218859Z","last_seen":"2026-08-09T11:55:21.043178Z","times_seen":292,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/7/gagHCxHZ9p91d4T6.png?s=2f8139398e05ad9346ca7a3cd23a5aef","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/7/gagHCxHZ9p91d4T6.png?s=2f8139398e05ad9346ca7a3cd23a5aef HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7359\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXLHa9uLThWAabaYuXUIjRIUDWAO%2B%2B2AxHooULDaNWPjazwi9Yr101WqNi0ZK0vzQ%2F%2BU%2ByDrfW1EIhYQoDnT5Q6e0rWxL%2FYfeYXzL5Sne7AHGpEbEcUZk5RlOrq5KtSYMvn6bz9NG%2FavG%2BZZyQ8%3D\"}]}\r\ncf-ray: 9f79b45718f15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"e17fcf2200885a2070912aa9ff407e5a","sha1":"c969d59a6e1f3bdba56a4e5fc74f5727fb18f40a","sha256":"db6157e85d6027feb28406abf460b40b5f00dc04106ecf59a0f5baa7f4aabf22","sha512":"53c12205f5063869d26ecabb608e82e3a4fff860742b6110c2e49c59829ef13ff7fa6e203f546be0414b85d959ffa35cfec3df18c8b555092c554614595d5e45","ssdeep":"192:13TqVnVO+69PkL1D4Q8Sv4RxamQMj+9bz8r4PLfJdOjg:13TqVnVObF16gR4FOmf8r4PLfJA8","tlshash":"3be1a041a041c7be7b5e2cd9105995854efb50bc0328572adb61f8cb9873f42dd94d92","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.948616Z","times_seen":358,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/16/qKNOBHGMC3Wg7dUY.png?s=8a57964852006387eb6c7cf26f1fb82b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/16/qKNOBHGMC3Wg7dUY.png?s=8a57964852006387eb6c7cf26f1fb82b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1726\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-1725/1726\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1898354\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nwN3vqfE7zRw3vIWDRxfj9P1A6%2F83HaJ%2FvRsKuWDuIHr7Pm9zeS%2BSW0rZPoT1EUR%2BGJUoP9cxxlFf3kEFauamIMIgChtW1duoQKgHxzPAIOSuhoABndVzPSYZ%2BCr4H%2BnNa8G1LlAyJOfjgGxw%3D%3D\"}]}\r\ncf-ray: 9f79b4578c30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"b793a620994d9661696aafbc6d7e89a0","sha1":"25726b7390f06786174c5bd17634b296080a5faf","sha256":"cea7f0b553b2595469e4779d94c8a445fac3d68f9e5923dd66843e04fb4a52f7","sha512":"5ba2625d4fc900e5546395b4dc9457c9f266a413284ff4eacd2533519d64dfa21e5bc5d2fad5b4f055068ab70099ef8b48b71b6ff49ed8c29b3dcb6e9f513bf3","ssdeep":"","tlshash":"063108f923a24f38d8641a3e34e3b63049038e9054d5780687e2cc36f191473aecdb1d","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.07423Z","times_seen":425,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/6/k8hso3ZQKfVSsOMX.png?s=11572d86fc45bdc2aa1da95bb130a939","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/6/k8hso3ZQKfVSsOMX.png?s=11572d86fc45bdc2aa1da95bb130a939 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 140785\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-140784/140785\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:34:39 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1913207\r\nlast-modified: Wed, 29 Apr 2026 17:56:16 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ig8DVsHRNc%2F9S%2Bkd5wi4iKFL4OgXDoI4QDRMJzcrG0KYpkHLQZjkLg7S1gm2JmDLQUrXDbBBP6TqGviqrBHCypHuIFq4zJ%2Fn9exdbi8YrEh9ev1wzgwNv3LfyCgqCYI57T1vZs%2FZIgfe19KxkA%3D%3D\"}]}\r\ncf-ray: 9f79b4574b2bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"6190033fa086f3ed84d8ec3eeb74d3d1","sha1":"61bbf4fa4bbcf4ad7e2de4297fdedc0686c9fb1b","sha256":"d7a103a0db42b9c7974fb1b19d18d62adfb3808fedce5c2ac1746837e629f20c","sha512":"0a646d53fbb03b5b127ae6d5d58bb470b8f5c1c73efdd9a24779477ce831f0499c87080f0e6dc8fe67b1667aa5c7d89a5178f320c071d8a825a67607d0eb3efc","ssdeep":"3072:B1+MyZEEmU6ZvllLJ0uL7r7qu4o+qfjFbxN1rGuOUkNYxPTOiH5honC:B1+MyOEnmvfFL7rWu4obfj9ZGpYxP6k","tlshash":"a6d3120c105d057ead7efbee524cfedea0146c4e576ca6de69b818b10ad8c2a413d78c","first_seen":"2025-07-09T04:38:23.166655Z","last_seen":"2026-08-09T11:55:21.06039Z","times_seen":294,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/11/hU7lEGuKZbz9OLTP.png?s=b46f90dd4c4761cf1a292cc16719a46b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/11/hU7lEGuKZbz9OLTP.png?s=b46f90dd4c4761cf1a292cc16719a46b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5275\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5274/5275\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Mar 2026 22:12:32 GMT\r\nage: 3525385\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsz9MqbbI0YHntyjT8iexzjv0lkTywG%2FcGAWCXSaypvgFYQ4FrKFskptdkhW%2BJ8em33iEd3fnYmZrG%2FgDogmp3FoEsBcKMkErP8PAMZKycjkH1JbjRoRSxQs2G6R2w%2BkBWjs5QPhIrdo8L2WqA%3D%3D\"}]}\r\ncf-ray: 9f79b4576bd2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"274084f9d362eb39e58992412d95b98f","sha1":"1ea531ffa9c6de220dd426f18f9dced1687ff82a","sha256":"22c7cff9d95421391e435b408a6b4d29699003c89561c20a6316821f9b2b7d47","sha512":"106d7caf65ae7fe78d8e9a0e86366e99f997648831c4115e12139bb5087c20391913d851023e1602e940589f4751388b06bcde734c297a510ae98acb188da61a","ssdeep":"96:Z58Ly+8JnaxTT1iVg4P/oNhZ2f++rCghMukH2hC6bwjCjIyLoDAr3Q2PhOmS:Z58LyfA31ag4INhZ2fJ8WkO0Egu9PhOT","tlshash":"1bb19fa44b93d8cf692760156782b8027721f72dad3a8392c692dc6294bd5c4a84e01a","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.133618Z","times_seen":415,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/3/l2fkH6Y8DPIMvmIO.png?s=13986db9135dbf1d9e1a4d9534bc9a63","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/3/l2fkH6Y8DPIMvmIO.png?s=13986db9135dbf1d9e1a4d9534bc9a63 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 133007\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-133006/133007\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 15:04:49 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1954243\r\nlast-modified: Mon, 04 May 2026 14:45:31 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Th3X6HKzPNGUeVzxcWFw%2B3Y8CSnAC9YHT8DsIf1TNUaDtESkHLY%2BvbEbnJ1sCB8DoSLpKB8NiSxAQhwJI1KMxeVTrQMIZeMi1quLfZF9mKTzIFStvA0pM1kQ%2FvUNTCubJj8wHd4yEDxCC7uQFQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b53b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"e326f778ed32e5937fc7a6a2f4017ac8","sha1":"30ac8943ab5b1e0ae7c88c90f9f0b1416bebeaf1","sha256":"113e7bfe8f784208f5d8811f4b90add80b70ac12b7b758110eff8e6ddf74ba83","sha512":"bb70e54d0597570e0dc371cc12239c5047d552925bd4fc29a72f82342fd433d4acd7b29953f77940982cb1bfb6a239e0d8c93a1a75769e481776eaba3a9b6fb9","ssdeep":"3072:kEj3oEB+G8nX4Y6t9+NP9nlE86YwGxGaDfzwSsjGbY0oDkY1FP:ks37B+G8nIxkny8BXwSsjsYFDkY3P","tlshash":"74d3131f6da5644828f99d123f44f4ce06a258ef7b387e62b7198e208c5274fe49e74c","first_seen":"2025-07-09T04:38:23.188145Z","last_seen":"2026-08-09T11:55:20.986608Z","times_seen":293,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/icon/promo_icon3.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/icon/promo_icon3.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 19:59:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 144682\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":144682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1fd7e6fd285acfaaee91af313c569ad8","sha1":"cbf6fd763a1da97c773fd5cccdf29a078be79ea2","sha256":"ca11df32c85a08b70e7381afb2ad0cbd9e553685d16289a1d00a346766e7b0ea","sha512":"b7564b888987a0d11500330e958b04a1a49508868ed65b34ef7d9f6e41db05cec7e58304e0bf112938b2e5f14929060bb77a744fc6c4d1a08b0b1cce83970944","ssdeep":"3072:hoH8JBdbCGmkmkhOCiok5WYIvYVmsd7tu3vlZ7HZHna4A:wShmy6YSmsQ3NZ75Haz","tlshash":"93e312ceeb6f34e1ba4fbc24f8bd8710a24efc415e8a10e1696c75b3ed9209411075a7","first_seen":"2026-05-02T14:44:32.602483Z","last_seen":"2026-07-18T06:09:23.91709Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /vendor/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpdR94Ycks%2BvSytSDNQNp1mOsITY2sbLIAbkud7FQ3Wd0XhqYaNSMPcKQbCL0bWr2BY76sAJub3Y9tdRNRmn%2BgaIkAnetHahh%2BaN0J6uXQpLs6pg%2B5E84pBN6LoL9p%2FCkjS1QvjXaWIqEP13tGs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f79b4558f8c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":121318,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65371)","md5":"4e9591737c378cd493beb810ca425a76","sha1":"4e3eb7a49a913c2e9aad85614a7acd3ba4cd6a36","sha256":"dc56a2ac9c1645ab55dab2d6169cd5d3b2094f9b10a5ad8eb3b11ea307381660","sha512":"81c08cce5c91342f1d706b48b4c22d4b4b2185b5a6db820863243ac76a6f2b4c9f6601808078c28049b5cd5c5cfff99c49f053441f5bd6d3df1449b5ab6c1a38","ssdeep":"768:9IWGxw/SIH4S1L5ve2I6g/HY1qKeKjRlNtJbdbJFu3++8vhDipfwd2oCQ1Na2:iw/BVbI6g/HY1qYRnvFxOfF4","tlshash":"92c3c6a0f21031ea7373c55a71d0fd862219a153e5674eb7f22f25d88f886ca1673f1a","first_seen":"2024-05-25T20:54:40Z","last_seen":"2026-08-09T11:55:20.994368Z","times_seen":397,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":92,"dns":1,"connect":1,"send":0,"wait":186,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/8/GJ8Wysa5zj3lqlV3.png?s=6cdaa4f54a69692e73fea742f95db5f7","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/8/GJ8Wysa5zj3lqlV3.png?s=6cdaa4f54a69692e73fea742f95db5f7 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 141089\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-141088/141089\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:18:08 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1513188\r\nlast-modified: Fri, 01 May 2026 14:58:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FP0TEbgaVbk5qykQyrA1DePhGvn2bezGaUsTW%2F5xqEkCj%2FW6qjdGhS%2FCkXwIb45965UhpazRrNX0zjbsVRmpWiaLGCMAsnFCrcFB0AChogRY%2BDQut%2F%2BVHcv4%2BGwgv2LkMpx7dwMGaPWJ5jEPwg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b48b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"c5dd9035229e1d27a3a506b72c04170e","sha1":"72ee0970642041873b404419416777b2fdb797b2","sha256":"84968c23d2bbb4a3c4cb101846c402c76849be8226d8c6a53eb8c6b699d3c4ad","sha512":"3898c7055678df29c5b4eb48b5fc22e13b23a73444b8bec2b619166a75a6c7eaaa55be264a3afa80b4d6525ddcc6ba598fe4cbf40e7d754f62c743afd3fd8ce8","ssdeep":"3072:8Pb5t9mef/kwN3rMKyqvVSLiyp/xQfIdwSn+uxlHeL7VLDUwkX:oVt9m6kEJyqvqPp/GQeSn+uxlHelPY","tlshash":"1cd312417c52c873f4cbd5eb644417eb68a52ef68e47fc504c28a1ada1b34e3fa79112","first_seen":"2025-09-06T09:10:10.043107Z","last_seen":"2026-07-06T01:32:40.954817Z","times_seen":78,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":26,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/3/Qn9ydbba5HAHVpqt.png?s=692de7725be24ba4808127c6bfad7b9b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/3/Qn9ydbba5HAHVpqt.png?s=692de7725be24ba4808127c6bfad7b9b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11974\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-11973/11974\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Apr 2026 02:03:15 GMT\r\nage: 1869942\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nb5mhSqwJ%2FflsVKF6%2FsvH9ddR0AGdUClI5dQU%2F9r84pYtXrcAkg3eP%2BdAqGOQpFFh%2F00yYC6DgjYNAJxJ8hexL3Ql05btFLJQ0vZYET%2Bnqlzi8vmlahihBAvRYRybqGB844wnojC0LfR7jJz3g%3D%3D\"}]}\r\ncf-ray: 9f79b4575b63b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"b86f7587ccc56bb5fd872fb34ba0e8fc","sha1":"e9dfd0cc84248cf6261e3fb3f73c3ad035db6eb0","sha256":"97cb1c56577376a466750ba9d83ef425b915673967679735764b0f40289a1753","sha512":"a8bca3cb8a9f3040e39e922927710d7408b383711a5b2b52aeb55763ca758fcafa6a349de479e80b4371a83f01f3395ec9c2de10e56145cd10d0e2606817ca64","ssdeep":"192:gplEzY6mboLH5U2YEAfXxoBuynWKWuFLbsHG2RnrqzWSaTlfIwGSof/RuJZ2yVPz:YlOm0b5U1t/x4uynWjZH7JZ5GSaA5VPz","tlshash":"3432cfe5ae96a473446879384cea8c1c56f6dc339d0d632a4f348dc8fe2108c6037d8d","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.009244Z","times_seen":428,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/33/fnDYskKRsM11p1Uf.png?s=8ef6d92181c72c61223f18c53c925711","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/33/fnDYskKRsM11p1Uf.png?s=8ef6d92181c72c61223f18c53c925711 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5443\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5442/5443\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1615941\r\nlast-modified: Sat, 02 May 2026 05:14:21 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaU0kOAhvf8kANQC4wNBakqVFQ4eH1rjyCrjfEZ6aZCW4i8V8lWTOiUNaSQdnv6lYAzJ4ytmpRikzLiaqedOHQdbmvRvAADI209pU7e76aT%2Bivh0rzN1eNIoxvutJQ0jhZsxTLLkYIANHHG5%2FQ%3D%3D\"}]}\r\ncf-ray: 9f79b4579c7ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"0f4d3bf3dd8ef963449855a9b54fd38e","sha1":"9f9a2e85a190c70d7c918851b5fa6f2b0a1d8751","sha256":"c9ab9fb8ea98ea8724823c370a01bb58db1def38d58f4c72a4dc8a23a2360e9f","sha512":"d7c4dd166ad03e80acf42a9a620e143537b57872c1346e89b02ca1a5efaa072036200818a9c7126be7f3afafcbcaf966dee8c9045e56b660ba1cad20d02ec9d4","ssdeep":"96:0EMoXfqn7QtSPPkTTal+dSw0YTJz5YzRuEHTUn5Y9Tt96RORuJqQkdXFqnREhHG9:soSnaWkfalkS855ICn29ZYRO4Fk3qnCQ","tlshash":"7eb17e9b072012959d6a2b3924ccc06dd40102868777aed469db97e9df7cbc6d4893f3","first_seen":"2025-07-04T12:29:12.854018Z","last_seen":"2026-08-09T11:55:21.028388Z","times_seen":373,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/images/setting-logo/1/1Y1KCE6EZKMuPB30.gif","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /images/setting-logo/1/1Y1KCE6EZKMuPB30.gif HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6330552\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\naccept-ranges: bytes\r\nage: 6732\r\nlast-modified: Wed, 06 May 2026 17:28:55 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NZuN%2B7rkNRlDCcnezZXMZFz6dinP636LSwJq%2FAvvI6GaxPSlLEeljJelKjy5CXOsrhl99OxrlYVORjycoXzIePl%2F8RwU58xcX0cLGtf5nW25UKvAmhJ1X396Cx%2BJ2R9liylkO0C4nm3KO6%2FgzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4554ef135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6330552,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 300","md5":"2bf57323b5f822d85da37939dbc9b5b5","sha1":"fdf04cd7562f2d35184fd28135dcd57243a65c63","sha256":"4af599a355893737fb87a89301802415f9729c60ec24c956e526c383dc604e2a","sha512":"a59480ce85dcf55c73b195cf8fcccea0925e901623cb4da5a10798b6ec09266cc45716504e5ea84051acada1e86b36542547ee09ddd3bf65e4290c4c0d3a1866","ssdeep":"24576:/VyEy7Q1LT7Kd2Lo4xJgRY7QMEe9oz2p4eCnKEh5h:/wEAQ1/7sBY7EC6UCnB","tlshash":"6b2523dac56f4f726a4614f40c1a066dee1654fbe59faa3790017b0c0b42e7ca9ec34b","first_seen":"2026-05-06T17:29:20.817024Z","last_seen":"2026-07-18T06:09:24.020302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2794,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":6,"receive":2748,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/5/rXDh9XuHvepacD6x.png?s=07d67f7f7c3b1d98e8e615a19cd7a5ed","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/5/rXDh9XuHvepacD6x.png?s=07d67f7f7c3b1d98e8e615a19cd7a5ed HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 9252\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsT3HT8biNcdBys1SxhBdMj34zZHcnU8nNG8v16aLtc40JijfipcohgJiqFJDfWPel7KLAjO9RjvBQGH8flEAo8xD4GJ0N0OnzqRMyE1TM3kqKqUfCMDfXhK%2BR33LaPQ9JwFOpdlSvV0FKtHiEA%3D\"}]}\r\ncf-ray: 9f79b45708dd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"4260a1f5b2830ae1f26b79428e2d2abf","sha1":"5e8e52f93c8d5cbd0ae7400f61bd6efae8bd0b55","sha256":"14fb3799c03d220209e9ae0a395b17d5f7ee263a5ef2126640f07a78f0bc4a5c","sha512":"caf33181b0447fed316b1ee3ba21144972944fde520a6267986e75f5799faaeccc242128c094ef84c8951d677f14869efc746a56d42d6f1b0d3787431ea54928","ssdeep":"192:TWaWXT2DDT+/tG8YJkkD5aAGet9Qp9VxYjpLtRsOHRhgqUM0W3/N5nkioaWq:TWaWXaDv+/thCt9QsjphZHRVUMj/jnk6","tlshash":"b612a0595f68ce783d3d0626677c6ff26e8e314decbd7c97e412280d3818a6586f4052","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:20.98124Z","times_seen":350,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/44/cwrMS3BqzFqECTs4.png?s=ebb076308a7468701341f33816c3034c","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/44/cwrMS3BqzFqECTs4.png?s=ebb076308a7468701341f33816c3034c HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 133035\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-133034/133035\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:36:51 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1877158\r\nlast-modified: Sat, 25 Apr 2026 08:17:57 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHXR3SkeI2hqzvRMMiKzyStuJG1l62QIMMezBV2zlIA%2Fu7%2BAKMPNngpR4%2F8IjJQ86WdZkuFlluV6mQTrrNu9hBR36wiIMI1FpTX3ko%2FCJA%2Fm7%2FwklAakL7T%2FxOgNLMmQd7%2F9htvTbZlQlDrBxw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b35b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"091cb106e3c4fa9bc32af123ae53ffaa","sha1":"e31676359aae09a5c8cf765d5094ab200d8aa5e6","sha256":"d3b6ba69ff796820f488e9a3d1f2155ed5c3692e9dac79650d703d1876b51baf","sha512":"6b1e7b141897f51421de40ede10a9eeebb9f1dec345c2845669aff6589274e01a552e399a60a26c74fd39db4d7586e9a026e2b444537c689adff5193033db5c2","ssdeep":"3072:WY4sXNEMSy521myzukfFlWAaeag4dJV9Z7I+WDum7bhL:dKw52dTbWQ4fV9Zs+WBxL","tlshash":"5cd312536b680136754fb8b95a5d6d131eb606f9cbaa0ec9ed0dd8c8024e60c0cdf5bb","first_seen":"2025-07-09T04:38:23.236169Z","last_seen":"2026-07-24T20:34:11.435233Z","times_seen":284,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/30/3TxQyknwmOKq4aUq.png?s=ed76e8f72a750ca326cc15f20330a8d9","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/30/3TxQyknwmOKq4aUq.png?s=ed76e8f72a750ca326cc15f20330a8d9 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11934\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-11933/11934\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1620897\r\nlast-modified: Wed, 06 May 2026 14:18:18 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE1bXR18WgKDXnpT0Rz1PL5tJm1rHu1pZI0e0MZAsEhnqBle7lM%2BmqchUB0em06KwH%2BPiNi4sYQ%2FMATBzQt8rsywTorvsvnhV%2FW8ma5Ilu75KgHjlpeFBCOYjYp9xhwBsYOHJVzpaANKb5EV7g%3D%3D\"}]}\r\ncf-ray: 9f79b4579c68b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":11934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"dacabc628019dc8fca7b25688cb02591","sha1":"b03434e4b091f99367ec152890f52b488c9d0afa","sha256":"d511ae85584c4277c55bcf3e92be5789759bda9cca5fa4f80071a7311939a209","sha512":"91be8478b55967fd450b91123741ef4ced85bc56387896e16c0387b397c3dfaa11719ccaef080de28ffa100befeb5af03bb61d1400e0131c38d573573e211b49","ssdeep":"192:rhekTHl9B3EKE+BP1uuo82LKna9jPcA9wg02MkM94aps66abGiwl3xW1YMWciOFZ:rheyFf3RE61uuo8U2J2MB4T66abGiwFA","tlshash":"7a32d0e6b501d9014d6637a42e6021e7edaba538fdb49bc12120afb43c305deaa0c2c7","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.944087Z","times_seen":424,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/4/STgyifWgfxZX8Xdd.png?s=8291d155fe1d0f7acee296fc3cec543e","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/4/STgyifWgfxZX8Xdd.png?s=8291d155fe1d0f7acee296fc3cec543e HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 3849\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-3848/3849\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1535323\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSD412TjjLiyUkym4NL6MuaOJA1nK%2F4axGhpI8dj4sCnMdk6N5SzdOuYAKPgoT%2FD5hFezHYElyXi7F8HV13%2FTP0Io6MvTXRnqiLa8gjSDlaAw2vM8XvrJFivQVHVcQmtTCcv5IyB11TFJuT9gQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b67b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"5fb5bb2aae3a02eb81a6f236b18d821f","sha1":"b48496057e25b84b2c02356dc6e0cfbfc690cf45","sha256":"1fb901dd7f510863e910e134ff66bd0d974f6490da3a4fa5b9a0cd15bb778912","sha512":"f6ba13c0d1f36d7dd5cab5987f8cce5ae8b7fb989ed4900a339f614f687b86e649d2b061c7ed648d9de24c70d6cb4924028d7379905cff0422e4aaf1bd33c005","ssdeep":"","tlshash":"7b815d7261c3bda5f46e951cbe8441bb11f0a2500bbe672d651647ee003526d7e8f2f0","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.124405Z","times_seen":425,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-4.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-4.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 473145\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":473145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"628eff9f23d3acb0623bdc58c9d71bcb","sha1":"14a49cc3251d9aca7dcb2b132c5aaaac81599027","sha256":"83d2b4bc66351b657a47b4abc6cdce453147a0eeb12118dcf80bb1bed5398f1a","sha512":"ec57e0fa019eed6cbe486d23179206a4de840f6ff9fe4a8af95c83cc2e6f1e307e5a048b782f3f0e9608246e76b411c9ebf0533d753d956e1ce1487c0f6f093c","ssdeep":"12288:3gPByIPUD9V/2w12bSAH9EXB8F+yjvfpR4:wPHK+SAwPyjvfP4","tlshash":"92a4239985f3de3bd48c7b7dd391fa66d0209aad4b50b15328914dc180a71c3a9bef32","first_seen":"2026-05-06T17:29:40.113328Z","last_seen":"2026-07-18T06:09:23.955415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":676,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/14/PCIJfHBobXU23DYh.png?s=3a63f875acee16a8ef21c9bcaffe81ff","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/14/PCIJfHBobXU23DYh.png?s=3a63f875acee16a8ef21c9bcaffe81ff HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5964\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-5963/5964\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1450607\r\nlast-modified: Sat, 02 May 2026 05:14:21 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RYkVxu4fbxitlxH14RHM34EF6toAOENMwUBII%2B%2FQRlbBX6pLILvXOG7wJvnE80VXkB5JPvZl5MrGKG%2FAFw97Oyz0pZXx9wnIHiTmhFPLJe%2Fax2c2KuiLXfoqLAkUSBWRwzJyh2J8huQcrkDTQ%3D%3D\"}]}\r\ncf-ray: 9f79b4578c2cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"dcba13053c98124429cc728feaf82d6e","sha1":"f55c07ca63cb7b13def7527c5c8350dbf367f951","sha256":"a8a8b7cba58267fed21b476c45b08584b91dcb146705c3d4063179ca275c7745","sha512":"d5bfbacb021bd2cc47764c2c1d231d706374137fb03fdbe12e9960d2e6f64dc5a030fcbd101d1ec6d77f7ee1ce247a620468d347c3fb9ff92b85f999c62f008a","ssdeep":"96:BXvrFPfjF/7TWqTMJ9w9pOnA0kX6VE1mFaEdnZhcN5SYlhAv4OAHVX:BXhXJDDF9IA0tVE17UbcmYlhAAHR","tlshash":"bdc17d30a1f38fe73a1a70024a119039e565238ff60cc934119b52fe7ed9566d3f071a","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.107431Z","times_seen":424,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/20/EpMjjKkesBhNT5lI.png?s=7e087d13f401388c577bdde1f023cdda","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/20/EpMjjKkesBhNT5lI.png?s=7e087d13f401388c577bdde1f023cdda HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11873\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-11872/11873\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1952681\r\nlast-modified: Tue, 05 May 2026 15:31:19 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGgyOirZ6lCTe1saWCqKh9pGG3E%2FmcTYBdh5uzAySiXbb4HA7AzuUVpDzNE5Oj0SwHrUjDgo27zL4ZDtMJHuEGUZ0r93FLIZn3gheupMbyom1fXIcFixVsXGqHz7RhJOP49yypMYFh5fI56faQ%3D%3D\"}]}\r\ncf-ray: 9f79b4579c4eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"4f68c327e1cd4d3f270e1d3f5276c2e8","sha1":"c8f23fe111c2122f5bb8fca86af22b00728a16f5","sha256":"fd91df2a6d950322df5d66d809be74b5a25b936a20b3210d436595891d1e5d02","sha512":"3e4a409e48ccdcf1be34c43e5b287c73b27b0c64a44b2587775c1eac72a8267d0a80860b52f843cd4f8dbc73a1c8cfb6918af94d4cc79f2224ba1cd26835b61f","ssdeep":"192:y4Yz2WlELnOZ6wxUgAZsENM+cTToTUkyIS/UzIJOY3eB4eyN7+KMgA/:yR9lSOKX96AJeUTdQ+KMga","tlshash":"7632d0f5ed9a9f1c58434075c763a7caa2efb867f02ec0028466826088e7440efe4726","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:20.981978Z","times_seen":415,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"simpandisini.site/babahoki/icon-crash-game.webp","fqdn":"simpandisini.site","domain":"simpandisini.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.435Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /babahoki/icon-crash-game.webp HTTP/1.1\r\nHost: simpandisini.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":63,"connect":166,"send":0,"wait":0,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/setting-favicon/1/KItbgBzFWSP5e2MT.png?s=406586d1d4987790c051a6d8607dcc81","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:03.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/setting-favicon/1/KItbgBzFWSP5e2MT.png?s=406586d1d4987790c051a6d8607dcc81 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 51150\r\npriority: u=6,i=?0\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:23:54 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:03 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIpOWzuZY0K0N%2BDcAQ9DxSoX9V18dZRedztKth3E9kHiyzoLgDZIcEobmK22%2FL5WVzQwQl%2BSWi8AwKObQKgd5kns7tSwn2ieRt3AvD2xLpcYbzXBaXZLUeJWf%2FP7%2BMjZRKcs6tDOdvPyzIVksX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4745975b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0c489065d88060217e61a975e9bdc1c2","sha1":"a7cca045316d475abedf8a3c2ef37dd0b39ebb92","sha256":"0ab933b868e8f659475d2c5888ef798fd03a8d950043ab4247b015b5c9361506","sha512":"d5952cd36b83804c2543eeaf3a0d8eff1a27b9bc793921375c3d9c2b50822667ee97564a6ec8bf987f41195c64984b355fa057502082edc6fc54305c3028f8bf","ssdeep":"1536:9XSZ8kVP+mQHkzzKs08AkXoBIT+rcpxDoVe5pW:KPPIC+snjTYcnDos5pW","tlshash":"b93302807adb7889ad3a9b8e15824f8e45b29c74c23d8c61e44796b5c353cb1bdc7613","first_seen":"2026-05-06T17:29:40.118238Z","last_seen":"2026-07-18T06:09:24.007388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/menu-2.png?s=80aab44edacffa2f8d2089decfd89a64","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/menu-2.png?s=80aab44edacffa2f8d2089decfd89a64 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1017\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKXRZkaYk8C9PpqGQpgL51eHFwDCUYLr0HS8hOzZc01mqastFhk8s6TP1YtcTrsN3PwC2kO4BiTJ1y7yRNbgMLThkHHKM8T5AROr1Bf8YKAkCShpPUxs55z3g%2FhLWlsuDvBK8xaKbzDtozqj9G8%3D\"}]}\r\ncf-ray: 9f79b455ef5f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2829abcfa3216be8043c1a6193e98ace","sha1":"112b383bfa86f730d01ac93425bf5c41cf75bf68","sha256":"c6ad57a8f7c1519a62306cc0be5c3c52a7cd723eba60f677edd1fa6e86cf5678","sha512":"7e7d8374318b72276f7cb10de9eaaafadea56983a7037eae09622844a5c649342f89fc8e9477f57481c833de84c820a7bf922140a51e6225441ecc86d7f30979","ssdeep":"","tlshash":"e411a8c1310fb65c8cff0475c3663997a8b7577671319d44527530643745745a92d14b","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:20.995331Z","times_seen":421,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":145,"dns":60,"connect":44,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/2/GmQEVoXpPsuNPAce.png?s=db1caf2910c0a058638dfa5634cf0c96","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/2/GmQEVoXpPsuNPAce.png?s=db1caf2910c0a058638dfa5634cf0c96 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 9203\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxYqPIpcPtz%2FweMwOBbSZRDTNbAzflMf49Ugu03Db6%2FeRx23FvYaeVPlmg26QPCkgNpnG0sWbUr23LxOzy%2F99794QIxUOiaOJvvYVAbfYKQ%2FQv9S83xQbO6U4zvbEzQUWVYyAe3Rb9jPv%2BAwvGo%3D\"}]}\r\ncf-ray: 9f79b45708d75690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":9203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"f725da2397da87a13e7700b989006d64","sha1":"f6fdfb6e28352e0d891c9a745798f6269ede0b3e","sha256":"fdae62c85e5daf690b1965990bc6e6230d65e07c83050250a845b3e2a1a462f7","sha512":"398b05abcf1387a76c38bc462c8be5201c6a702038076a95970fa0f57fff8b1c3d931037473e8fb41e1d562677484083bab538a0f52b4ea23a8e9f6ca597fd97","ssdeep":"192:dFiU5Clxd3rdQIQ4qOjSqumtvnW1McL5e1g40o1Diyh57:dFNmbpzjTvW1FVeq40CGyr","tlshash":"b812aee3292f620ad6bf0cea47d13476b04b103d9877956a557df006c233d3a807b56b","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.123592Z","times_seen":351,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/6/cx6StZyTRJPIbx8o.png?s=89e636474d997774a720941ddab91956","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/6/cx6StZyTRJPIbx8o.png?s=89e636474d997774a720941ddab91956 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7273\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diM3%2BYC8qXQ44iWjZ1ebIIeRGo03DvfMl6EHroN4G4%2BonxlhrOcx0zBnscDyrct%2BpdCMRJuVVjh6144vI6LZhIVzM%2BEoziUI4wLbARC0bj%2B%2BnSktkRlpsOpx2ahPc4QXoCxStTKx9ICFPXgDjvY%3D\"}]}\r\ncf-ray: 9f79b45708de5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"b40843a56a82f053c1659bf2351974b4","sha1":"377aacae173b8da323060017345e470bb90cd708","sha256":"82f6fcbbf6e0d2a23031dc7d1241a3b95fbd219fdad344501eedc06e760f2bcd","sha512":"1e24cd61312cc9713c0d602186fe850192d261720b457b67f739ce89f85603459284932cbe871eceba735cb75fb75ccd4d5d48c97a3c0ede0d2c865aab00b8f6","ssdeep":"192:ZTxoCZ8ah//tY7rsReFcvTj2xFy6JlzWtFyfqacWfjOk:Zl/ZQieFG2xFy6DNnfj7","tlshash":"f9e19ef2e0da17292cc7002d0b9636182ed22c7da3fbb66f851c1d2f20c897a51a55e7","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:20.976656Z","times_seen":309,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/9/2bxUoiMZiTUWITao.png?s=d0c04275e5cb677cc6e78efd1f583651","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/9/2bxUoiMZiTUWITao.png?s=d0c04275e5cb677cc6e78efd1f583651 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7535\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-7534/7535\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Feb 2026 04:33:44 GMT\r\nage: 6785714\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTnUk4E2LwZ75Hyv25JlK6F9FRooyLZ7gruJvicboen0qFl3fycr1QMMb4qLwYhRTYsLLx9j0v8F8JpMrllXad3Zy0JTNhXdli9m7PahAbdF%2B2iVRFqid7BReSQQJRocn31oQXucHe9MyPbKzA%3D%3D\"}]}\r\ncf-ray: 9f79b4575b76b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"face28b87bcd218506c99ac7381b5a4e","sha1":"bc969bad75dca855a3539edcabf43c30e7098891","sha256":"f5f4e5a707ccd3c73f36aff8c12921ff2d167b84f567277ed2a88a7ff9f74288","sha512":"fe1139fc60aba0acc42e9a164621f2be0aa8b93ef557772f31a95a34c88c45df194b403944b728797057f5036e5d05170f8ae4ae23e408538d87e6b32ca03f83","ssdeep":"192:3ZE1n6gEk8VPxYaFUefUfhqQFWqqaJ+A0WRw9M:W1n3CLF+5qi5qs+J4w9M","tlshash":"44f19fa7b2bc664000395d53400a429a77f1a7f7f99bd671ced618c56cb510f60e3d9c","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.145967Z","times_seen":424,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/21/gmmomXzsKnwrcfOJ.png?s=267e1c0142870f9858060b40ac73b5a9","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/21/gmmomXzsKnwrcfOJ.png?s=267e1c0142870f9858060b40ac73b5a9 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 14232\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-14231/14232\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Sat, 28 Mar 2026 23:01:07 GMT\r\nage: 3349671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpUNQMtxY7OSKH7825XKPzmGAgBqyU3GALKNWywmi7L3eKXSuj29BgqwxeiYinhtet79XiqhkbUf26owVZ7i8qafneF6nUlNbxmZ2zH%2B4bRpDXLLdOzc%2BePEEiKOmt1PVPBLVVADPm143oCFHw%3D%3D\"}]}\r\ncf-ray: 9f79b4579c51b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"75c7f7042f9b2c832ef791f6cf725ddd","sha1":"a3f736e39c5628b0146e686b203eb7205e574bb5","sha256":"d78576c72c1f41af1c0962151a04fd6701347502452b8acf341caa398d07ebbf","sha512":"64c0ca2cddb98867ae7268961247d75d3beed3bd6591046c27556decd9ed2dbf95ec5ee960410e26f4b4b3f02c7bdd48e42e6ff2920cd3f625b2b7df5c7d170e","ssdeep":"384:qAeCcSSEopJuGyydLR0zozJ+57nIDOOwJmIb:2lrl+ydLR0EUtIDBw","tlshash":"8652c0f703489916d7c728c3a485295d3ad70588d89e83057539992fe5ac0dfefb3872","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.105528Z","times_seen":424,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-2.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-2.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 20 Apr 2026 08:49:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 447554\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":447554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"f88ca7c5fb325ad00e4e86b5e5415de4","sha1":"6587fd96c5ed9166475c0dc4b7d84b7f443354e6","sha256":"ff3d7916b4c9d47c23feccc1f6aa8e1c2030663e88e6d837abecf505789ba3fb","sha512":"15a0d9d357e03250a3ef37598615efae420cd000051426401833210766750bfc4ad2e89db374734443deca746a6be00611560b3d12d8a8bbb9fdc6db4a50bae3","ssdeep":"6144:MLfNQ1aLIRcWY/riplxaeoVXult4c2tyx6+Tr1ZRljsdhnUvt+sT:WFDIRcj/riplxtM0Wyx6opZRljqY","tlshash":"a09423709da5a276fa71f37a09a4aa804d4001dd32dde688436f49b2744cc87f8ed79f","first_seen":"2026-05-06T17:29:40.125403Z","last_seen":"2026-07-18T06:09:23.908382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":540,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/popup/petirwin_popup.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/popup/petirwin_popup.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 14:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 975430\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":975430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.2 (Windows), datetime=2026:04:01 21:06:01], progressive, precision 8, 1024x1024, components 3","md5":"f177306344e059583a4ec64cc00775c7","sha1":"e879c5d7804de2606969ed790d1daf715bb6ce0f","sha256":"fe58309bb2f34fc5deef71a13352ada745028a09576a61933ca5a105b658994a","sha512":"29239408aa0da10de3ce5b38498197101470eca2482c17c98901901aca3bff86feef0a06e24225d9d7415699615ffcccbbca610d3c4a776904511c9ab2783c99","ssdeep":"24576:z/8MGC1r1zPYrX5eCH7YG8eY2qn1baK9Ee/maXb4e:z/8MfzApfY4YnnpaKKe/5b4e","tlshash":"ab2523df9bae8c77dc91463c8d61eef082140bf53c59c615392c00aabfac6625a255fc","first_seen":"2026-05-06T17:29:40.12876Z","last_seen":"2026-05-06T17:29:40.12876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4318,"timings":{"blocked":938,"dns":0,"connect":165,"send":0,"wait":650,"receive":1050,"ssl":1513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/broadcast.png?s=29a16a9d286692451d7c3ee9f675cb3d","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/broadcast.png?s=29a16a9d286692451d7c3ee9f675cb3d HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5102\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgGKpk6JYcwIIkXqCfokt9TazIhQk%2BhTj5D7Gzq6D3AKEaKPGaOPNIUSjemkxmCbTvEmPCcoJZ85rf2LUqy5cfzq3CuZtp3aLAjzM8t42z44YyGoZqovngwfhSe1gKXQwY2sB3pJ1Mm3mmDKQqA%3D\"}]}\r\ncf-ray: 9f79b45688315690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8df7d40a2060323a9743e2eeb731e69f","sha1":"c26559054940b43507d951b7f17747b1db14392d","sha256":"c85fac537a7508d99c612bb2e319390fdc5bd648f8d033e77e080262a461449c","sha512":"f62020c338d7edabd822e0e1fa192e2c51286f8fa9a3ad0e94569bfa6efb29ee2163fe61ff12c175692b93e87bca2a97f091e42be1497a51b132d2159833ba5a","ssdeep":"96:Y0RCyN46Z49xyUCDpn4wGyh+tyF4fC/aM8o5if1Qu8qG6KDgrhr9EURSuz:Y0CK4XvCLGyeu4f8n8XR8qGGrB9VRv","tlshash":"56b19e0baa438b1fdb52e9ebca3562f2c5606cf51ab11a9427c0b813a37fb6340a4000","first_seen":"2025-03-04T14:40:44.852091Z","last_seen":"2026-08-09T11:55:21.100738Z","times_seen":99,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/24/kZdHdsau6bShNNaP.png?s=08a6fd25dbfb570607b91c8f478e7e11","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/24/kZdHdsau6bShNNaP.png?s=08a6fd25dbfb570607b91c8f478e7e11 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 119775\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-119774/119775\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:26:50 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 02:57:29 GMT\r\nage: 4285889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dl3Q6nkpiEhfAe7%2FZEz2duQBeDoO93Ohp8rR2Rg%2FSahYQBPFXEW5PoV4LZMTsjlgJc7CqJx6%2FqKBt1vLZ7pjxSVA19eR5zdwqVT5ZKr%2BDDHZ9KY0DlAUEOyA2E56Gc8SQknx6QRO6%2FoPtSuzXQ%3D%3D\"}]}\r\ncf-ray: 9f79b4575b4cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":119775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"989a434cbe04e54d7d55a91b81e972a1","sha1":"6c8cb9de6236566ef08d1b3c35f00063a850d84e","sha256":"a45c7b66739068ec7a43b3ae0d5c711994b2c1b291e20a9f099f90045c653560","sha512":"dcb38145c0a92b8a045172dcedafc171b0c5891be8dbf55738ea136507bd13c0b4d0eb4767f43a41121e303ca0e3a137a9d631a3e65e6e7b06c5de3afcd40c10","ssdeep":"3072:TexuaGrHt4BZIzwgG4hQ9T7TzwWsTljRa39V:ouJHqIzwgt8XQWsJRaV","tlshash":"d8c3129b3d742642e02ac646764bcaa01cbdced7cf11bf74ece9e050543da38a97d609","first_seen":"2025-07-09T04:38:23.201198Z","last_seen":"2026-08-09T11:55:20.961285Z","times_seen":305,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/30/E5EhlsSycqlYuGqP.png?s=68f30ba407289dbf4f1126bd06209ef8","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/30/E5EhlsSycqlYuGqP.png?s=68f30ba407289dbf4f1126bd06209ef8 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 127466\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-127465/127466\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:30:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 14 Apr 2026 22:00:46 GMT\r\nage: 1884491\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tccHhTKAJQ8gf9FaOXHl%2FjvdSYKWNHO%2B9EELnQAEQ%2Fnp5BwD0UO%2BgFoiVCVp5BVKGEPwycJmJOn4o7bLe7eaNciecDlS4tuSpV30r8Vl60J7e4HtA1u2MVUFsggdJ4P0J1mcd9VWTu%2BET3uElw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"b2daf79849e986cb1bfd45f1e0f9e9ba","sha1":"71975f609d901300e4fedf6eac69fec9982df0ab","sha256":"5704cd33e0fd80f3986900a2b91fa08997b0ab5c81b2beb7c05d3175b5a707ee","sha512":"c487febe667d210c879b7a0625f7f38ed3aaf1ba4520adecb4c7aa8f54249248c3dba6e6a7797f9de861ba93caf7b509190e607a9911f45f29d5473b65503c6f","ssdeep":"3072:duFV6atpdT9CCDqzbpXlrojIKM6O456oehFy/8G:yV1z+zbpxoj+U65ST","tlshash":"50c312b72be0cce7cca315596353789039dc64ac8ff975b4a8dc5ce518008eb88e9718","first_seen":"2025-07-09T04:38:23.246944Z","last_seen":"2026-06-20T21:19:02.33253Z","times_seen":259,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/19/BOPxvOvQoOweFna3.png?s=a084849a081d7af4377a2c9e3aaff912","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/19/BOPxvOvQoOweFna3.png?s=a084849a081d7af4377a2c9e3aaff912 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 2513\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-2512/2513\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1263222\r\nlast-modified: Wed, 22 Apr 2026 22:31:59 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsdpYWISdAJHZgXL%2Bou7Uq1ORcakT3hLBoh2tWQ3UIqcPMV9zHBTuwK7IGeTQvN9kCpKZqmTzL%2FicABVwbxobT2Bo%2BBFmyGIYcDA2RzAMe0o3YXhuCq3dGnQXDTjYscLU%2BP%2BYYWatKbbO5llMQ%3D%3D\"}]}\r\ncf-ray: 9f79b4578c34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"a2737911e69fed6ddbd6e23bdcf53e28","sha1":"34098a21c016771344c03538e4cb87b9cc2b3482","sha256":"05483a0da716222893a755a28fb1423c1d191147d4c2511704e0af1e1f110921","sha512":"84088b57ec4602d48cff3959cd62fe950b77da4b5287ab902266591104c489074442e3d10c9510634b481875dafaf1637cc8fc0ec605a7d08a83eb8dc8605e4b","ssdeep":"","tlshash":"19514c428719447b804fcbf15cb8d0914321463d5e57ef0e1c507a999c18651e19325d","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.067267Z","times_seen":424,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/32/lvQoNDpqIVWb0zas.png?s=12c66a843ce48436e387f3255d2dcd9f","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/32/lvQoNDpqIVWb0zas.png?s=12c66a843ce48436e387f3255d2dcd9f HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4067\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-4066/4067\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1704651\r\nlast-modified: Fri, 01 May 2026 14:58:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBUD7IP3vtJTifxCJkP8fd7VJVkZ68D%2FcGbag9KS19s20Qq%2F1c5n645dOCaDh%2BhHNUO7uR3CpmwqJRyjR8MtEDjPQokLdFXV3N20OfPr9R9rd7oqToQll%2FPet1DeMEFw4yA0rm3NgVwy44IBVQ%3D%3D\"}]}\r\ncf-ray: 9f79b4579c75b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"0e299dbbdf41443ce6937ba509a07694","sha1":"d282bdd00549688209b9cf3251dca285ec6bdff3","sha256":"ac523cf89e7e75a21aa3bf2533cdd3c380132f176fd987b320e3a0f1a895767a","sha512":"476e253a80f428aab30d21acb3df5cbd3e12ae4dc0382b0db09188604a3d0a1173a42980b82f486334d9d3167e0d71b6af2aa540951505f36a270504c376c261","ssdeep":"","tlshash":"6a815df3559027b4b68ced84f6ab2ff4804379d1d747d5882d2d48f64cb29289bc6611","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.036228Z","times_seen":417,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iframe15.otomatis.vip/scriptnwl/sga.js?1778088538","fqdn":"iframe15.otomatis.vip","domain":"otomatis.vip","tld":"vip"},"ip":{"addr":"104.20.41.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otomatis.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 00:29:02 GMT","end":"Fri, 26 Jun 2026 01:29:00 GMT"},"fingerprint":{"sha1":"FC:D8:D2:47:60:66:BB:3F:EA:F9:C4:24:EA:66:4F:B4:24:42:B7:0C","sha256":"FC:91:6D:5B:18:AD:69:B4:28:D1:0D:E1:22:AC:BD:16:C1:ED:F6:ED:7C:80:9E:4C:FE:CE:11:21:17:59:D5:45"}}},"request":{"raw":"GET /scriptnwl/sga.js?1778088538 HTTP/1.1\r\nHost: iframe15.otomatis.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://petirkuat.shop/\r\nOrigin: https://petirkuat.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: no-cache\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69FB7A5CADDB7D33358C9850\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 10 Dec 2024 02:47:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12762461353016153911\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: null\r\ncontent-md5: Yrxr6I6F8Q+OwOPdr2lR6A==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f79b45af84756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5711), with no line terminators","md5":"62bc6be88e85f10f8ec0e3ddaf6951e8","sha1":"f97585536dbdd353d210b3ef5543bb21adf586a6","sha256":"8deeeaa9e3b6edd899d21db7df8450105fce2767daed68e99d831b6917c674b0","sha512":"724df981de29d4ddf903537c253f8ef359cc6cf49c8cfa5021ddb4e48cd3778fee7859a3becc7ba734f414d40af3a8c67b9c15b92acca20c92c56a070cf87e4d","ssdeep":"96:CfZakqzPlUhu0I+vLHXG1oEvwlayirhWg29jnX4++q0vvqceker0ZRSU0LlE3CEU:iVhu09THlEvuKrMg29jXmq0gILB3ny3l","tlshash":"f1c173932761cedb03998dbf331e7881f126c42b444488d1f561fe1079e8b26eda973a","first_seen":"2025-01-27T03:56:23.948258Z","last_seen":"2026-07-18T06:09:23.991485Z","times_seen":57,"resource_available":true,"data":null}},"time_used":1839,"timings":{"blocked":927,"dns":0,"connect":1,"send":0,"wait":893,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"iframe15.otomatis.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/62/k6GkmK0OnG7vPprA.png?s=10086c32a9270ebbc74b9a4682760be5","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/62/k6GkmK0OnG7vPprA.png?s=10086c32a9270ebbc74b9a4682760be5 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 147885\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-147884/147885\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 26 Dec 2026 16:20:00 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1696099\r\nlast-modified: Thu, 30 Apr 2026 21:28:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzeCUDiUeBDsBBvZb2kp4eVvP33r2bYNNAFffNJDhjHetDEFE6AsS%2FF8QZ9WnqKfg5vgAkThlg5x6h9Qavujbpc5G4cAW77i0MVttuSe3DbBjV%2Bo6wK6dz8KxzRqFjF6y19Nnd6apJuPkAoNJQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b3db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":147885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"d2e28e7aa530a5511dcafbdc5d5dd1f4","sha1":"9e6a5a39fc57fcdbe478a8e1df7f785482e77dff","sha256":"f003784b583bea84d35d9a0bb254c8ece713079386980636c9ecd08e4bdb38e3","sha512":"c33d830b1b716193cccd039bd47959c1b8a91bd2118c543e83e83e8120428ff8011ea263280dd2fd51172bbcdfa178ee5afec507044f71c45c682e9bf8a36660","ssdeep":"3072:ywfKa1vnPeYJ6O1H5VloBUBxN0IJDlHAgOKYD5SM182sZ:zdfGYJGWwIhlHmdSM11o","tlshash":"b1e312368d196e8d35fd2fe5e01b22bd5b857238e928d61b7da0c0b201ceb875485c5b","first_seen":"2026-01-28T02:47:55.989794Z","last_seen":"2026-08-09T11:55:20.999516Z","times_seen":130,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":35,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/34/mIcKRYz7e2Fc9KJE.png?s=e43fa3c8d16da1a2f66bb21f451512ae","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/34/mIcKRYz7e2Fc9KJE.png?s=e43fa3c8d16da1a2f66bb21f451512ae HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 133521\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-133520/133521\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:40:21 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 18 Mar 2026 22:36:40 GMT\r\nage: 4215138\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xs2rFFIhjvtyJWN6UxYxsszTfNeBUTaz1kXOqGUPVaDe3LxpmiaoeNREN6u%2BJF6bx3zClgzYlrTQQJUUjAUAlNf16LH39VNY%2BaaJMYObZ7YQ9o4HScSNZWREVGLflkp3de0%2FxkB%2Fw%2BUbSGegRg%3D%3D\"}]}\r\ncf-ray: 9f79b4574b1bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"a9d6d52485df713ff32e0c2232f9db70","sha1":"41cc22a44ae6a78e2bc17554b6efcd3515c8fe3f","sha256":"a7b58a183faade28db04de6dec869a133734021cee9ab9cae79f7e293d7412ea","sha512":"a6453bc354a2061f8caa7ad0cf115f7753b79712d47300517747fa1124af16a793c61190fef26758c755822ac3125969517c4bfc91ecef3583d4abcf3480a58e","ssdeep":"3072:PAgLKCH8SKQ2mlefxqbHsFzJDNn0vA86r/ApFyg1kmw:YguEA/JCkJx0v76rojImw","tlshash":"62d3120a66c11cb1ea7bdaedf0d892e8014dbf66194654fa2d6fc1401c1fe34bb0277a","first_seen":"2025-07-09T04:38:23.159909Z","last_seen":"2026-08-09T11:55:20.958411Z","times_seen":294,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/2/UJ0lqXj8xtEHXIRZ.png?s=aabec18f8fdc66dbf236696338384d32","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/2/UJ0lqXj8xtEHXIRZ.png?s=aabec18f8fdc66dbf236696338384d32 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 135586\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-135585/135586\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 15:01:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1940178\r\nlast-modified: Wed, 29 Apr 2026 17:56:16 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sf2l7%2FdlVsdKr0W%2BWy%2B8ad9iIu9BikLyknCC2xRGa%2BW2fSl6wqJ4dExd25cJENUjqijKgUnybWT86nnLpEKGbGnxu2u3Tn%2FJkf6pdUl6gSnRV9qN8ebdkgW1KQNNa0KjqxU3Fp1W3yaIcRl5fg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b4ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":135586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"9554fe0e5260fb87e02d62f3a23c9bbc","sha1":"5080048dce4a44b02e352aff498d7acffb515706","sha256":"2c5732bfd6ca1d59850a7eecbf6722a5e019e3c2c01e1eec1101a8c0cc89118a","sha512":"d2499f907cc4294b69d2ace754c59420bceb2db7856fbce851a4c9d0da5736be2b7587a708da84fb359beef5ae298ed9151a8923cf7bccd78c2ddb6eddbe709d","ssdeep":"3072:ZokzOVNls11zrl3Q9F0htTOhc/q84yPH3uH6diuNzIMj+A6L20Bj2C:ZVzcCLlA9iehcCNYXndiu6MyyQj2C","tlshash":"c7d3136afd9c96905feec2c5f4ec9a65dd5342a643fe46d5be2f90280f7c4c890da100","first_seen":"2025-07-09T04:38:23.176718Z","last_seen":"2026-08-09T11:55:20.991957Z","times_seen":306,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":25,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/40/fYGczuCg83wWBKmb.png?s=b5b5749ad24b5442159cac0f4925b959","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/40/fYGczuCg83wWBKmb.png?s=b5b5749ad24b5442159cac0f4925b959 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 126362\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-126361/126362\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:28:58 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 22:50:18 GMT\r\nage: 4041520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEJdmzI7EvhMfQX4XlNyQU9lT4QIBifl%2Bcy2zbhUPF5zUZ5%2FbFdSwrIvvMgnWOmfYtH58HWKsn9ns8HXe9dQpiVr3r4fHNZlxMig6EGYxCxQMzbc0f%2Fo1yn%2BhgrGPGvZbFoOOguHBEZbUkbLGQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"f6ec1744b4c20b8835820a40a96d27f2","sha1":"40d4c284e2209f0be5fa53886be72d6c2db23b29","sha256":"8cad00093ae2263775cdfc9d7718d838f883dcdafc665e7df3ca25746fb69dc2","sha512":"21aa22ae18e598e9be4de984ef070d8b562af34a50b6d0dbfb1e35bb1a368bdd92af46e2083e3ffd391329d77d30ad637a8a4916bb746f9debd1e21949097672","ssdeep":"3072:Vgrt1tbtYLRkRGZ7SwYRrg2eb+goN69JFpboC92j/6/dk:MtbAkRGZSxtVY9JFD276Vk","tlshash":"8dc31275a347331c3b5b30d599c256d0f232bfecb82f1909a317e11e6265be9b836099","first_seen":"2025-07-09T04:38:23.147572Z","last_seen":"2026-06-13T03:37:44.725051Z","times_seen":249,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":19,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/3/KECxZKw0KpQNPc7o.png?s=8185ab25df54113bd0ddf276daae91cf","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/3/KECxZKw0KpQNPc7o.png?s=8185ab25df54113bd0ddf276daae91cf HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6334\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTtnvfC84GFeMINVy7V%2Fu8bIhjsKXTCzHIksiQM324qMvM3oEzaqww%2BahA8pQ6ozr%2BWU%2FI4i%2FZDyqSQEbOkdWTS2Kq%2BxGQzJeKS8WVbINuNBsXdyURtlzakxJGaUwe9kI%2BqZrSrbNjAnQ5efaHQ%3D\"}]}\r\ncf-ray: 9f79b45708d85690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"30da072168ce66130a74e48fffd389d1","sha1":"645f1a2c62f8722b0914d798706f72d1d27d2565","sha256":"e0f37d37ffc39bd92115b2565f3621e7db78f9f84af6953f869a95d6d86ae5f8","sha512":"e23437a3d729c83a077382f0daeb7b862baf1943695a4f52147ad0159cee16e9a6e7f3698ca7debfae25f0628a96a83de4c517baf394f8ef44587becf9787aab","ssdeep":"96:qiu+oxH+PklODBYGQ0o/u++ExN5VBEEjbfoWTZD8GWiEawcM8UvDeJyS:qYoxHIIvX2HEx/bRXoWJ8viEaGZvDeJ5","tlshash":"e4d19e46c5a17f3ccd3ad4a493b7a3131b11f407fb22a16edc94678b091414d8296bae","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.080094Z","times_seen":348,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-7.jpg","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/banner-slider2/SLIDE-BANNER-PETIRWIN-DESKTOP-7.jpg HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Apr 2026 13:55:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 488428\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":488428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x588, components 3","md5":"adab03b8669fdc40667c6288fc06c5e7","sha1":"f8305049c58d4bd2fe7e24c850b9845284822659","sha256":"b5f53eb0e57cddcfe5def082bc64d7884007a8064e2588c36fa2352a1a0c5a3d","sha512":"49b5a4ddb7213f10f9cc4c605a9f609b31ab3eb3d2c8160cfb1af20c7e6bf03db70446476051ba6df0cd96a9db51dfadcea36e8e9e3c3de82761a9233f309a70","ssdeep":"6144:Aqn2qB2HJBQVDJU3vm936pQNK63kfFLtymOGwsFJV/JlMvggCkCcTq4ORu1WX29F:P26VDE9QI6UdIFGHJOBCkk1H4b/wZC","tlshash":"91a423d6a537361ef9c283b40379704b0e0eb77c8aa32c1ab741b9e4b55e9d3259053b","first_seen":"2026-05-06T17:29:40.138582Z","last_seen":"2026-07-18T06:09:24.006159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/54/C9uT4qhggRk6b4up.png?s=6a357da4a2d48fbb13844a46fae7193f","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/54/C9uT4qhggRk6b4up.png?s=6a357da4a2d48fbb13844a46fae7193f HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 142368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-142367/142368\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:15:56 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1016753\r\nlast-modified: Sat, 02 May 2026 03:32:08 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqY3L0RG6oeO335yY2lwRICPBipsY4qvcMsR5a1hK2JAv4334aKATTVRCCzF3xQDZ2D0RMHJeLs0Hb%2BeVLnXSv6CbeZdhMAcy8yS4EpBYhp1YtTPSJ8WfXfxCPnpAuRLxGPRU9IfzDqWXcJIUQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b40b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"c8901b1715f4abec09b715e6c7907a77","sha1":"8f1704ec97b1a8c12b0efd4957a7d0c9b803da4d","sha256":"55f904ffbd958bc7899889de3ba618c868b44daba596a38bab66cb46e047f4e1","sha512":"4cbf73d31ad8e7c2fe9d850ef699e9dab6a86e3faad95359371daaeec25a1a58132b4c440c726a90d825f625324e9fb08c491f27a41d40d8b5570286789ad5a5","ssdeep":"3072:79gf/rUcebs0Y8q6DHlrLqd2htlZorGzG/1LLGPYufgZM:7aObPw6x/LlZoruG/1LLCbiM","tlshash":"89d312eca8ad6ab0bc593f506f86ea034f2f77884b172064171069af5a6dcc3cb9d511","first_seen":"2025-07-09T04:38:23.215092Z","last_seen":"2026-07-12T20:13:29.329384Z","times_seen":283,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":25,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/11/uPQaix1doKnQ2zJD.png?s=c1ba3a1afba692f90351d194ab63c7b6","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/11/uPQaix1doKnQ2zJD.png?s=c1ba3a1afba692f90351d194ab63c7b6 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 210891\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 13:37:32 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJL0vNPa4opUZhGB8%2BShKRt6bMF4iSoxAoxeEXP8uPErpUsz4dlSCvkh5diLAY1TcoxivJTy8%2Bi3H4ro%2FohNCv8zrhaShrU%2BTRTmTtux%2B7583u0NAbIAD1kymhQsQ%2FqRrK5YtHGpzefQi8G4yKI%3D\"}]}\r\ncf-ray: 9f79b457290a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"c6fcd89b40b90ac50f09c389e8942e9b","sha1":"c523015339df2bc9fcd3aeb1b524d4335aefc52e","sha256":"59a49c55f50503e80d58f2ee86662dd10ff9192e176d55a0a14623d76af59a43","sha512":"7a547c9263a1de836c7f3c942c3c57d7593df200964896edc072710ff1c4d48b97c76e9ae4d043e3ec3e1204727ae3e193792f1ba67199f308724062ec12c784","ssdeep":"3072:MWSsrLHk2VDuA2u9cy4HqTsmMWgwVf2AeHVbGd46kHBV3NroayX:M9s/Hk5ru96HqTsCpf2tl/lyX","tlshash":"ab24128af79415cbe61c66fb0c0dba24fa73200e9b7d8b27520885e47ddb1194c19f21","first_seen":"2026-05-06T17:29:40.140301Z","last_seen":"2026-05-06T17:29:40.140301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/js/custom.min.js?v=2","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /js/custom.min.js?v=2 HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZH8FgSwcIVpsDKmQWi56x2YFonVYLgoeNK9aQSj6ZqPSW%2FF%2BBUmT7Sqc8uXhfCU6DZoG8GVcWvAjvVTOnhTU85DwVsR5ItK8V4Ly2FGQDbOQV7DpVopx6soynPPaUTBdRxdxxcWH3EN4BGU1pEw%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\ncontent-encoding: br\r\nlast-modified: Wed, 06 May 2026 17:28:59 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b457ad35b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3483,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2452)","md5":"8b9747914181af517c780d7bf9b48a13","sha1":"8d6ffb5b713b33654cffaf3833682337045beddd","sha256":"3cc83bdb3bf9bf5a74d1e45dd42bd31dcd18efc2d43108cb397a503c716b9ae1","sha512":"a4361f3d51ca58ac7cede211c987ebdb3e9da8e911f54a8d852fb3dc9e05ba49ca6d54852fed7039421166e072b975217f6f95242838775d5703e8f7a35545d1","ssdeep":"","tlshash":"be71b329385371aa72b3421c262fc009772fdb8c6a770ad3f07b95142df8e702597b98","first_seen":"2024-05-25T20:54:37Z","last_seen":"2026-08-09T11:55:21.083311Z","times_seen":400,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s13.gifyu.com/images/bmOdf.gif","fqdn":"s13.gifyu.com","domain":"gifyu.com","tld":"com"},"ip":{"addr":"65.108.226.197","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s13.gifyu.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 20:23:51 GMT","end":"Thu, 16 Jul 2026 20:23:50 GMT"},"fingerprint":{"sha1":"6D:3E:46:05:3C:C9:6A:25:C6:93:EA:DB:51:5E:03:76:E6:09:48:9D","sha256":"9D:BA:B2:98:92:1C:FB:52:D3:AC:3D:8F:E7:A1:8D:08:E7:9F:9F:B7:7D:20:EF:BC:7E:43:51:45:9C:62:4A:23"}}},"request":{"raw":"GET /images/bmOdf.gif HTTP/1.1\r\nHost: s13.gifyu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.8\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 137384\r\nlast-modified: Tue, 31 Mar 2026 11:46:48 GMT\r\netag: \"69cbb428-218a8\"\r\nexpires: Sat, 09 May 2026 17:29:01 GMT\r\ncache-control: max-age=259200, public, immutable, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137384,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1280 x 240","md5":"d737f80f8ac6f28c4940e88aa984bb89","sha1":"6f932abb74f5db25ec4a9cdc59e22c06c903c560","sha256":"2479b7fc1e733374076ea0368c9bcc6e50b795bc23dc81e720321b24cb3b1a66","sha512":"5f225d2fefc33b272cd1526d165e0af9cf0082a174b53262bf01246c64add081742e38a11419da9314a42e2ca292d7959d7765216eb15a5b74d233b582579607","ssdeep":"3072:pkE7HzpWvcVXqEKFgo0n2gAzo0aKy0LV52ua5RmF8eYVsZ:JLztVp2gHnEoxamRmO6Z","tlshash":"89d312f2d0ad8fb0b8a92e992f06240d150694d8d689743d57ccbb5e970b1b5c8c8fb9","first_seen":"2026-05-06T17:29:40.142094Z","last_seen":"2026-07-18T06:09:24.013469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":99,"dns":7,"connect":21,"send":0,"wait":14,"receive":45,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/get-configuration?ref_id=","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petirkuat.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:00:08 GMT","end":"Sun, 26 Jul 2026 05:00:07 GMT"},"fingerprint":{"sha1":"6A:F8:3C:71:6E:13:14:70:F2:F0:4F:FA:E7:D8:14:73:73:A8:02:01","sha256":"E7:DA:FD:F5:70:08:7B:61:2D:95:C5:4A:4E:12:CB:A2:56:2B:6B:FB:38:EE:D6:5B:03:0C:02:DA:E4:EB:83:6A"}}},"request":{"raw":"GET /get-configuration?ref_id= HTTP/1.1\r\nHost: petirkuat.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImNUWGduMUliMjdwcTRHODFlTjJwTUE9PSIsInZhbHVlIjoiazc1OWZ5cnM0THhsbkZxOEZZN0xUK1d3ajY4V2tkeHRmMEZJWEt6NUZRWHZ4NFlXcHVLNzJiMWtCTjQrQ2pNM0ZGUmVMT293anlweU9aRk5mQ3FYSGFVNmI3NE90d0MwcERLZWtxQ0RIVE9zUCswMXdWQnU4dzMzUWozOUp3OVUiLCJtYWMiOiIyMDg4OTg5YmE4OGM1OGJmYWFkOTk4NTU3YjRhYmNmZjJmYTI2MTUxMDA1NjQ4NzA0YjA4YTI0YTkxN2Q3NThmIiwidGFnIjoiIn0%3D; petirwin_session=eyJpdiI6IjJRTFRpZU5HRkNqcDhwVWxlVlBUZ1E9PSIsInZhbHVlIjoiM0d3bkpDMmpVN0JudDdFYnZLNzJFZjhoWTFpeDN1Z2Z0UmNQN0tnRnIwQnhnUStJYWhBNW5OTml6bEZrc1pvWk8xM1BCd3E3a3hmSnFkR3RlZHlCVnVjZEdyclB0VHpoeWRyM1huSytJVFhTV3RGL08rUW16QmZ6eERuYWJhYmciLCJtYWMiOiIwZTk3NDUwYTViZTk0OWI0ZDkwMGExZjJjMWU0NTQ5MWUxMzM5ZGQ4MzIzMThjZjJjYWNhNDZhNGVkMzRkYTk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.0.11\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ild3M1JtRkJ6cmdyOU9QZFhlN2ZTd2c9PSIsInZhbHVlIjoiTzVUK0FTUTVNd3VlaFFVRlIvdm9uVkxuTWlhaDhrWFJqT3VpR0ZBeS85anNQNjY2VTdGS1NwTXE4bU9sOWtTblVWU3NERWQvZWhTdWhlQjZ1Lzc1Y0JWQVNTUjRaRTR5a1kxVjNvQm5qWTIvcmF2dHRzSXU5T3QyUHVnV1ZXUTUiLCJtYWMiOiJhYmMzMTBiODcyNmQ3Mjc4NjVjZDkwODQ2MzA0NWUyM2U2MGVkYjlhODkzNjgxODYyOTM1YjEwZmVkMDhhMjQwIiwidGFnIjoiIn0%3D; expires=Wed, 06-May-2026 20:29:01 GMT; Max-Age=10800; path=/; samesite=lax\npetirwin_session=eyJpdiI6InF5QVVRamFBMU8wYTNHYllWOHFtSlE9PSIsInZhbHVlIjoiZGJMeEVtVENPUHMrUXVMWldmaU5ReEFoaS9OQlg2VmdBV28vZ0Q2MWdvcTNMMlRQWWNGamFBbkg0dlJaWDRNQnE5VmVvY0hLditDNDRkVTZIRjJjSmlVNE41QXphVGNtU1BhLzljNmlCRFJBYWpzc3pNUFVrSVBOWnpwdG5pbTMiLCJtYWMiOiI3NmNkOWIyNjc0ZTRjNTNkNjEyN2ZjZDc4MzU5ZThhNjVmMDMyZGExNmQ0ZWJiYWEyYWJhNjg0NDEwZDViMGZkIiwidGFnIjoiIn0%3D; expires=Wed, 06-May-2026 20:29:01 GMT; Max-Age=10800; path=/; httponly; samesite=lax\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-CSRF-TOKEN, authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3upyH%2FeqVsnAgxhd9KQy23fKZ%2BfTpp7vyipmlsNH7eT%2FYnycq6MM185%2BgteO4gyFFx2GmDt9pSiNM10GrCvF65GKEu1SCo0lw%2FgfaOerASJEZUINIJ8CRNPeC%2FRXQ09Tmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4687ac8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8395,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc35b782df96ebd2b3295519842667c6","sha1":"dfbeed2003b6c5c1216358e72cf24b9c79c5a981","sha256":"49c83f8f758576255267ca1e7b895a8fc1835ec6affa893b1563811d6a69b1e8","sha512":"ea92b1d7391cc0edb46befc59858e7f683b4a5ff4f963cc9f660829f93ec8d283744f4027b07e4515db69f115a5935a255abd5493aef7a2403fb490a032e2ebd","ssdeep":"192:Ir8b04N9S7jFKYdN/wPHRRyezVtyVq1UVqg:99EjoMNY/vNRtywKVv","tlshash":"d902bc9e918f5c5cc8a22ae8c54e3ff4193df50baa509cb49484ef6082f5bbf3614493","first_seen":"2026-05-06T17:29:40.143212Z","last_seen":"2026-05-06T17:29:40.143212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/39/HPcx4Jg97ivHuFp9.png?s=b911e6bdc24031c15ce2f2dfa7d0f35b","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/39/HPcx4Jg97ivHuFp9.png?s=b911e6bdc24031c15ce2f2dfa7d0f35b HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 130671\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-130670/130671\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:40:53 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1920439\r\nlast-modified: Thu, 30 Apr 2026 04:44:22 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTtvbCbq5GzoMXLwX6z7kFg6g7V1Hrk%2BoB7XQipbRw54SGk7op7%2FS1NZxbXnGTet2fukFRPo1T2k9Hfp5eoR5ntFQo%2F%2FBW%2FmA4WhF%2B6dri64jfXsEw5xSIaw86HR5%2B1u4VPGinSq%2BiBBBSzHbw%3D%3D\"}]}\r\ncf-ray: 9f79b4574b1eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"2371798f81f2d57ed5d857b7cb807b5b","sha1":"b574c52ba321728eb190667f089b09e49910fa6b","sha256":"2e2124350f38c79d2b811d9dbd81c4c99de7afad025f683a1fd2cc6cb41e8841","sha512":"05096071967682c4acb9cdc8f8f54d5d42323edf14994e176f6314b8513c878529a86d9244ed51026333df62009bb1bc9d9806550852b990303bcd9988b850a0","ssdeep":"3072:VYhSxzsvqaOMOLPkkTkKjbJlH75huFx+704khBxT83R0H6L5aS:VYhS5svqaRSXTkK3nb5huF1jvqh9R","tlshash":"5cd312f96ff800e4537b4f6a98cf499a0bca16b25f5f379c507292d8a8320cb4355964","first_seen":"2025-07-09T04:38:23.219493Z","last_seen":"2026-08-09T11:55:21.045549Z","times_seen":293,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/12/ylRTGN2zGMiewmDf.jpg?s=d2f15ed8e5b514a30b0e1e8beaefa7bc","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/12/ylRTGN2zGMiewmDf.jpg?s=d2f15ed8e5b514a30b0e1e8beaefa7bc HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23158\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 19 Apr 2027 19:10:36 GMT\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZYtlDms3HsTU74te7oC1P4dFLZiVSzaL70qwi%2BV%2F0QFcySy1UKBLuiU%2FfzOGlZzVgfm3o0cOhGgHh765Ae5GMUwahUgZ98f%2BwbvhSVnKCtxeGWs1u1X2vzEHfXybzlP2WgtLIR0InAOIfCTm6c%3D\"}]}\r\ncf-ray: 9f79b457390e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1280x471, components 3","md5":"01aebcae59f10cf33c6084c081715779","sha1":"c24e15497a1a5ea3442ce9315b7c1802c1f444e5","sha256":"322c2da490408e29c8bebf91e37e7a6365580de95986d82c756fd3b98eac087c","sha512":"94c7f30f4ec7c6cdcf21fdcc113ab77cb8c129a3263853c4165a417548c30bb02e14a1e6828d368e3b444056c912703c21e982c025e43ffdad9a28d052da8c8f","ssdeep":"384:hjf+uxKy6rU4/1ea5FPkwSP66h0pwNwiCCL3WbVV0V/H:hj2w7gU+eQyvhJ","tlshash":"a2a27c038d14869bb0a883f8bd471ead1f466b0cf8863eff10661ed77d242625d5e4ad","first_seen":"2026-05-06T17:29:40.145231Z","last_seen":"2026-05-06T17:29:40.145231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/6/4qvaCEyPoRKnSoRK.png?s=cc0473fc85f555b7bfad7b552ea4105a","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/6/4qvaCEyPoRKnSoRK.png?s=cc0473fc85f555b7bfad7b552ea4105a HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10790\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-10789/10790\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1822548\r\nlast-modified: Tue, 21 Apr 2026 08:55:20 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J83zXsmOMhLO5NQGbW5sKcqFiHnckJ3yVqExgtEMJakaYT3jY2VSyW%2FlZKHzrIKaYjhNZ1Xat9FzKkR0%2Fo5utUerTtUxK7aQ%2Fpv6HheSS8WtTJrWk5uqjaeVrBE1oXiLo%2F3fQZfZ23uf2ISovg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b6eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"61add427f315c8741f6e2259f60d5ddb","sha1":"bde33abeb251e68596dcb404bc2240d0d6a6924b","sha256":"b1947055b0152fcd0917ab49dedd3d588023d83a37790e3fa11b90ad6e317c59","sha512":"e6391abcd218b7f3162b8aed3b8c03292d9fa853e8443b78beeee0408ac8afe4b0b6c7c80a2f56214c3251494fd2824d93bc3587073ac2db4b07f03fd2482042","ssdeep":"192:0R7GJEW6zkEgbYIb+Kpvi3uIK5+ngyaSgsks/yQwmWeFHsQvQLgTi2:UGEWakUI6P3uDMnvnTks/sEDTx","tlshash":"d822c09bb4086cf78d3db5666071971bed034a1353bf05e6c91ded81599d2e2a2001bf","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.13085Z","times_seen":416,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/40/v6OE18MUOFgzzOQ2.png?s=fdecacdb8d28bf70413b6ea7bc114a72","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/40/v6OE18MUOFgzzOQ2.png?s=fdecacdb8d28bf70413b6ea7bc114a72 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7491\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-7490/7491\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Feb 2027 16:09:03 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1723026\r\nlast-modified: Sat, 25 Apr 2026 01:19:16 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2B04rbcWlkhiaBThV8VqtN1NMy%2BvHuMqH6ZnmkeMsOkQ4fX8ld00hAYbii1dpaVoX%2FxfsWf3auF4JXaS1za%2FYS7pvBiSez2w1TQYTvxv1%2FjfbO6MfyYr0RFgdIpklyjP4%2BcY%2F7w4g0UcH8H%2BtQ%3D%3D\"}]}\r\ncf-ray: 9f79b457ac9db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"dd813f45fa10f7c6c33f19d7a923fa37","sha1":"02312c9d8888e427dbab49d8b14c53a747824fde","sha256":"f765fd43555b9e28f7f7d54635a43cf95c273ec859bef876b9a92d0a365c94ee","sha512":"1f8a8de36dbea9abd6a2629ff04e6a3d925ad5439637a9dcc425f368ea15ef1cb772c250ea8b19c8ed5ba6eb44bf810cb400fdf63f4b2f5ef8f1aaa8bacbba03","ssdeep":"192:w/vTJyNyHFm2LKIGYZYqDgf84TNIdIbtfv0aM:qdiEFZGIGYZzIZpIYM","tlshash":"82f1a0b395d941afceb724517898216d831460f8c2ebc12dc97ee25c2b83d360cd76c6","first_seen":"2026-02-27T02:12:05.233093Z","last_seen":"2026-08-09T11:55:21.063516Z","times_seen":128,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/slot.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/slot.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1520816\r\nlast-modified: Fri, 12 Dec 2025 18:11:22 GMT\r\netag: \"1734b0-645c5305ef4ec\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeccwyV5538Al%2BSNWTtrydCjiIWZRcDmUMKECZbLbUV82gikvB7WrHTnx%2FQohItroi36PP0LN%2FlEtwour%2B6023Y9rKBgxR0MSHQzTwAuieVwyfonRSkg9cyQpv%2FSQl2y7PnJWXrGsiw%3D\"}]}\r\ncf-ray: 9f79b46879de0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1520816,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"c32e8055b884c18d6f84bbf7b38842af","sha1":"67afcfe555ead4be2f349c9b8538790b4238f4d9","sha256":"4e66ec6145f179d7949260e3e6cb8969dd368efc8e8a1b77d553b9c1a7645dc3","sha512":"a034acc93daf183698436d6055844d7c2753552408a76b2a3f5809566090e20fb9a3abf4795ad771d719da48e26878befa92b8714cb3d35a48892f424f4aa39f","ssdeep":"24576:TDIaTMzHL3LBplQtUU1I+O9i6MTyaOK8tMt4t0O:TDdTMzHL3LBvQt11I+yJM2eB+tb","tlshash":"0e2523ba56d08d97b4d61cf19cdfda53dd1984d28482dcb342a63df430eb32e906aad0","first_seen":"2026-03-22T16:59:34.840222Z","last_seen":"2026-07-18T06:09:23.965065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1775,"timings":{"blocked":87,"dns":23,"connect":4,"send":0,"wait":704,"receive":881,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard.alcopay.com/javascript/Sga/script.js?PGMerchantID=419\u0026PGMerchantName=PETIRWIN\u0026PGMinDepo=20000\u0026PGMaxDepo=10000000","fqdn":"dashboard.alcopay.com","domain":"alcopay.com","tld":"com"},"ip":{"addr":"104.26.5.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alcopay.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Thu, 02 Apr 2026 21:39:15 GMT","end":"Wed, 01 Jul 2026 20:35:01 GMT"},"fingerprint":{"sha1":"C4:8B:6A:34:48:99:08:67:6D:16:BB:19:9A:02:FC:EF:60:08:C7:46","sha256":"BF:D5:07:F3:D8:7B:ED:93:99:B3:4F:04:51:43:CA:E2:AB:AB:61:0D:10:26:8E:3F:27:44:23:57:BB:EC:FA:87"}}},"request":{"raw":"GET /javascript/Sga/script.js?PGMerchantID=419\u0026PGMerchantName=PETIRWIN\u0026PGMinDepo=20000\u0026PGMaxDepo=10000000 HTTP/1.1\r\nHost: dashboard.alcopay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, max-age=60\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nl9dGj24PtQTX9LzMXSoTFsp96l6NnTnXvK65cdv8kwpwXtmKJS07J7CcrznEZxEm2FP0H3doHUk%2FQRtv%2FIO5Oe4zVSH27dSqu0rfenx8fGSxie1pTqjvXvedZ34Yk4QYDZHTsK%2FVg%3D%3D\"}]}\r\ncf-ray: 9f79b4559875a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":107,"dns":12,"connect":3,"send":0,"wait":488,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /vendor/bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:28:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2j8biTcFDhsJD1KtkvkBqOC1MlNx5xs%2FxkCy13axY85IlSHroQRuSfyL2X%2FRLVL05%2B1uDcJXRoHcXVMwapfKVd%2Bu9%2FWtHRGtKk%2FgVa4%2FCIRl9lM%2B1yRXp62jG9h%2Br7Awr0Y65YkcGILNQu3jwA%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.3.11\r\nx-cache: EXPIRED\r\ncontent-encoding: br\r\nlast-modified: Wed, 06 May 2026 17:28:59 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b457ad34b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-13T19:20:19.339022Z","times_seen":97898,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"majupantangmundur.pro/gif/sabungayam.gif","fqdn":"majupantangmundur.pro","domain":"majupantangmundur.pro","tld":"pro"},"ip":{"addr":"104.21.85.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"majupantangmundur.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 00:20:11 GMT","end":"Tue, 07 Jul 2026 01:18:46 GMT"},"fingerprint":{"sha1":"93:2D:2C:9C:33:3B:C8:E5:FD:82:11:30:3F:70:BA:C0:35:76:3E:04","sha256":"0E:98:C8:DB:D3:C0:28:16:D7:FB:17:0D:4F:4E:A3:B7:61:80:8F:CB:7B:CD:57:AA:73:60:1B:39:F2:07:C1:D3"}}},"request":{"raw":"GET /gif/sabungayam.gif HTTP/1.1\r\nHost: majupantangmundur.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:29:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 926068\r\nlast-modified: Fri, 12 Dec 2025 18:11:24 GMT\r\netag: \"e2174-645c5307b6e02\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJLU5YTCoTGzvMDV6g1pddf4hj9%2FI3Vtq19DEgvQ3K7ex4LY%2Fd2vcGo7fSeSc%2B4j5uqJpxV%2BXWAtZu3xDl5JsoB5nxx7Z0ojKC7FweUANnsIV3Bgw%2F9ojNuuqNG7SfJrN7aXrPyAfeA%3D\"}]}\r\ncf-ray: 9f79b4688a180731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926068,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"0a223d3f80156b6986c865ccf74f509a","sha1":"b308f4620555ffa8eac05dc2585628a5f9fe418a","sha256":"11464fbfa54e53f10b46d5cedc0c4541147911bc2305cea3ec6829ec108fa035","sha512":"0522cf99e22bbf9f1fa6a5745c49beb4c5123107cd3bede9ec119870295b07d5edee40983cebeaaf63fb6134ca83627296a328241f4bd1e59e3bba84046e2e71","ssdeep":"24576:I8eifSyu8JxdHrzip+QLzBZM/Yd6i2ISVby:I8ehudHJwzv930y","tlshash":"d2152327d6916eff89ef437890a3b15808b667720956b84d497cf1f1ecee5483273a08","first_seen":"2026-05-06T17:29:40.151419Z","last_seen":"2026-07-18T06:09:23.882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2151,"timings":{"blocked":92,"dns":22,"connect":3,"send":0,"wait":901,"receive":1047,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/47/Pe6VugUfoXoXpsWX.png?s=bb7e17aae4db6f3c2612504c59ed9319","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/47/Pe6VugUfoXoXpsWX.png?s=bb7e17aae4db6f3c2612504c59ed9319 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 167303\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-167302/167303\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:33:54 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 27 Mar 2026 04:05:35 GMT\r\nage: 3504202\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqCCqTKjhRn6Kx3QS09gQc7g0Q9smlBMoqUxtMIkDtOCYk7K4kp12bY86v5hnO5sehx6Tdyy4iJbvQzvUqrdinQKPkC4%2BK0XW8Sy999edff60KttmLGDs%2FJlLvO%2FMFIM2BqTnsTQYPw3rxYXAQ%3D%3D\"}]}\r\ncf-ray: 9f79b4574b27b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167303,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"a0810593b01de6e2c579e12724eedc25","sha1":"528cb38c6cfd1542e22cccb2f6fbf8d2b8f2318f","sha256":"4056f45c8ce3076e4b9bc6cd4405d73cc6ab18f21d69e7b1ca26fa8104c4a703","sha512":"376f92ca08916a91f8e193cf73a4caf03d245700ebca52191e900d65c6230e0ed37100994a2bbf42e4721e733c2eb530d50be1ddf319c2a3a870f180caa47591","ssdeep":"3072:MGkelp27kaKnpXlMSpKCd3w58PgZe48nesP57afs6iiKt8:aM6kFnLMiNRP2ednxPp2snj8","tlshash":"6af313ac059c194f7b99ce7fe5478198409a07ffcf79e2146484e2b083e8998d4f86d7","first_seen":"2025-07-09T04:38:23.143942Z","last_seen":"2026-08-09T11:55:20.946653Z","times_seen":293,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/images/bank-list/1/bjkLXwARMTUfGobk.png?s=aaa9ea66565b3c08a906a8b1dc39e584","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/bank-list/1/bjkLXwARMTUfGobk.png?s=aaa9ea66565b3c08a906a8b1dc39e584 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 5134\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 10:04:44 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KsfhWaE6kYxEEY2vaTRk0GpZQ63cNXUBbeRWTd0J62wTkw9tZiFLa8Jgmb6pCpl9JEpYWYqL8u1Bxd7uYpyLIWNY3vGyyD5X0AB30hoz29NoKayQGijdDylWCU8q08fNBXwjCVh%2FIvZNxViT68%3D\"}]}\r\ncf-ray: 9f79b456f8c55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"a23fcf3959dbfbd9a1c763fea1d3a1b2","sha1":"24ef69921a5edb2ad1d104ec2245b4d4315940ef","sha256":"f211db1b7cb8483f1f3b860b730f7661c7519fe751b114d1903f3c05bb8b74a4","sha512":"428b325cd10331602b3a378700de6e4e4557bf47e55bf368e2e16feaa0e88fedd3871fec74f0aaf06b4703369acfbb2c270f0694c8d3c6251163dc4bc30e5eea","ssdeep":"96:/5T9jdBMfzhvY+oOYkSJevpbbvOo1qraK+oEaupLfGbDGIIOzmcD:RT9M7hvYjJwp+oQrsoSLfEBIOaO","tlshash":"d2b18d60ce0cbfb42801ede6d9bdc80cba3b421804f3915ad80d75a355c94a93de6acc","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.06179Z","times_seen":355,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/23/YpMisNvksbUZnl9M.png?s=3aba401d3b2c42468147d54f3be11003","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/23/YpMisNvksbUZnl9M.png?s=3aba401d3b2c42468147d54f3be11003 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 14264\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-14263/14264\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1913253\r\nlast-modified: Sat, 02 May 2026 05:14:21 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ss6%2B1lztqQer5BeOQeCMx6tO8MHtH0qzEQIjMRcFOrlNeU84W6Nvkva%2FpilEGOSkmc9NIouklBAh25M%2F4lSAC%2FMsCZRag5X67sdCIu8BH85rLDs5JuWuq%2B2d4bwI6x0pZ6x8lbIp741E%2FTHuAA%3D%3D\"}]}\r\ncf-ray: 9f79b4579c56b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"1d956984c1f7c99c240165ce3d0a3b7c","sha1":"ffe6800e305364a38a04439f53e39a3056add050","sha256":"427c8f4bd89288991ca96894ea514545065c0ec6489207b11c3b6491f62c6ff4","sha512":"5224aa6f7013527eeffecdad3deef059619c7bbdde552a45202d20135ca1bab14a06fd8f8bc05c572e700c2557151328d87029afa6493161bb9fbf67a961b9d9","ssdeep":"384:rHPZyU45IUcnJgi/C7CkEgFmjVAgf5RMoKSJ:rHxu+JN/qCW4vDKSJ","tlshash":"2d52c0b26d16b514abd9dc99c47b8adcfc3ad4c0c60b4499111e68cad96f03c2323ed3","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.116459Z","times_seen":415,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/39/74ZBKh8MDK95Svyz.png?s=a70a33f06abff9d752118be74503c0a3","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/39/74ZBKh8MDK95Svyz.png?s=a70a33f06abff9d752118be74503c0a3 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 8148\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-8147/8148\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 02 Jan 2027 07:14:32 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1679985\r\nlast-modified: Fri, 01 May 2026 14:58:59 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hM2je3dpYSH6ruSaLPVzhCOlThBL33sZByZPBo7%2FPgrXx0sZI4jG3g4eewNKJJmyY32qaSBeTdApbniR2Gz%2BBKR6vp%2FH8mrgbSr6vVyjiT0pxBiNwQkYk%2FUoNH8ufufWFZkHm4IPKNY%2F8DWu7w%3D%3D\"}]}\r\ncf-ray: 9f79b457ac93b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"790b111f99208da4fe3e015f1bce9fcf","sha1":"629d412d4e789c96c8e6e181bb75a9c324967db6","sha256":"afc3eea6a98ea98378d1932b061355c6eb1ef997ed4f22021927fa5b89c59a78","sha512":"f1fd33b7d212af841fefd87a31e7c7de88424fe14462923dfadf9f46c32045b53a00bc1c9135611682020f885ec83db7bdae57af7c3180579a6e31e1e218f55c","ssdeep":"192:wgypiZ+YuwnmhedJNUOtZq0kRJlv4q5+RbdYFGFWgl:DypiWwnAefuOtGRJmKFDgl","tlshash":"d6f1af2c627f9c10283d7e9f822f469a289d71871f045b6b409e39cd16ba72f607a03d","first_seen":"2026-01-28T02:47:55.984334Z","last_seen":"2026-08-09T11:55:21.128199Z","times_seen":135,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/footer.jpg?s=b9f2a6d4574d77e63170213f26e25b72","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/footer.jpg?s=b9f2a6d4574d77e63170213f26e25b72 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89275\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:01 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7Mk3Q8J9S2MzLWXnbKRjLDv%2BPUdKU4TH8voow5Dq9L6EpK%2FS%2FZg4AjetWF5dVSxKFHIDbUWx8agtZqB%2BnQvkDrTA3G0JG4RHX1OupPsOn9xyRbxNJxqOKbHq21g6D%2Fmo4F%2Bd%2FG9FmaVMHmxmK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4673843b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1800x1013, components 3","md5":"9bb6f9baa7a24c7d116effe2c5b18971","sha1":"803d1fd1e3c42f8bf85900776240d1b2f8a53b1d","sha256":"fcb97d2e179f89a91c747c8b0e1daf5764d37fdbd3e3c97561cf557cbde5cc53","sha512":"9a374c170593b59afef8e7247375093f5c3adfae0bc0b6a0c2576e4039140d32fc175e4ee6e0dde2fe96cfcf8187f56b24b368c6fe57831822950c5c88d1f908","ssdeep":"1536:7bS38s9Z15B6o1ULakcq5qHo4pbrDdERRP4u8qG:Fs9vikktevpbPS6DqG","tlshash":"c193cb578c594bc3602883e8be174eac2f563b0dd8963bff51665ecb3e242521c8e15e","first_seen":"2025-03-06T14:46:29.601833Z","last_seen":"2026-08-09T11:55:21.134202Z","times_seen":31,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad902.site/asset/images/game-8-mobile.png?s=23e488a1b54d0b57b1894a6ef19dc4b9","fqdn":"petirwin.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"172.67.140.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /asset/images/game-8-mobile.png?s=23e488a1b54d0b57b1894a6ef19dc4b9 HTTP/1.1\r\nHost: petirwin.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 19983\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 30 Mar 2027 13:44:34 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6eyd7GloPObFOHfoj1i%2FwFvVEEyz5Ca4k9uWVDgZUYsfHrMMAw8INEQQBOyUsmtA%2BKWn5QuLcUMvezDHpBj9DQ%2FZQyjGrsth73sIoT4r28Rgn9b4LysJac8wTaYg9K4YKxD8HtMCEi%2FsLDQ0EY%3D\"}]}\r\ncf-ray: 9f79b4566ff55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":19983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d22da242af74344cf2fd21f15ab99730","sha1":"2e61834ad57cc8493f0119069fea082c9748b962","sha256":"252223f9be42add3c64e20cd4aa0093150923f9c232018d14849712ac4727138","sha512":"27b95f47806c72685725c594a6756186c0b33f040b57e05ce96f37a4556cb3aa6fc6a259df329522d7034b118858266ff93b504237a4ad1e5065a62d8439606c","ssdeep":"384:7Nf7vbDKbP0rh3fRvWgOrGinDXoBU+veMFmVg85ChkCMqMCqFuAFFmkx:xjDDKr0r9fleDmzVFF85CGCtFAFYk","tlshash":"8892e1e0fe17dd6ea0620558b440cbb67ffbf2e6d0bb207b4d1008944730937281aba6","first_seen":"2024-05-25T20:54:38Z","last_seen":"2026-08-09T11:55:21.112898Z","times_seen":388,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider-game-scroll/38/AsltgRgr0ZcsdW1A.png?s=d69a47da634399a32dd30ee67936eae1","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider-game-scroll/38/AsltgRgr0ZcsdW1A.png?s=d69a47da634399a32dd30ee67936eae1 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 145107\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-145106/145107\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 17:36:20 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 22:34:47 GMT\r\nage: 4042451\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aX6FypcBvUXV2WFOdLOIiLEhYhoIOH3xJ7XVS9tmVPImQssx%2BsytzUiqxwWql1j24dG9NLTEP4Krylib9xbn1SBgPoYklowBqh%2FmG96pVohSDxvQYxAq6W0uZSa%2BKrm9A42BVKxkNw1WTfQ%2Fmg%3D%3D\"}]}\r\ncf-ray: 9f79b4574b33b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 252, 8-bit/color RGBA, non-interlaced","md5":"aa9ae7667983c9b379735098145cd3dd","sha1":"402906370321aef64d9078e18914df503dc8b37e","sha256":"819293606887c907b5bc2df294c94b9c76fa0beb08d80bd790bfce1e8c8977c3","sha512":"2b848f0f4320d9f919e01f80d0a8d578623028c97c6ae1c1c225972b88e73cc76cd341b5a28ca02b740759f5de41f309a7c08e8e7701bda14a2864229784f2c4","ssdeep":"3072:cVD0ESSgvvG9ln4AA+OIrrc4bUgBJBonU6Z/OKnPmphHyxzjsX/Fhb:f/vvBAAm84DoU67up1yxzQ","tlshash":"63e31279d7baf894cb74a1f440212519d0c838f1076f0b6b6b98ad6d1a1ab37331763b","first_seen":"2025-07-09T04:38:23.167411Z","last_seen":"2026-08-09T11:55:21.058676Z","times_seen":293,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirkuat.shop/css/Open24DisplaySt.woff2","fqdn":"petirkuat.shop","domain":"petirkuat.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petirkuat.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:00:08 GMT","end":"Sun, 26 Jul 2026 05:00:07 GMT"},"fingerprint":{"sha1":"6A:F8:3C:71:6E:13:14:70:F2:F0:4F:FA:E7:D8:14:73:73:A8:02:01","sha256":"E7:DA:FD:F5:70:08:7B:61:2D:95:C5:4A:4E:12:CB:A2:56:2B:6B:FB:38:EE:D6:5B:03:0C:02:DA:E4:EB:83:6A"}}},"request":{"raw":"GET /css/Open24DisplaySt.woff2 HTTP/1.1\r\nHost: petirkuat.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImNUWGduMUliMjdwcTRHODFlTjJwTUE9PSIsInZhbHVlIjoiazc1OWZ5cnM0THhsbkZxOEZZN0xUK1d3ajY4V2tkeHRmMEZJWEt6NUZRWHZ4NFlXcHVLNzJiMWtCTjQrQ2pNM0ZGUmVMT293anlweU9aRk5mQ3FYSGFVNmI3NE90d0MwcERLZWtxQ0RIVE9zUCswMXdWQnU4dzMzUWozOUp3OVUiLCJtYWMiOiIyMDg4OTg5YmE4OGM1OGJmYWFkOTk4NTU3YjRhYmNmZjJmYTI2MTUxMDA1NjQ4NzA0YjA4YTI0YTkxN2Q3NThmIiwidGFnIjoiIn0%3D; petirwin_session=eyJpdiI6IjJRTFRpZU5HRkNqcDhwVWxlVlBUZ1E9PSIsInZhbHVlIjoiM0d3bkpDMmpVN0JudDdFYnZLNzJFZjhoWTFpeDN1Z2Z0UmNQN0tnRnIwQnhnUStJYWhBNW5OTml6bEZrc1pvWk8xM1BCd3E3a3hmSnFkR3RlZHlCVnVjZEdyclB0VHpoeWRyM1huSytJVFhTV3RGL08rUW16QmZ6eERuYWJhYmciLCJtYWMiOiIwZTk3NDUwYTViZTk0OWI0ZDkwMGExZjJjMWU0NTQ5MWUxMzM5ZGQ4MzIzMThjZjJjYWNhNDZhNGVkMzRkYTk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6100\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 08 Oct 2025 11:52:09 GMT\r\netag: \"68e65069-17d4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwIeKvYURzkwoTwJLjlVIPgMqTFDJGbcZW6TKUkjf9G5pCT8kHT6QwpY22W4KN4rRzTjtWx5ydip7N3sZu6SJLxsjB0UFvogMD4LOgiEXJd3KlUr3ztzZHXCcR%2F9Grzv3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f79b4674959b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6100,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6100, version 1.0","md5":"0f2d5fc9491ac57ea4b438701910bfb7","sha1":"46f0b89842f26f1ee13cfbe09acb8a326969443f","sha256":"2991f771f85700b7f88a8944a66afcd96199467920eec36cbb7ea77b6028f1dc","sha512":"61267eeff9b063e89ca67159de856cf6490b704b3d78dc16f483508500ea1c41dc973b20692771938665f2da48f832a3093442c95a69c64a487777d239fcb1f7","ssdeep":"96:Y8JjTdCpwgz/fY5AR6PcoA/So3PwHQXnyoooNXCpkP2aCuFz0r6hp6XXANrgCz32:Yogp3z/AiRYsvPww3MUXauFzgIECTiz","tlshash":"4ec19e0bec4d1963ad8d8af101e6d6ffb59f528e8dc365642d7d180a794aa243683812","first_seen":"2023-06-13T20:17:51Z","last_seen":"2026-08-12T13:53:36.685481Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/css/Teko-SemiBold.ttf","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /css/Teko-SemiBold.ttf HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://petirkuat.shop/\r\nOrigin: https://petirkuat.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-powered-by: PHP/7.3.11\r\nx-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 May 2026 17:28:58 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxCrchFRVEu64MseZNotGsEwbLaXFlh62OpS13zFTnJV1SkLt8dEsuun9s7JeiNLyUuJnYiKr3c7b7DNSiPDvxLeUpDXLFJlTPRQdbJ4E88fWaDMUH7mLCLUBdYf1Pm9%2FuxfquQWXwaSTGMQWB4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f79b4559f7c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":294932,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"98763cd5eb435e3d1714e41c224f20b8","sha1":"596e2556c2a4667eddf8affa1a77628a7a2e3467","sha256":"3d9ff585b00fd777776898903c3bd4eff60499f0e1b815b2117e367e78f22d7c","sha512":"784e0b5aa7050273cc1c6339bdcc17aaec7873c90aeb439dea36efb925bdbcdf07aa5601ded4e07f308fa1176467dce5db33ca81ca18817833c752f4d73eeea6","ssdeep":"3072:Wa8NKIcacDGgsr0O2dRNtdjL4vSp/lQY/1oq76FcVMnFOBVH0qO:Z8NUGBodjL4vSpH/1MKVU","tlshash":"95547cdd6d2d849c87472dbd8fd68a7201a09730a6bb258f9d49056c3fd30d20af1ade","first_seen":"2023-06-03T18:43:19Z","last_seen":"2026-08-09T11:55:20.971907Z","times_seen":404,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":97,"dns":1,"connect":8,"send":0,"wait":207,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"petirwin.dataklmsad903.site/vendor/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff","fqdn":"petirwin.dataklmsad903.site","domain":"dataklmsad903.site","tld":"site"},"ip":{"addr":"172.67.144.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad903.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 21:03:41 GMT","end":"Fri, 26 Jun 2026 22:02:26 GMT"},"fingerprint":{"sha1":"95:23:5E:90:CF:17:D2:9D:B9:FA:23:79:29:55:C2:ED:B4:0A:2C:FE","sha256":"5D:6D:D9:6D:7D:74:FE:D0:8D:FA:84:E8:CE:48:4F:B7:3C:F9:9A:B7:21:EC:B3:10:A5:7A:BD:2E:8D:75:3C:9B"}}},"request":{"raw":"GET /vendor/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff HTTP/1.1\r\nHost: petirwin.dataklmsad903.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://petirkuat.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirwin.dataklmsad903.site/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\ncontent-type: font/woff\r\ncontent-length: 23424\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/7.3.11\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 06 May 2026 17:29:01 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Anx6I5tsd7n1z9h6tAT9kL7JjV%2Fur1WI064l0q4iSWHtvTWNJHgrXIsgqf4fZZfsueFN32LGQhomGFaUPstcwWOgNAvN0vnlJ119757dgEox%2BTvMYpXdNRcW%2Fx9Ti8ntX2%2BGsbpzDmwOdM5OOr4%3D\"}]}\r\ncf-ray: 9f79b46748a2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23424,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 23424, version 1.0","md5":"fa2772327f55d8198301fdb8bcfc8158","sha1":"278e49a86e634da6f2a02f3b47dd9d2a8f26210f","sha256":"a26394f7ede100ca118eff2eda08596275a9839b959c226e15439557a5a80742","sha512":"f5366ab255afefe3fe06150e8509e776b5618ff50fe3e0fa8e4d715d645b1e44ddf3ad185e21df1a276e08b3707f55866cb2a83d2f325a56885fcb8e57a74a67","ssdeep":"384:3KH0SsEmXiuhM8/sUn9HyuJhk42a2KuDAwtGqCEFznq4yVL7SFykJMJd:3KUSsEHDUn9HBk4VV0UiFr4L7wU","tlshash":"6db2e0e39f61a28b81b6c63be3c41f3d29c646a0d4176ecfbab185265dd0240a443b78","first_seen":"2023-04-05T04:33:56Z","last_seen":"2026-08-13T17:58:25.675852Z","times_seen":3856,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodlife.rest/download/icon/bukumimpi_icon.png","fqdn":"goodlife.rest","domain":"goodlife.rest","tld":"rest"},"ip":{"addr":"198.54.125.159","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:29:01.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goodlife.rest","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:41:0C:C0:ED:E9:C3:F3:56:48:7A:1F:AC:05:D7:2B:CC:33:36:22","sha256":"42:9C:ED:8D:F8:5E:36:4E:AE:65:41:E0:5F:32:F3:FE:4F:0D:63:26:61:36:6D:61:F6:89:05:D2:53:B3:23:A2"}}},"request":{"raw":"GET /download/icon/bukumimpi_icon.png HTTP/1.1\r\nHost: goodlife.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 May 2026 17:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 20:07:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176082\r\ndate: Wed, 06 May 2026 17:29:01 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":176082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9e5a799a15b4d51c77439b6cd7884500","sha1":"9c8328c00765cdaf5dcc71b7793d6c79f0fc8856","sha256":"e7adbe9bc75924023ec6cecb7f8c7f0fb0c50628e57f912c6a0c9658efb70a4d","sha512":"df2842d9f8cfc5489f9f6e30fb96611c2e3587905f3568fefc1176133ee7ba7cd0a990cba529550e160f59056722d2d6cb330cc80e1647795c02099de9256962","ssdeep":"3072:wL/6uHN4UNmCOluWB0uJgGcIvf+LkjGA8h/X1PQOlq7JiQjRCsoRcfyz3:k/LHNg7ltrgGJ+LkjMvRQYqNndCTRsy7","tlshash":"8f041243fe8ed44f5a01a2ae5c8e458f5acf07d58a9b41961d8d8bb03cb8ce04e45d6f","first_seen":"2026-05-02T14:44:32.513109Z","last_seen":"2026-05-19T04:35:37.101743Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/5/7NyF4s7qBEfZdzYv.png?s=45219c72f2c9f28f53053a776c704497","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:58.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/5/7NyF4s7qBEfZdzYv.png?s=45219c72f2c9f28f53053a776c704497 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10445\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-10444/10445\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Mar 2026 04:13:16 GMT\r\nage: 4194941\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZ79aZ7xHlDp4ltg%2F33TE%2FnmWTJcukq1c84Ntk253ntQq8ws%2FWQkHCnqBZxLkUXIZBZjegqvC6x2QEC4w0Bv59eg0tIVO6s45Cv0ami2D5FAZkocDIig1n6MJJdkUs2A7SQQrq8tLQ1nhozDtg%3D%3D\"}]}\r\ncf-ray: 9f79b4575b68b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"25e3e72e8171e364852cb9038bb89faf","sha1":"12c29db6f035683b133bc5fbc43bff325f13fde1","sha256":"8b5642ad79e00aa03e1a102d965cdb67683702059f079a210dcef069878997a1","sha512":"658aff9b473af24ea5177f2dfd2e992d5700f748d399618a541ff84a34d087d78bd1741facbd14093dcf9136c413efa9ed65111c1dba1e8ee27ef3df55cb3c84","ssdeep":"192:oygPq6jicNDlmGeWhaWzpxvuQsbZqHneKr05IMcvfSVU9rbywkhzuEQ:zgS6jLNDlmGpaQpxvuQEqHE5IM2SVUhb","tlshash":"6422beafbcd263314a88876dc5d0600e9aef4712f04ebd6d005c53765eee2d458ee19a","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.145337Z","times_seen":425,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelive.dataklmsad902.site/images/provider/31/NQLOXaCrM298SxMK.png?s=92b1908c8bd6fb4a121a9061208a6696","fqdn":"onelive.dataklmsad902.site","domain":"dataklmsad902.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://petirkuat.shop/","date":"2026-05-06T17:28:59.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataklmsad902.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 13:06:54 GMT","end":"Thu, 25 Jun 2026 14:05:13 GMT"},"fingerprint":{"sha1":"A8:DE:72:AF:33:B9:3D:BC:85:3B:1C:43:38:8E:5E:A2:7B:70:C9:1C","sha256":"6C:32:86:FF:38:32:94:B5:88:17:C1:E1:C1:41:0B:01:01:90:BC:75:F3:E5:2E:89:A5:8D:91:87:39:BD:7A:8D"}}},"request":{"raw":"GET /images/provider/31/NQLOXaCrM298SxMK.png?s=92b1908c8bd6fb4a121a9061208a6696 HTTP/1.1\r\nHost: onelive.dataklmsad902.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://petirkuat.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 17:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6417\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.11\r\ncontent-range: bytes 0-6416/6417\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 09 Sep 2026 20:03:04 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 1105321\r\nlast-modified: Thu, 30 Apr 2026 04:44:23 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkxp1pmQG24tEvFUkuaDbmQjz3bLmjbYOTGWzLephX4ELI79Oyp3VfMMfde91T17yy078hLROHsRjfutNRcqolHT8HCOSNigAv%2BM4xlwPEoQZHnP2m8seT3THRqd%2F%2F1qXPyxfwBjDX%2F9ZOqJDA%3D%3D\"}]}\r\ncf-ray: 9f79b4579c71b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced","md5":"3f535583cdca51dcf80fd04133b1fa18","sha1":"5004eda887684f968b98ee55b768eb02a9ea6bd8","sha256":"4d44eb18e79a396031cd557eb9835f65d88a0fc96478724c00259f90a0bb3381","sha512":"7bcaef75bf182b77fb455dbfccc4c5cbc68270eca9d80d31c91432d2828d41f0a57ddfaf6e863e0bf88c206122381f18645b564b0bb5c129b9ae019b662cda81","ssdeep":"192:/JGT3qqU6ZqHUJu8IIbf1RWz4rWR5EFHG46rITbeC:xka0qHUJBNt8z4rZHGHIveC","tlshash":"fad18ef63c567832396408158ef65ff726a93a3c128919d71f8cd9820a21e42cce357b","first_seen":"2024-05-25T20:54:39Z","last_seen":"2026-08-09T11:55:21.067975Z","times_seen":425,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}