{"report_id":"6baee1ff-6f08-4160-9198-b477d63a3ac8","version":6,"status":"done","tags":[],"date":"2025-10-07T18:05:26Z","url":{"schema":"http","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"title":"JURAGANWIN33 : Platform Main Game Online Peluang Menang Besar Jadi Juragan"},"submit":{"url":{"schema":"http","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-11T18:05:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-07T18:05:05Z","timestamp":1759860305,"ip_dst":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":48170,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-07T18:05:05.219018+0000\",\"flow_id\":597336909756450,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":48170,\"dest_ip\":\"172.66.145.80\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2025-10-07T18:05:05.210978+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":1809,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cutt.ly","ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-13","domain_rank":3479,"first_seen":"2018-01-23T23:29:00Z","last_seen":"2025-09-30T14:22:05.959953Z","alert_count":0,"request_count":1,"received_data":652,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-05T22:13:51.058913Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2025-10-05T22:36:22.982528Z","alert_count":0,"request_count":1,"received_data":47403,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"juraganwin33.com","ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-09-28","domain_rank":0,"first_seen":"2025-10-07T18:05:27.54719Z","last_seen":"2025-10-07T18:05:27.54719Z","alert_count":7,"request_count":8,"received_data":2899321,"sent_data":3627,"comment":"","tags":null,"fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.k24klik.com","ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-04","domain_rank":117944,"first_seen":"2017-02-02T18:09:00Z","last_seen":"2025-10-07T03:19:17.03004Z","alert_count":0,"request_count":18,"received_data":228159,"sent_data":8031,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"ajax.cloudflare.com","ip":{"addr":"104.17.73.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":17894,"first_seen":"2012-05-23T12:49:48Z","last_seen":"2025-10-07T03:19:17.169148Z","alert_count":0,"request_count":1,"received_data":39354,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-07T18:05:05Z","timestamp":1759860305,"ip_dst":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":48170,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-07T18:05:05.219018+0000\",\"flow_id\":597336909756450,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":48170,\"dest_ip\":\"172.66.145.80\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2025-10-07T18:05:05.210978+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9ab5d895da44d5aed421bb2be883aed","sha1":"903a9e2130576ed8426fcd6e5a9d26ddfa2f3cba","sha256":"900801361b81508291409c87391dd92aae1041470909fb17f4b04f7a58940b85","sha512":"7dbecdace90d9e015a52d0a1ce0d96ad59fea8228bbc3770a00eafbfa94a1b304b12659738c4a0d910e78bd727d481004f50e3820d030d31f9af337fa0f2d489","ssdeep":"","tlshash":"3ee0d8dd76a39bc0c4307176bb9646f20a3354bcd22331b55a5d688a2375c240859a1b","size":357,"data":"","first_seen":"2025-07-23T14:25:30.589657Z","last_seen":"2026-04-19T05:35:51.857136Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94840,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-28T16:09:29.706848Z","times_seen":20545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"74424312f6d9df8e0e37646434c0267e","sha1":"300faeb546fa77e567ac207f766a71274bbb383a","sha256":"8123c19c4e083a18387b841d0baabe981778c99964950102d174a0ab1611855a","sha512":"e1d2727ae9df41c0095ed205302b1bbfe405dac7b706709f2fa472a89c64f5ce9d0d93809e08f7d9dbeb65fa466acb335462835e2d47c10da4572a710c407a0e","ssdeep":"","tlshash":"d5c08c08219b640466beb606f8ba432dfb1fd4ca126910deb94c09882d408790359e32","size":169,"data":"","first_seen":"2025-07-23T14:25:30.592451Z","last_seen":"2026-04-19T05:35:51.858431Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"65ace5fcaa520fa0ffc17466acca3208","sha1":"b7fd84f281d65922e3617516163642d03a9401a8","sha256":"95b99b2677c8b9663de881c61d27f7e4d363aec9ccdc32cf4ddd264a568b1b6c","sha512":"0e5701ac008337551286385ae24f18708a8a149d6b8e79382247f86a800dbeb4a71adef91d9f176c54729dc0d75a53795ad06c28448737632f047f6067dd8d42","ssdeep":"","tlshash":"11b01250465c49a5c9e211f152b8e9527a3290e4502d507d45f26a1e793205ef4f78bc","size":112,"data":"","first_seen":"2025-05-23T04:46:12.635885Z","last_seen":"2026-04-19T05:35:51.885254Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3b587f4820c4520be2a77c57cc9c613","sha1":"3d0e16cdc2b9c4357f8b77350509dde303eb0106","sha256":"39faef293964a9f937cddf2c6c0e02237dbdebc6d0de997a4655f38d50330586","sha512":"a4058732017fb3b7f9fd19a954b569116d3ac5ff45ebc74f8a2e3e00d56f2f653842867e639847b091f27564ec27d75cf3261db4a60c666c71188189a5fa3b1e","ssdeep":"","tlshash":"54514fdab6b66e5f513a7070f457a87eebc9a50fc70049b6c41e1080d3898a6e37385a","size":2708,"data":"","first_seen":"2025-05-23T04:46:12.636695Z","last_seen":"2026-04-19T05:35:51.885904Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"44d2067514fd25ec6ad0c9b9181f44fa","sha1":"8225b218f0fa91efb986834f6743b127cbc06403","sha256":"1c1f8baebd3d7ee4a7a73a9ac3f177606206a7909a45ae16c8ca840e9a22a689","sha512":"2e38cf97b16419c3992beb8e33d71be05ef254863b0ea1ef327b8e3471dfdfb630a6909022d74d482d7370d0390807eb407d97cb072ae2402410ee2bb4aa80d3","ssdeep":"96:QidJ49sX0PjAwDZYqP4fCXR1SMn8Lw0UqOTTrsvrrqP4ZpBOG5R2cZV:zJ46X0bBdYLSaM8Lw1TTPqrrL8K","tlshash":"ce91c7e8b8e50c11967d34b8982f5a0c3fae36354380d469e20cc8608b55cbab943c7f","size":4223,"data":"","first_seen":"2025-10-07T18:05:31.980998Z","last_seen":"2025-10-07T18:05:31.980998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d228820be6da7b9e7de81f89ec6d24","sha1":"cfd37d0e6b2b178cf52f98ced0102cd1de21d907","sha256":"06d7be5357e652f1422151fb46081460b55c18bea1313c0ba61162a48e8e46c2","sha512":"ba3544c096e300fcc6318461f35187d2a00c8cadb9385b59bf2a985916ec6269eb82663a0a9241a6a9fae75c5ce2266051a6f363d4af4878db5a109c07701ba8","ssdeep":"","tlshash":"77d0974d39852e6423eb2533003b82c806b92790c20c8010482f584a1eb08eb311371e","size":251,"data":"","first_seen":"2025-07-23T14:25:30.605278Z","last_seen":"2026-04-19T05:35:51.888133Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-28T15:21:44.438583Z","times_seen":334031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d332dcfa8fda33bdbae95cdfa2f44a0d","sha1":"a0edf3f499f15b2d1a519a7e4d29bf0340ede467","sha256":"076fdf00cabcf4ba9a5d113ad96145c815a75193781ea2dac2dd2a3add03f5c1","sha512":"a839ec095f3a52fa9d20db307acd2a90db1f021c6fde04a1c4b0eb792df3769bc529bb6b5831ae6a406e6a15beae59eadf382cbdfe10a8ce790bfb64980e6dbc","ssdeep":"","tlshash":"937184eafe604c6706b2746374af764c7fa56c0b8b818cb1d04d9084ff0846673a265f","size":3637,"data":"","first_seen":"2025-10-07T18:05:31.984164Z","last_seen":"2025-10-07T18:05:31.984164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","size":8273,"data":"","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-04-27T07:53:47.08849Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.73.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","size":38536,"data":"","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","size":4573,"data":"","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-04-19T05:35:51.851471Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb330cbef85488fc128f528a24dc86e","sha1":"270678c29363e952b511e4935c0a7576585e9c15","sha256":"ae8bb3bd9189529cd0f3f7ec5c90a9d7d943f5d568c0b0c7dbea7d0eb383f638","sha512":"d5502eef127ca9c9c37a76e28dbcd5f6bca01fb078598940306a73ef1c24cef973656f2cdfe42bf669fa945349bc2b12f3f858677b248015be459caa82804815","ssdeep":"","tlshash":"5ad0a7ab1cb98d306799054b61f7e3ad27a12aa07b11950482c9cc1b6b61fd304a1968","size":236,"data":"","first_seen":"2025-05-23T04:46:12.622958Z","last_seen":"2026-04-17T20:29:58.597661Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"962fb42f4a08ddab01072a649b4a2488","sha1":"4076109c87b782bed036bbb230c84231d65424ef","sha256":"0323fe4bbb6ddf464d93650ac7db020ac2afb59755444d2a10907f7939bb47b1","sha512":"48eb97426c179e6e48f001f67a7f27793e0a48e8a33aa38e350cf569eadf7bba06450936aee2e286fb518fbbd332a421a75719cbe2544999e8aa240d7eb595c9","ssdeep":"","tlshash":"46e0c2953140a0aa5633ed32a3ec7360ddf10445759fd87981880c94c03013d03aea6b","size":309,"data":"","first_seen":"2025-07-23T14:25:30.608948Z","last_seen":"2026-04-19T05:35:51.891021Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"8bb22ccf39e1ab912a6cd21da0f0c926","sha1":"2e2a38874defd316d70f5862351cf1e2c273da6e","sha256":"edf32749aeabe849a020e2ce5b5023ceac689513625b9fed8125d5c530c57b19","sha512":"953b21b09ab0bfc3795289fe0a17772d10e5f438b63d3cc030e56ed1fd04db42b2946645560989e1ddc00e7b1c0c114f19d688c2116fc9b794c4dc4841b9abf1","ssdeep":"","tlshash":"fe316234397c0f36cab79d93605b8199b9358187f206d4d5884e6e8417c2ca279af4d5","size":1756,"data":"","first_seen":"2025-10-07T18:05:31.988426Z","last_seen":"2025-10-07T18:05:31.988426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T15:22:24.299092Z","times_seen":820834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"03041d8f329d29bc0772711df15bea3d","sha1":"91dff411830407d708036218580955fffb9890e0","sha256":"ddc7ef2ce41e8ae3e71735b965530836117ed5b4b39c9a8d20b4945dedcb63e9","sha512":"58ba028f269ffde4133d4c921f09216c3aa7a5960057bfcd5aa80f29b7b289b1505711e8a3073121f0e41a114ce609aa9e3f13f7df929c69eb9fdfa389783edd","ssdeep":"","tlshash":"2fd0125df594275da17a31f420379ee422590d0553d19701447f074d01a149f3c668ef","size":283,"data":"","first_seen":"2025-07-23T14:25:30.611862Z","last_seen":"2026-04-19T05:35:51.907323Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/sandbox%20eval%20code","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T15:22:24.310501Z","times_seen":822453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d24355c65ad1e2d6277cf03646b93b4","sha1":"60dafa561aeba7581fdb84b0a25822e5160e3b49","sha256":"c8ab15904ff618beaab82ac077ddb747d6d2faecc864fab4bac288de6f157e3f","sha512":"b118294b9cdabd2df518414a85df0efe3cd0c6cb043a38f4f9e30ec3d6e5112c4c2a19f9b0225edad7ce03f92bdcc05a8d09b3b46b3dde0821bacd8f7ed2f27e","ssdeep":"","tlshash":"e3f0c07e7098723d5473f2e5533bd81caeb62725b19168b3806d47681b4056901895ce","size":532,"data":"","first_seen":"2025-07-23T14:25:30.613468Z","last_seen":"2026-04-17T20:29:58.612159Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b85c698227ef128edf890051b6a110d","sha1":"c4b41cc0440f11eb4a2995360d79d5e12df4720d","sha256":"3e8d775722ea779779e96283d04c6133e1f3796e0a2e48f48ed4f21539da91e9","sha512":"e8a7113370e820d590c80b3e3038851017343787a5a2ab292548ddc479e1000682673bb1cf749f6ebd173e7de013ab9bf1833d76d775486fdfde4ef3cd99a8dd","ssdeep":"","tlshash":"fec080615c94f0d71c5c7d1458d10c65da0a48c36459e034fc95410bdc0518d3d04dc6","size":163,"data":"","first_seen":"2025-07-23T14:25:30.615733Z","last_seen":"2026-04-19T05:35:51.909618Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://juraganwin33.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:44:41 GMT\r\nexpires: Fri, 02 Oct 2026 12:44:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 451223\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-28T15:23:08.467952Z","times_seen":314619,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":95,"dns":1,"connect":20,"send":0,"wait":23,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"sprite.png\"\r\nx-content-type-options: nosniff\r\ndate: Tue, 07 Oct 2025 18:05:06 GMT\r\nserver: fife\r\ncontent-length: 46883\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 494, 8-bit/color RGBA, non-interlaced","md5":"1a645aeeb5a228de82ed42583c1d4890","sha1":"d046b643a79c0a3a4d4e3db6bca29041a34fc95e","sha256":"5d4cb42389358523c07b9eaf4ced8fa9e7a6ee6789a1d6ea7c7f6abe10969737","sha512":"0c868b9f95854f5ba9b5cdd5ec25a009cc9d46e374e194efb19f7491ca751e36b48e52e1431255c60d215c602767dfbbd1d4709bdf105f30f07d3e19e273022a","ssdeep":"768:GcXruNYIALVz9XFaHANkdyM7i404bkDi2MC4vkPEilf2xY3WU+nmSfDQSTqJJqUd:G8VpVaAkAogovkcititmSfqJjuQ9rx","tlshash":"e42302734ffe9a2975694a3106f348c853d5ae6f8721afd3f40cc9e2623e3905632499","first_seen":"2025-05-23T04:46:12.593576Z","last_seen":"2026-04-19T05:35:51.852877Z","times_seen":80,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":94,"dns":5,"connect":28,"send":0,"wait":311,"receive":36,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-07T18:05:03.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 29 Sep 2025 11:13:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 19961\r\ncontent-type: text/html\r\ndate: Tue, 07 Oct 2025 18:05:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90178,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (885), with CRLF line terminators","md5":"32b6e94f040882a9e0988b9a4e1ef789","sha1":"42ee16773cce816fba2f7dd62450ad9cd5b9c9ba","sha256":"884a8d3d0dab9cb04c35ce634fa85f43aaad586dd12f459ac865bbd0d0936a8e","sha512":"fefb12add01c8b1bae07e671c186af2e63e22e3da1c30f89f55663bf3d8092c6aa5b24dcc53d00101f7974743148054af8bfc35237ea952ce40af9b0f9c688b6","ssdeep":"1536:pvRcTsiggjnXmo5WrusAXplU+PEwbMV3WyYk4sq6Z/xp9Pz5igE23:pRcTsigAnXlWr4qjn","tlshash":"4d93199ab9101c2b43339bf1a1726b1ce7558113cf0384a4b2ee9687f7d6db4a23758d","first_seen":"2025-10-07T18:05:31.954593Z","last_seen":"2025-10-07T18:05:31.954593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":130,"dns":71,"connect":26,"send":0,"wait":51,"receive":8,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/k24-2022/k24.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /css/k24-2022/k24.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-4f25\"\r\nexpires: Wed, 05 Nov 2025 18:29:15 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 84949\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43IYMLUWqY8Mp3699GW9fl9qcBmMroQ7OSQN1s6gHsAhmXkqspMGqJjzNmfaUS%2FhzKGeTHK6CRZmYDu9w9jB6PA7L76MRVIzvbwYMw%3D%3D\"}]}\r\ncf-ray: 98af53159cbf5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8dd9db32d02ed2c4e27811f163426a3b","sha1":"d71b12724812dddebff26cf45b4ec5de7afe5b50","sha256":"013fec5583e79e6a65cef698a73b8584b324ba0eaa7e5d786f8dee0dd0233b8a","sha512":"8e869ce18402d0c020100579751b3ed2685ed2e7fe69f08d08a526ecbede3474d9dbdb51f25cad14b4cbc93a47eba0e54d71aad2edd6201e7e817060d029512a","ssdeep":"384:KHkaLef9vQ/A9m2ziwrX6oM1w8+eqFDlromvgFY:v1f9vQ/A9msiwrXE1w8+eqFDlromvgFY","tlshash":"6692b0ee66e00504f626d65c5c11fa56b36d8403860dfd7fe6f3212cbec96d5e0a22e8","first_seen":"2025-05-23T04:46:12.604571Z","last_seen":"2026-04-19T05:35:51.839591Z","times_seen":80,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":5,"connect":6,"send":0,"wait":39,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/icon_share.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/icon_share.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQmo9PaoI0oF9%2BPcuIWBgG9RO3NQn3icOKjSM8tDpRlFjRPIYaIc7V%2BfKXH5AxyTJOrKljfu6Ou3hcGzIlHZjtFXiqWyXSc5vBrmFw%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-2a2\"\r\ncontent-encoding: br\r\ncf-ray: 98af53159cc85688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5696b1d179fc91bf444bef8b2f3f6be","sha1":"e041ae2f92ff26b46e23f71f813fdd7a4848e40a","sha256":"9d88d1b6da895dbc349d011815c003f1e21bddc621dc6cd5350ad93e239fd4e5","sha512":"5603a64119102271adbfca6350216212253d2d23853cb860231984a20cbc57c414116ebb61b06f41d51e71458e92be1b8ebc08c9d6c59bb359ad55c07df7db9b","ssdeep":"","tlshash":"73017da626fa6698a73c435112e8343e3373335433088cb483911fc4da5ed1e5e81ceb","first_seen":"2025-05-23T04:46:12.594908Z","last_seen":"2026-04-19T05:35:51.846748Z","times_seen":80,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/fast_del.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/fast_del.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DX8nI4KYH2miN87SqFF3CPs%2BwGTi3av3380uDRFtOxN9UTwRyRdOwWCByAd3OGmaWL4NiRtxywjpQgFsLrHbpEh0xdOlkml4xImeeA%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-58f\"\r\ncontent-encoding: br\r\ncf-ray: 98af531ada5f5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29f354b8ec27c82188dfab2b38c93dc8","sha1":"049a3b8186902a6e958ca7a642d7b34c17ea7881","sha256":"d4efe7c12e125b7ef8837a3868e94e31543fb385e45af5c39188414baa2b30cf","sha512":"723d62e068c7192a6775e992c1dd88b21d6980fd9eb511938728f56bf4bc3e96dc678a258aaa4751895512503200092b15d977b20a6c2a00837ad6d96ce70128","ssdeep":"","tlshash":"5f2189f867f11ac0cb8fa363e1e0321d599f28b97751cde0a21453d1ea6a1889718ca6","first_seen":"2025-06-27T22:59:24.537858Z","last_seen":"2026-04-19T05:35:51.840453Z","times_seen":63,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/product-view.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /css/product-view.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-6673\"\r\nexpires: Wed, 05 Nov 2025 18:29:12 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 84951\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5%2FluZCQvWQwQHvfT69rs1Wmu%2B3LggYukK%2FetFj1T5ZHIuD3tawVhwFleToMUeqjTBG8Ovm91OHU9TbLKqOhh5vL3wR4dPxmlrXRzQ%3D%3D\"}]}\r\ncf-ray: 98af5315acd75688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26227,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26221), with no line terminators","md5":"515b35077bf4cc8e6d0531c6b27b8449","sha1":"fb45b03801b0ced7a5ec9d31fdf9f36eb4e6ebaf","sha256":"cf0365e3166ea7b698b1e91c3af0db8c59eb0b18a460c218c283a10f08a19051","sha512":"7870037aca238113980c8826b3874e36e39ced81fbc9873b6249c2632e4fcf9af0a06daac480fdf2ee5b90a59310271c1d8945f0d2c580dcb59a25527ce3b599","ssdeep":"384:4TxHuaq1dcXGeKDv8YCSCgQLP16/HVa23hL4bbPdna91Da91dxRDSR:1d7DtPHV8bha91Da91UR","tlshash":"cbc27333a840216db027c96bb691bbdd35248503f6135bbee5a736f4cf924cb1232b59","first_seen":"2025-05-23T04:46:12.600197Z","last_seen":"2026-04-19T05:35:51.843078Z","times_seen":80,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":263,"dns":7,"connect":6,"send":0,"wait":16,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/new_face.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /css/new_face.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-52fd\"\r\nexpires: Wed, 05 Nov 2025 09:31:21 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 117222\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXX3Iy6SKSA1tlnz%2B2n4uKB8i0GyvDWg7x0lg894GhAqVfg2779XfHCokT4rk8Zc5gn8xfGfKOVuLVJrcNfrMYFEOLcP325wjn524g%3D%3D\"}]}\r\ncf-ray: 98af5315acd95688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21239), with no line terminators","md5":"74ee19aa3fbebfcb266c0987418c593d","sha1":"ca1aae23e21e67bd7aff112ce07d5cdab99e2f42","sha256":"049e28bf5bb09e5e8a333aa7188e0b86c60247ab5a8f7d149790e411493ee260","sha512":"3b9edd7856e0480b2ee5da5b9f6d7ecaf59759d933429f047a6c9d7180e69841069b57791858c8f7780a3e41457a2f6adab949715e128da636c626bd7dfa4838","ssdeep":"384:16JkVlGDv+K00AVxDOlBXUxLlHnvrg7i2szOIQm:kKWizVxS7UBOTm","tlshash":"5092b6b3e924607ab47b956ab480b6dd32298517f7130bb6fd52b174c68bcd74332a08","first_seen":"2025-05-23T04:46:12.613703Z","last_seen":"2026-04-19T05:35:51.843785Z","times_seen":80,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":262,"dns":7,"connect":6,"send":0,"wait":13,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /js/lazyload.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-11dd\"\r\nexpires: Sat, 01 Nov 2025 10:08:17 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 460606\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRkZ%2B25FyCLqVNT01F4OTTEnfodvCiN%2FxILjd8KrVnDqWESjEiZK659UR8yEiFy2%2Basd3xKOUl6ppo2uUbKcqW5aKMsiJjqyqjqeXw%3D%3D\"}]}\r\ncf-ray: 98af53159cc45688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4573,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (861)","md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-04-19T05:35:51.851471Z","times_seen":89,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/obat_asli.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/obat_asli.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqTxMhBrJuIdlRrU441ylKkpJOt3vv9N6p6AdUnTcRi0G1OygNTJufw5t9sCv1YXAxpQmIcIL239Fxh3UuMMJ3Hlp17mTCrD1CRKnA%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-372\"\r\ncontent-encoding: br\r\ncf-ray: 98af531ada5d5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":882,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74a3d5474458e62fbad8fa9f253f989a","sha1":"17536d3a92161cf5d5cae4d05b180bb8fc6c0ca3","sha256":"95ad77395c0cc676ea7af0190ba2a919bb0a564f1ef61fe68ff76b777765c2b9","sha512":"89e3c602c7e2f1b0c5a7746c9527ecb39693a5463eb6e930f8423cbe4f074a91432900b48e7441750d1504a7fa99901490e00de106666001d249c4d5acc782ca","ssdeep":"","tlshash":"6a1199e3d2f121c0d3255317f0e4213d6e83ad2833218eea9020aac1e5aaa68166cd90","first_seen":"2025-06-27T22:59:24.592671Z","last_seen":"2026-04-19T05:35:51.852132Z","times_seen":63,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/images/favicon.png","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 29 Sep 2025 10:59:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3842\r\ncontent-type: image/png\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"1f5989ebdb572490550bd9e5daa780df","sha1":"428324c4a882871b92e42dcd6177a2119fa20d09","sha256":"7789f2c98c68c0c75dd1903ab7596970ad15eb34e8afe098c93442fbd3a64af5","sha512":"e17efd0d0aee048cfac1cdf4ca3c6f36759b2e6fdcce820bfe360d2a489b7dee4052cc8014eb253e628eda640ccb89975c11db0ca9f94a7e8e498172c680b9dc","ssdeep":"","tlshash":"2a813a24ac5a0193785e2f93acda2cc4dd7388588b80105d6abbec931d210cbdeab5c7","first_seen":"2025-10-07T18:05:31.962828Z","last_seen":"2025-10-07T18:05:31.962828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/images/favicon.png","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 29 Sep 2025 10:59:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3842\r\ncontent-type: image/png\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"1f5989ebdb572490550bd9e5daa780df","sha1":"428324c4a882871b92e42dcd6177a2119fa20d09","sha256":"7789f2c98c68c0c75dd1903ab7596970ad15eb34e8afe098c93442fbd3a64af5","sha512":"e17efd0d0aee048cfac1cdf4ca3c6f36759b2e6fdcce820bfe360d2a489b7dee4052cc8014eb253e628eda640ccb89975c11db0ca9f94a7e8e498172c680b9dc","ssdeep":"","tlshash":"2a813a24ac5a0193785e2f93acda2cc4dd7388588b80105d6abbec931d210cbdeab5c7","first_seen":"2025-10-07T18:05:31.962828Z","last_seen":"2025-10-07T18:05:31.962828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:03.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /assets/7301462e/jquery.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 04:02:37 GMT\r\netag: \"68d36d5d-17278\"\r\nexpires: Mon, 03 Nov 2025 02:24:20 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 315643\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKSr18z9xw3kdF7kJXEscv7V6CTc2MUtlaCJFzGOGLU6K%2BwS52fU1SJIfdKwOLnQ4RmE1sALYrtWAlznEScQNcpUoPsiqCh2AaE86Q%3D%3D\"}]}\r\ncf-ray: 98af5315acd25688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94840,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-28T16:09:29.706848Z","times_seen":20545,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":269,"dns":9,"connect":1,"send":0,"wait":15,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/bootstrap5.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /css/pageOptimations/bootstrap5.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-fe9\"\r\nexpires: Mon, 03 Nov 2025 02:24:21 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 315642\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TZ7v9dS%2BeWnD%2F26iwu%2BwVhqGjFsdWaowymXhRYhvkKy2TDjNDf%2FPTvsjzstaBQU75PpoLElvxY3oaVu4j10FyHkNI1UP%2BH9DXxInA%3D%3D\"}]}\r\ncf-ray: 98af5315acda5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4073,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"987bda5a665c762febdacef166c2346a","sha1":"08334b1540c49a021cb9c36ec175ce32abe7d9db","sha256":"fa1e64f45ae93a862fda973c11193ba11b556548852998669809cc9fc6fc944f","sha512":"d4388fddf30a480d911a0128fcf199b2b051ec16a282dd8c2f13557dc937bf1945a0fcad16c17bb723a2797c47b3db5f246a74e9be5e7b5106ea0e673c37d336","ssdeep":"","tlshash":"a9811e94e5733eec66a7889b37ca9e8727b459c7840af97479c372148f8802a35717cc","first_seen":"2025-05-23T04:46:12.585435Z","last_seen":"2026-04-19T05:35:51.849786Z","times_seen":80,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":262,"dns":8,"connect":6,"send":0,"wait":25,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-28T15:19:52.615494Z","times_seen":144746,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/thumb-off.png","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /images/thumb-off.png HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 550\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:53:03 GMT\r\netag: \"660cfccf-226\"\r\nexpires: Tue, 04 Nov 2025 01:16:26 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 233318\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMq%2FrxVkAH6cSYI72s2Q%2BMf9TTLKshdT%2Bg8%2BWDRk3nYH3EDhpS6Ws48bmOt%2BUhx4OtoNMVY%2FrVAEzX44F631Of8tsF32N5m8MRMNXQ%3D%3D\"}]}\r\ncf-ray: 98af531beb815688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit gray+alpha, non-interlaced","md5":"a67de3df5746d72238148c91acdf88b1","sha1":"f4484822d8df1e36ea327947094e1d37f51b786e","sha256":"89e81f3bf15878a24d69514b34e283fceb09da501dfb0b113f87491270881203","sha512":"e7a3be3011d0de2649a23ed46143bf806943c0745c86eba03a60eb980e01ce3794385ba806bf4089b0196f0392ca4e157adb7223a10bf56539f3102d503a9324","ssdeep":"","tlshash":"e2f020cef18cedac87ca370120fb038ec022b34b0102162e9142c1de640d7bce12ca96","first_seen":"2025-05-23T04:46:12.590456Z","last_seen":"2025-10-29T14:25:45.901554Z","times_seen":53,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /js/jquery.raty.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\netag: W/\"68d35ff5-2051\"\r\nexpires: Sun, 02 Nov 2025 13:47:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 361078\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOiBm%2Bq%2FcUD1jmq4StEslDlXXLpYcTZI8YG7yCQWNELqs5q8yZ9b0OW1APEMfelFzcP%2Bt7DuvrpF5WPYsFGijDE%2Bs%2BzY7ki60ohYtg%3D%3D\"}]}\r\ncf-ray: 98af5315acd65688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8273,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8081)","md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-04-27T07:53:47.08849Z","times_seen":361,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":266,"dns":11,"connect":1,"send":0,"wait":22,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.73.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ajax.cloudflare.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Tue, 22 Jul 2025 21:17:06 GMT","end":"Wed, 22 Jul 2026 21:17:06 GMT"},"fingerprint":{"sha1":"0A:E4:BD:3C:8F:24:18:32:9A:06:80:47:CF:F3:8F:FD:9D:E2:24:19","sha256":"55:8D:D6:1D:0F:3C:F2:2D:23:FD:B5:16:FF:20:66:E1:51:97:A3:4C:82:4F:9F:9D:B4:EA:D1:08:86:16:F1:CB"}}},"request":{"raw":"GET /cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js HTTP/1.1\r\nHost: ajax.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Oct 2025 09:23:42 GMT\r\netag: W/\"68e38a9e-9688\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F4gP83%2Bv%2BeEpydrdVkLzb2KgXiKnRGMz%2BG%2F8jyjMQjS8xMxtDGHqRxA1cAD5vYIvgSbS6hfm8fyiV%2FDMoWBvmzHo1g9CYMVUAQI%2Fn%2FQR%2FXghTMfL5aXVugvIubReRhxC74TGyWc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15780000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 98af531a5f9bb4ff-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 09 Oct 2025 18:05:05 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38535)","md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":9,"connect":20,"send":0,"wait":7,"receive":0,"ssl":988},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/icon/ic_live_chat_3_3.webp","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /icon/ic_live_chat_3_3.webp HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17018\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-427a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNzDp5CvqIPCovQygjjmZL9VifrP5dX%2FP7tIT3S5BaDPd0MqMGP5MEZTSSiJ0%2BxIXa7%2F52kyYWMuQi0MqsB9YceehIiNrpPhB5xxew%3D%3D\"}]}\r\ncf-ray: 98af53159cc95688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f380115e93aa7ae9ba0fb19a9b4c9ca4","sha1":"a6468104f0f088803f528db8a63fcab036b2cabd","sha256":"cefb621c4fb284b7e2b829bc91f3a43c9b031e6fbef1a800793fa02bbeef3a76","sha512":"314f2538322fb8be7d8b6d3460d7d4f06af9ffa6dda249b5815d7b6e664d12848b79329f5cf11d0e156a59f4bbfdaf1ca0571d89c3b041acb3456bbf93dc0a7c","ssdeep":"384:bLFS7GcdTVIUEl74n+6moeTzzfKwym1RqoIN/1ax6Y22g8YIcI6Qr:/ARBVIUEl74goWfKdFYx727lIRr","tlshash":"ae72d1e1afe151ebc8413730236af677a63d1ffae2470b2265f0cb6168748023919596","first_seen":"2025-05-23T04:46:12.610572Z","last_seen":"2026-04-19T05:35:51.841394Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":807,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/cdn-cgi/rum?","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:06.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1023\r\nOrigin: https://juraganwin33.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 07 Oct 2025 18:05:06 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-28T15:19:52.615494Z","times_seen":144746,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Poppins HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Oct 2025 18:05:04 GMT\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"48ff118e891bb4948701b2d75b360339","sha1":"f5c506042ed4472896a7084751b9be33e5eb1b69","sha256":"55ad63faf3956fc9fb6210fc7037e9aec3ad54586b2ea6fe6465d9c051d340a3","sha512":"5928eefa9e37943a01ffe206c48bce3811871c96f90a0dfe15c97e96a981dbed2a2e698561387fa4dbb12c4a64a3c096b2c4bad9f2b26b211b82f9936a2b4da8","ssdeep":"","tlshash":"ef219891087ae41467831cc5238e3c37ef0e9254b440a564abfe0c98ad67c654372b2d","first_seen":"2025-09-17T15:13:56.931672Z","last_seen":"2026-04-28T13:41:03.129539Z","times_seen":2784,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":399,"dns":0,"connect":27,"send":0,"wait":32,"receive":0,"ssl":374},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/circle-plus.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/circle-plus.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0%2BOl1RpH4CTEObR%2FQs8CagFvSfZiZ7fM4PuKdTQk1zZihW%2F798XNJ7u4Lu%2B4aksx8DLKDP24B%2FV4vU5qy8YbqsHOGnjbH3nZJn0tQ%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-295\"\r\ncontent-encoding: br\r\ncf-ray: 98af531aea655688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d03b3de54ca0a1dd3450cbb4de4b43f9","sha1":"773ab693abba5dc017cbe2aa9e634df3cc1babaa","sha256":"7f826bd6e2f61dca0054184395e1a9ad68f810b4f7fb9cdd60e150e69981a3a8","sha512":"a03430e57ada6b6917ed72f1b200278a101d55cd43bb1a24baef0a3c210310f312c3fd2a8303ae4c0c49a45366944c97cda5b7a117ce46019cbc3db3dd10ea7a","ssdeep":"","tlshash":"bb01f7f129794344d67b0313f8a72554597eb5ae87c0c8e6b54428dccc92c819b7a994","first_seen":"2025-05-23T04:46:12.606413Z","last_seen":"2026-04-17T20:29:58.548006Z","times_seen":76,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/juraganwin33","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"POST /juraganwin33 HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 50\r\nOrigin: https://juraganwin33.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: /csrf.php\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=cu6v4rvo3cora9a312tmhqvp3p; Secure; Path=/\r\ncf-ray: 98af531bae668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":18,"dns":5,"connect":1,"send":0,"wait":111,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/images/banner.png","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:03.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /images/banner.png HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 29 Sep 2025 11:01:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1315159\r\ncontent-type: image/png\r\ndate: Tue, 07 Oct 2025 18:05:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1315159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 736 x 736, 8-bit/color RGB, non-interlaced","md5":"dcde25443ee2eb8f45891346bdbbd02b","sha1":"0fee2c578e57af0477dd49e481aa0cf3f32ffa76","sha256":"dbcfda9dbaefba9aa0399de249aaa57e85a2ec9374b1b79a08fde5114ce8e96d","sha512":"58521b3f8d53c9d7ffef661d20f10785f7e8020844bf5f637d6531c510fbb9294a7384fe21f075b6212eb1915e673734df9d91d239b1a15e0719d0b25916fe1e","ssdeep":"24576:S+dp0TYxkamjrj65DAXGYLpOI/qpT9uwpNTdC6MYDnR:SuuTYLmPW5DAXPLDqT9hpNpCXcnR","tlshash":"d525332918ac83fd712fcfe60fa1903c3adab276df38f9949c85959650cd4826657b0c","first_seen":"2025-10-07T18:05:31.970951Z","last_seen":"2025-10-07T18:05:31.970951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/cart-shopping.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/cart-shopping.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PioF5q7JIwu4ruBaCnycqow%2BC7huwhO6oYI6oU%2BobVWTrOxcLJrPdvoIERGaIngX70pVJOdCwJz47yy1CyahuKtICG6lbzovkVqH9w%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 98af53159cc65688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b4f7e378d8bbd1ccc63aca6a923f98f","sha1":"4ecd450e96115010259bcb6497944ccd78856175","sha256":"2d5f59dc4879582a4f799b87d9fe8b0b985ea3f800c556177634c33a43d2face","sha512":"49b78abf45c75b465339e86b460c381980ab6d910a88c392a53eba8bf2f751df8f1262f7682a28abd26584efe9056ccfcd5f2e72e25924b919f4ea18929ebfd0","ssdeep":"","tlshash":"2111bda0b3e9e2541a23e3d0d13de866f71b14ff7841de8486a0eb99f47f05954c9850","first_seen":"2025-05-23T04:46:12.608659Z","last_seen":"2026-04-19T05:35:51.842345Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/f5681ca0/swipper.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /assets/f5681ca0/swipper.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zA0s2T1JvAHcW5IICiow5PYr79v5KCpk%2FLlUfOvCcM%2FlO3BNPBT8wFy%2F69B2KybjkC89qHriTlPaAqMjaR%2Ff2uePYGZS5ki%2BNrR7bQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=kbinhgbs08r6cpnlohpvap8f4g; Path=/; Max-Age=3600; Expires=Tue, 07 Oct 2025 19:05:05 GMT\nYII_CSRF_TOKEN=7991195a607b52df7c83ec97aff30e41dcbd347bs%3A40%3A%22af14882ff034707561383df71533404d2653175c%22%3B; HttpOnly; Secure; Path=/\r\ncf-ray: 98af53159cc35688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":1137,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/stock.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /redesign/icon/stock.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5O8t%2FlsspfgQETks3kPWRDJl%2FV3ERFzf4JBKeoCRFVmPD0N0%2FGj%2FYKBZ9jVbE400FHLqpjPaCehV100hfLZFrOQqtQXEsbvNScrjYA%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-38c\"\r\ncontent-encoding: br\r\ncf-ray: 98af531ada625688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0063636e8e811fc24829f57f272aa86f","sha1":"5367d0b3eede0ed9893425db3a0826aa36f445a4","sha256":"8ef3c1989041007cfb2a857c3b6bc5b08510081074eb47e77880b847dfa10576","sha512":"5de6a94b1cf9166e456a3f1f0b86681189c56bc165ee9898808957cb7b24b9c7fa60e7af0886cbf277c3f251b8d3f803bc218eeb0b6e0137d8e9adc9194b713f","ssdeep":"","tlshash":"7d11d0aae27995d08103876690e475ed9adf68b423505ff0d6405be7a4e45ed17c4cc0","first_seen":"2025-06-27T22:59:24.594068Z","last_seen":"2026-04-19T05:35:51.844525Z","times_seen":62,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/cdn-cgi/mirage_speedtest/1759860305208","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /cdn-cgi/mirage_speedtest/1759860305208 HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-28T15:19:52.615494Z","times_seen":144746,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://juraganwin33.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98af53168e434e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-28T15:21:44.438583Z","times_seen":334031,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":9,"connect":4,"send":0,"wait":17,"receive":0,"ssl":366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/ajax-loader.gif","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:05.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /images/ajax-loader.gif HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1737\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:50:54 GMT\r\netag: \"660cfc4e-6c9\"\r\nexpires: Mon, 03 Nov 2025 03:47:10 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 310674\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdFmy4UChsbKMhUukdzjVDBLx7esabcYIER2aOmumqGMYdkg%2FFcy%2F7vb%2FIMZorGpl1OcSDQJKahlMIHVGkWjWFEYtP8KLI334JpsRg%3D%3D\"}]}\r\ncf-ray: 98af531bfb8c5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"dd6b7b0bf5c3af22499abc0a9ee1e1b2","sha1":"e8c0018145d616fac4deb460d9c1d9c9dd4d3302","sha256":"0eddaab3b8cb0b15d81d62e5ae5960329c3e576ea78dc321b20734ab20271847","sha512":"8a4c36e3fdb61782f6fc9bf78140c96aa729b4e1120bda34995a90c9d827395e1460f744df17779091d206629664467b997e19a7a6e54e07135ab89e454df601","ssdeep":"","tlshash":"34316805dbf50636fbee21f850ae979c0d2f8af626d5072aac5331588c3446c467d8de","first_seen":"2023-04-06T12:06:14Z","last_seen":"2026-04-28T12:55:03.433654Z","times_seen":2321,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"juraganwin33.com/images/logo.png","fqdn":"juraganwin33.com","domain":"juraganwin33.com","tld":"com"},"ip":{"addr":"188.165.0.190","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"juraganwin33.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 03:49:30 GMT","end":"Sun, 28 Dec 2025 03:49:29 GMT"},"fingerprint":{"sha1":"73:36:13:AC:26:CF:4C:67:89:C9:8C:14:0C:5E:50:45:C8:EA:80:EC","sha256":"CC:2A:E9:2E:DA:33:C1:99:9F:3D:95:D8:BD:C0:CE:C5:B8:BF:BD:F5:FD:CF:94:F8:45:0B:E3:8E:67:BE:10:A7"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: juraganwin33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 29 Sep 2025 10:56:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1483789\r\ncontent-type: image/png\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1483789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2094 x 974, 8-bit/color RGBA, non-interlaced","md5":"b539cc6199e9d13e9540bcd21159cf89","sha1":"0251a8d599364f5c24d444b0c36f4e3cc4b90dc2","sha256":"ea44a6515d6a02bb28e62b66eac3482dee747092659ae170e28fe01c9a7a3f6d","sha512":"50e70fff51146660039a4959f1188f5c31ce2b0823f274421ff20810f6d8ad2d34b508bb60c790f455acbba1d6603024524f87ff08f6d512e960eb16f679dff3","ssdeep":"24576:xizQpIUZ85JiVmFWtTa+V5NBu9UOOYEuM3DsGjG4/15GFH1RyD3F:xDpIUZyJi88Fz5NBuSOvEhHaFH1RyJ","tlshash":"2825339558eb4158cbca14bc5fbbb7b38e1142fe4a2466d52e07af6a1e4b034467ccc3","first_seen":"2025-10-07T18:05:31.974533Z","last_seen":"2025-10-07T18:05:31.974533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"juraganwin33.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/font-awesome.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://juraganwin33.com/","date":"2025-10-07T18:05:04.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:04:50 GMT","end":"Sun, 09 Nov 2025 08:04:48 GMT"},"fingerprint":{"sha1":"74:85:21:63:C9:AB:B4:6A:C8:13:72:D2:04:A5:4B:17:2E:7D:B5:40","sha256":"13:BD:A7:FE:B0:30:E3:21:05:BE:FE:BA:C4:45:BE:75:83:9B:EE:99:15:08:D5:37:84:36:80:76:A5:92:78:18"}}},"request":{"raw":"GET /css/pageOptimations/font-awesome.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://juraganwin33.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 18:05:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\nx-xss-protection: 1; mode=block\r\nexpires: Thu, 06 Nov 2025 12:16:37 GMT\r\ncache-control: public, max-age=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZzzlYXErjY95GvLM2Qe%2FbeYG%2FvxXyXjE3zWWhVSUWpoHdRBIpvp1X2lZfQ7E3sM2dZCvGFjHBVB%2BkpixjhzDtFfM%2FpNdw07wQAVqQ%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 20906\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff4-f7\"\r\ncontent-encoding: br\r\ncf-ray: 98af53159cc25688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"9c3d3ef008726ece5cda728260d82a66","sha1":"e1688d87a3c5269dd5b04e709d45c9ab67aed178","sha256":"97c0206ae94e810b18fd65c91c07a3a5cf8f04b142a60bf1ae380f13e90d61a4","sha512":"e237e66bbc6cd4820eb2496e83153eecfd79f57c338e5a471ca4800d19d575bd346d06f95765e1f4d3e7fa77cdd2427f866c5ab135232db5437d39325be53f22","ssdeep":"","tlshash":"9fd05e2d39a30280605a4c8c6bcb2b9a229451735504d8aabb829a0a5f9997963fa71d","first_seen":"2025-05-23T04:46:12.601112Z","last_seen":"2026-04-19T05:35:51.837098Z","times_seen":79,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}