{"report_id":"6e39eab8-e00a-4afe-8918-52d73a1c0032","version":0,"status":"done","tags":[],"date":"2026-08-28T14:17:25Z","url":{"schema":"http","addr":"bigebmora.com/","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"104.21.71.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"title":"BIgeb","dom":{"size":58463,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0be76e56e4a04c3f673e3a627ba057e8","sha1":"43f5c7f06979acfb188ead528feeca04ea054854","sha256":"4e3ec7b42747cace627295bb896e3a8e5e928503a1016e87a51f05538f3356e8","sha512":"b57a7458ea7b72a3406a435e50686f49791efd0eec1e6777abcbbc42b96b79034b5137c647daca474618b3136accd75ab7632665e70a35ccf04b8884c5ee6abc","ssdeep":"384:fP5cZ0O9TENszhjOTSz6If49BJ7ukN1olyYclNH7FphyjqK4QTaoTFfBrbm/gmbw:fP5cGsRKuLa7pQlDclNH7jhyjqnj2xx","tlshash":"f9433110c7dd191720a290837da55e1abcfe9f32e25e0544f3af4aa6bf83f45ae13149","dom_hash":"domhashd9d4a0cf1efd30359adf3b47d8d132ee","first_seen":"2026-08-28T14:17:30.816048Z","last_seen":"2026-08-28T14:17:30.816048Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bigebmora.com/","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"104.21.71.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:17:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-08-28","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"bigebmora.com/static/mobile/img/home.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mg.rp989.com","ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T14:00:57.879525Z","last_seen":"2026-08-28T14:00:57.879525Z","alert_count":0,"request_count":2,"received_data":1066,"sent_data":1156,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bigebmora.com","ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T14:00:57.888343Z","last_seen":"2026-08-28T14:00:57.888343Z","alert_count":68,"request_count":67,"received_data":11307480,"sent_data":38816,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/layer_mobile/layer.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b779281d1bc48453207fe2cfe0fc269f","sha1":"9d7a4f3faaa85d8abf62bb8f450146a5920144eb","sha256":"27751e247667cc06cc4985515759153864421aab1f2f5a660a79ea82548c7ed4","sha512":"92553de96e3388f4ac94924f577f72cd1cb4b2c3ecef7dbc8a86eac66d4b51ee24292d8d39d0d22c495842a30b99a622d08dafb9fbec890e4f7f24bc417e5bc9","ssdeep":"","tlshash":"8361b876f1013677662321c4e06f590f7a736591b100c802e0e4d1ada9fec4ca8bbf6d","size":3330,"data":"","first_seen":"2025-03-15T23:28:02.133651Z","last_seen":"2026-08-28T14:17:30.932174Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/index/index.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","size":4625,"data":"","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-28T14:17:30.929942Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","size":9591,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.873695Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/lang/id-id.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0830794652be840903e66f12655f586","sha1":"be262a53a29ed6bbc60caf662a5c4a320bdcae1b","sha256":"27829e29d238cd1570fa53dfa3ee87f38d820b7d2263dc77e9db659aa5b6cceb","sha512":"1afafc034d6c4c03ba9b1dc23f630ca44d571f16348d5d47a7b31382bddac2ad5aa266bff9ffd43fd263555a4a53e7aa69d66103957b82a41af07bc1ee16eb96","ssdeep":"","tlshash":"1411f6545b09a40da51126af17e401c9e5ed40770627760c77b7a981df3fd1f40ed60f","size":857,"data":"","first_seen":"2026-08-28T14:01:08.267489Z","last_seen":"2026-08-28T14:17:30.840183Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/web3.min.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef095da06a14bf00d20e844cf96202f","sha1":"8e3dea60e686c94eeded2035c110cbf8b62d847f","sha256":"b2f2c092aadaadb3a720e4f7f114005eff3fa05c663ed84c0b9791b0b39c4aa7","sha512":"e6dc0322c2857cad096fbf29567947ef7e2619d6802f8738f06ea9e7f065ed6fbb5d4012f1a562ae790eb86e5d303b18074b7698facf13005dea7a0405f318c6","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KL3zxK6C8:QZoQjxAzCamsviTeyXaKiX","tlshash":"5155d9c4b650b051c3a66a90441f900ee37ef96d3c4e0169fa57ecf37cb8a89552af39","size":1384704,"data":"","first_seen":"2024-10-04T10:53:17.054173Z","last_seen":"2026-08-28T14:17:30.964749Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-29T19:19:51.422405Z","times_seen":750130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b611cde12f18866736f030afae60c32","sha1":"e364290dedf94d28ac84aaf0992a25ea9aa9cd39","sha256":"2226421a04282eaee5be9bb57521b83c69a5405b3277e2a04c70e0e070518fa2","sha512":"dcdc3f363102a7e5874c6d096e4a6d7a96d2e43202fea35c1cc27a0d7bb44bb74b143220b25adc4f358e075e3736fdd86390664350dc6bb0869569db2af65489","ssdeep":"","tlshash":"aed05e88844b86960b6a046a4b5fb2117112c4770349c4107b1c26eaafe177fa6aaad6","size":265,"data":"","first_seen":"2026-06-08T23:14:59.684176Z","last_seen":"2026-08-28T14:17:30.96853Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f259df655fcb953f394299169f3ec91c","sha1":"f5464f692e8fb66ddc2a42fa5895d48132cde790","sha256":"dd5d9ade106f4c23775b0223b7f4a87e33426c8daa32fc0772f421872396cd6a","sha512":"8b75905a133e9ce578c2a03c12b1458fca2c59c96ca0e2e77f6ecedd97c6a77dcb3d0e3ca3438f49cb52196e84b6f1757a6103bf1cbf61d60cb9a1b368ee0c78","ssdeep":"","tlshash":"35e0c204cad786ca7c08184123ae153b7092d80351c9d656fd6eb11b9f5350fa5e83ec","size":312,"data":"","first_seen":"2026-08-28T14:01:08.302727Z","last_seen":"2026-08-28T14:17:30.969735Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2890177bd2fcb7ac5b7185ae8eddcf7","sha1":"87238cf5365f43e3980250614880be9f05c8993f","sha256":"12f29f8aec96b797e9e0956c255efe1e46a7406207015ce600dbaed7ad0a3bb0","sha512":"aea085f467f3e681fdb1c6262889ff5427678123edaebb0aaad1c08f4e4125f95d8ddedeb297b9872589433fde1d9f8ba6b1ffde065d43974ed30ee325130956","ssdeep":"","tlshash":"9c41cc6ed0a62014c1b366541e9f2118381470e7840dc82f7fcc92a5aff553ec9eb79c","size":2364,"data":"","first_seen":"2026-06-08T23:14:59.686027Z","last_seen":"2026-08-28T14:17:30.971202Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a673cbb5206e793ee3e4744cb269d38c","sha1":"157c643953b7fdadf573cef328e817de67e79806","sha256":"2724fad55e91f52a78317e264911e689d3c8c5dab7c2736f7205b55030b72d8a","sha512":"791f0ffd7809a7224a649ebc4fd394b95d4d2b56e51e6ea2497fbf8c159ab08f227871b7cdcce13b8815b86a893fa6a5d0fc08a6d65172fa4bd116909c63e775","ssdeep":"","tlshash":"30e04f3bf265530101b320fa0d2b2b909832388b6c492d0e7b1c05d14f1c6964c21b0e","size":390,"data":"","first_seen":"2026-08-28T14:01:08.304519Z","last_seen":"2026-08-28T14:17:30.972222Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c529979faa8a1b49ef45cf6279cb3b4e","sha1":"9039d2a23b4679cec1e0478895e25c0b62501fd5","sha256":"632dbca59e1e5b6ebd57dfb5f1f354e0d565eaa364b83c8446b617b0b439264b","sha512":"d71db7c7de2116e482ffbdb111fa788aa50d554cbbeb62c8b8175fdb21fbccd6b26a92843fd818870448826ef7ff585fdcd732fb56576eb572815c16e53ea493","ssdeep":"","tlshash":"e631f3da40d51349a9b728929b8b3a01316794b714cc500bbe1cf6681f4a31f4acbfee","size":1755,"data":"","first_seen":"2026-08-28T14:01:08.305857Z","last_seen":"2026-08-28T14:17:30.972947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b079015879110e8d38fbde163d145292","sha1":"c38f410062f607117a5cb1de8cbc1d6673aa9210","sha256":"acd5895bd78407e9ea93750a80a9c12ae0d5d0609809a4861dab028f128597a4","sha512":"a0006071d2bb6658c336f092a73160f967a13f74d75f07bbd0269b218e7f4fa24dc76a602377f1747cdc0908f035f99ee85a16ea7dec4e7cb63b920dd11eba64","ssdeep":"","tlshash":"a470000c8f2a8000a00a8cc0208082000ca8200222200000a80a0e0030802a0802a0a8","size":20,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.974561Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7ce9aa6a2db0adce79936c961bbe90","sha1":"e335c5857172d93f96041a3d07604d63c127dad8","sha256":"13980e5864f430313cd72432cea992e5f50069551d953ce9b63ab1e7e32819b9","sha512":"9733d3eb9e804073df08cceaf9ac06b1b4cd0b930346e778c75152ea42248311bfe3d9e222397fcd3c76ed9038df22118b42cf3c71c9d6d1d487ecf34613c15b","ssdeep":"","tlshash":"26715288f70e654c283631a65b5e10c8791c443b85148c27ff2d9c7c6f9eb199755a2f","size":3752,"data":"","first_seen":"2026-08-28T14:01:08.318111Z","last_seen":"2026-08-28T14:17:30.975503Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/script.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd8dbda74fc465ae66adcc739addd22","sha1":"9a7cdadeeec394ca68f30ceeb4cd0a5a807008eb","sha256":"816e4ac149a00e91f7dcab8e6494abac7ea31f15d0ac667e117e48308eda79a8","sha512":"37a2fcb6dca3612a35d314448726fe71334d342fa9b9cf491e90ab13920b8cdfae8db3d5d333320e13c277e3e958b94f6367711132f2ba544926f5d981b7e47c","ssdeep":"96:z9+ApqIu5jK5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejqj6Ev1js23vh831GhECX/H","tlshash":"cc9163a87156362d83f233744cfe4425dc3ed665460b8960f0a1b9942d7463e4eebecd","size":4285,"data":"","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.832665Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/index/d3.v4.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","size":221957,"data":"","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-29T08:53:34.638441Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/jquery.cookies.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","size":3139,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-28T23:33:57.579786Z","times_seen":3124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/layui.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","size":7395,"data":"","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-29T01:32:11.479743Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/iosapp.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","size":2054,"data":"","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.925679Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","size":7264,"data":"","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-28T14:17:30.831602Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","size":3862,"data":"","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-28T14:17:30.953888Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","size":7091,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.856727Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/clipboard.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","size":10111,"data":"","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-28T14:17:30.86776Z","times_seen":2278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/websocket.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd143f09d154c1c9ca348c559d53ee80","sha1":"34860721cf753765b16fe526cd7a5618326a3b1a","sha256":"83938f0bdc966fd9a7b7ec3d757eccd7d990a7ae12bef7406e528e9c22a9015b","sha512":"5733bbd345d8fafe9cd76e218d9adba741106fd630aa8be303f0e2d0091f3ab83cf1a63eecbcfc6b92c09d7a94eec161bdb2e4f5dcb53068d30b818598737735","ssdeep":"192:EHjrXg7hWXwiQRdUFUMeajJiMF0Cl3Loa5fFwy4HrwIIgUdjAN:EDrQ0XRQLM1iMF0Cl3LoaILEWNN","tlshash":"167252a0fbac151f50f6102d84ac55c86bdc8571c7a849e7babca6d00748f1e146bdbf","size":16129,"data":"","first_seen":"2025-10-15T23:11:00.714426Z","last_seen":"2026-08-28T14:17:30.883186Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/i5scroll.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","size":1779,"data":"","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-28T14:17:30.853136Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","size":22041,"data":"","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-28T14:17:30.864344Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-29T17:22:25.810621Z","times_seen":140023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj324 class:Event extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false composed:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj327 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] defaultPrevented:false eventPhase:2 isTrusted:true returnValue:true srcElement:map[actor:server1.conn0.watcher17.process7//obj326 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] timeStamp:5616] target:map[actor:server1.conn0.watcher17.process7//obj325 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:error] sealed:false type:object]depth-socket::error","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":100,"column_number":11},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj328 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj332 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"init\",\"client_id\":\"7f00000107d000000767\"} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj330 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj331 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj329 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj333 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj337 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"onweb\",\"client_id\":\"7f00000107d000000767\"} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj335 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj336 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj334 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj338 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj342 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79494.31,\"close\":78490.45,\"high\":81334.15,\"low\":78397.95,\"change\":-2.2478,\"amount\":1751.90542736,\"count\":24505,\"vol\":139901002.72723,\"volume\":139901002.72723,\"canvas\":[79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57,78530.56],\"usd\":\"78,490.450000\"},{\"market\":\"ethusdt\",\"open\":2493.5,\"close\":2475.48,\"high\":2532.7,\"low\":2466.9,\"change\":-1.8126,\"amount\":40596.05575941,\"count\":87850,\"vol\":101570257.08904,\"volume\":101570257.08904,\"canvas\":[2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43,2475.19],\"usd\":\"2,475.480000\"},{\"market\":\"xrpusdt\",\"open\":1.4493,\"close\":1.3898,\"high\":1.4722,\"low\":1.3875,\"change\":-5.3333,\"amount\":5986776.8586848,\"count\":7060,\"vol\":8612406.7446339,\"volume\":8612406.7446339,\"canvas\":[1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935,1.3898],\"usd\":\"1.389830\"},{\"market\":\"dogeusdt\",\"open\":0.0882,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19371430.003588,\"count\":2331,\"vol\":1707564.32563,\"volume\":1707564.32563,\"canvas\":[0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7957,\"close\":7.5665,\"high\":7.9379,\"low\":7.5588,\"change\":-4.3353,\"amount\":93724.7387597,\"count\":5787,\"vol\":728584.33211832,\"volume\":728584.33211832,\"canvas\":[7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623,7.5665],\"usd\":\"7.566500\"},{\"market\":\"wowusdt\",\"open\":1.5176,\"close\":1.469,\"high\":1.6058,\"low\":1.5491,\"change\":-1.2769,\"amount\":47678738757.076,\"count\":47664518430,\"vol\":47672419218.444,\"volume\":47672419218.444,\"canvas\":[1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066,1.469],\"usd\":\"1.469000\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8585,\"high\":0.8933,\"low\":0.8555,\"change\":-2.8736,\"amount\":254485.10651207,\"count\":2320,\"vol\":222860.7958992,\"volume\":222860.7958992,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.858500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7186,\"close\":0.6963,\"high\":0.7307,\"low\":0.6923,\"change\":-4.0909,\"amount\":3413433.3222009,\"count\":14071,\"vol\":2420815.1137181,\"volume\":2420815.1137181,\"canvas\":[0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961,0.6966],\"usd\":\"0.696300\"},{\"market\":\"linkusdt\",\"open\":11.7772,\"close\":11.5953,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4039,\"amount\":525832.32196148,\"count\":13595,\"vol\":6220017.3240902,\"volume\":6220017.3240902,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.595300\"},{\"market\":\"ltcusdt\",\"open\":50.04,\"close\":48.58,\"high\":50.51,\"low\":48.41,\"change\":-3.2464,\"amount\":53318.61570833,\"count\":6599,\"vol\":2643150.1024723,\"volume\":2643150.1024723,\"canvas\":[48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5,48.56],\"usd\":\"48.580000\"},{\"market\":\"adausdt\",\"open\":0.2138,\"close\":0.2049,\"high\":0.2179,\"low\":0.2041,\"change\":-5.1194,\"amount\":7551027.6986015,\"count\":6124,\"vol\":1601129.8694047,\"volume\":1601129.8694047,\"canvas\":[0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049,0.2048],\"usd\":\"0.204924\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.3376,\"close\":0.3402,\"high\":0.342,\"low\":0.337,\"change\":0.7106,\"amount\":47825789.738339,\"count\":10610,\"vol\":16218439.022626,\"volume\":16218439.022626,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340166\"},{\"market\":\"bchusdt\",\"open\":269.28,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4663.70117441,\"count\":5553,\"vol\":1237788.7118785,\"volume\":1237788.7118785,\"canvas\":[257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91,253.59],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9217,\"close\":16.531,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1689,\"amount\":41025.16199822,\"count\":18388,\"vol\":693082.64971728,\"volume\":693082.64971728,\"canvas\":[16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311,16.531],\"usd\":\"16.531000\"},{\"market\":\"xmrusdt\",\"open\":458.4,\"close\":468.01,\"high\":476.07,\"low\":453.08,\"change\":0.5824,\"amount\":16261.73943351,\"count\":21354,\"vol\":7545730.9099058,\"volume\":7545730.9099058,\"canvas\":[469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67,468.74],\"usd\":\"468.010000\"},{\"market\":\"iotausdt\",\"open\":0.0425,\"close\":0.0405,\"high\":0.0447,\"low\":0.0399,\"change\":-7.3227,\"amount\":15369343.62366,\"count\":23923,\"vol\":647776.91198134,\"volume\":647776.91198134,\"canvas\":[0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404,0.0404],\"usd\":\"0.040500\"},{\"market\":\"dashusdt\",\"open\":39.33,\"close\":37.96,\"high\":40.62,\"low\":37.88,\"change\":-5.0525,\"amount\":67245.4677275,\"count\":12225,\"vol\":2644743.6295855,\"volume\":2644743.6295855,\"canvas\":[38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98,37.97],\"usd\":\"37.960000\"},{\"market\":\"zecusdt\",\"open\":728.44,\"close\":780.52,\"high\":807.24,\"low\":719.24,\"change\":4.2389,\"amount\":869.92490112,\"count\":20883,\"vol\":661443.67245711,\"volume\":661443.67245711,\"canvas\":[791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07,780.5],\"usd\":\"780.520000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj340 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj341 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj339 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj343 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj347 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79555.15,\"close\":78777,\"high\":81334.15,\"low\":78766.25,\"change\":-1.891,\"amount\":1722.73115364,\"count\":23694,\"vol\":137634710.65995,\"volume\":137634710.65995,\"canvas\":[79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57,78530.56],\"usd\":\"78,777.000000\"},{\"market\":\"ethusdt\",\"open\":2493.5,\"close\":2476.97,\"high\":2532.7,\"low\":2466.9,\"change\":-1.7535,\"amount\":40596.11665941,\"count\":87860,\"vol\":101570407.92748,\"volume\":101570407.92748,\"canvas\":[2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43,2475.19],\"usd\":\"2,476.970000\"},{\"market\":\"xrpusdt\",\"open\":1.4493,\"close\":1.3929,\"high\":1.4722,\"low\":1.3875,\"change\":-5.1242,\"amount\":5986817.3686848,\"count\":7061,\"vol\":8612463.1710129,\"volume\":8612463.1710129,\"canvas\":[1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935,1.3898],\"usd\":\"1.392900\"},{\"market\":\"dogeusdt\",\"open\":0.0882,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19371430.003588,\"count\":2331,\"vol\":1707564.32563,\"volume\":1707564.32563,\"canvas\":[0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7957,\"close\":7.5745,\"high\":7.9379,\"low\":7.5588,\"change\":-4.2342,\"amount\":93741.5962597,\"count\":5788,\"vol\":728712.01925207,\"volume\":728712.01925207,\"canvas\":[7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623,7.5665],\"usd\":\"7.574500\"},{\"market\":\"wowusdt\",\"open\":1.48,\"close\":1.5111,\"high\":1.6058,\"low\":1.5491,\"change\":1.5524,\"amount\":47678810523.006,\"count\":47664556930,\"vol\":47672446486.513,\"volume\":47672446486.513,\"canvas\":[1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066,1.469],\"usd\":\"1.511100\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8585,\"high\":0.8933,\"low\":0.8555,\"change\":-2.8736,\"amount\":254485.10651207,\"count\":2320,\"vol\":222860.7958992,\"volume\":222860.7958992,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.858500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7186,\"close\":0.6963,\"high\":0.7307,\"low\":0.6923,\"change\":-4.0909,\"amount\":3413433.3222009,\"count\":14071,\"vol\":2420815.1137181,\"volume\":2420815.1137181,\"canvas\":[0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961,0.6966],\"usd\":\"0.696300\"},{\"market\":\"linkusdt\",\"open\":11.7772,\"close\":11.5953,\"high\":12.0479,\"low\":11.5615,\"change\":-2.4039,\"amount\":525832.32196148,\"count\":13595,\"vol\":6220017.3240902,\"volume\":6220017.3240902,\"canvas\":[11.7137,11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093],\"usd\":\"11.595300\"},{\"market\":\"ltcusdt\",\"open\":50.04,\"close\":48.58,\"high\":50.51,\"low\":48.41,\"change\":-3.2464,\"amount\":53318.61570833,\"count\":6599,\"vol\":2643150.1024723,\"volume\":2643150.1024723,\"canvas\":[48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5,48.56],\"usd\":\"48.580000\"},{\"market\":\"adausdt\",\"open\":0.2138,\"close\":0.205,\"high\":0.2179,\"low\":0.2041,\"change\":-5.0893,\"amount\":7552874.0667015,\"count\":6125,\"vol\":1601508.3545551,\"volume\":1601508.3545551,\"canvas\":[0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049,0.2048],\"usd\":\"0.204989\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.3376,\"close\":0.3402,\"high\":0.342,\"low\":0.337,\"change\":0.7106,\"amount\":47825789.738339,\"count\":10610,\"vol\":16218439.022626,\"volume\":16218439.022626,\"canvas\":[0.3411,0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402],\"usd\":\"0.340166\"},{\"market\":\"bchusdt\",\"open\":269.28,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4663.70117441,\"count\":5553,\"vol\":1237788.7118785,\"volume\":1237788.7118785,\"canvas\":[257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91,253.59],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9217,\"close\":16.5308,\"high\":17.1978,\"low\":16.5306,\"change\":-3.1701,\"amount\":41035.99069822,\"count\":18392,\"vol\":693261.65712647,\"volume\":693261.65712647,\"canvas\":[16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311,16.531],\"usd\":\"16.530800\"},{\"market\":\"xmrusdt\",\"open\":458.4,\"close\":468.68,\"high\":476.07,\"low\":453.08,\"change\":0.7264,\"amount\":16263.83013351,\"count\":21356,\"vol\":7546710.0177068,\"volume\":7546710.0177068,\"canvas\":[469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67,468.74],\"usd\":\"468.680000\"},{\"market\":\"iotausdt\",\"open\":0.0425,\"close\":0.0406,\"high\":0.0447,\"low\":0.0399,\"change\":-7.0938,\"amount\":15370108.02656,\"count\":23924,\"vol\":647807.94673908,\"volume\":647807.94673908,\"canvas\":[0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404,0.0404],\"usd\":\"0.040600\"},{\"market\":\"dashusdt\",\"open\":39.33,\"close\":38,\"high\":40.62,\"low\":37.88,\"change\":-4.9525,\"amount\":67292.1439275,\"count\":12234,\"vol\":2646516.0113705,\"volume\":2646516.0113705,\"canvas\":[38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98,37.97],\"usd\":\"38.000000\"},{\"market\":\"zecusdt\",\"open\":728.44,\"close\":780.5,\"high\":807.24,\"low\":719.24,\"change\":4.2362,\"amount\":869.96920112,\"count\":20884,\"vol\":661478.24860711,\"volume\":661478.24860711,\"canvas\":[791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07,780.5],\"usd\":\"780.500000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj345 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj346 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj344 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj348 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj352 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79494.31,\"close\":78603.89,\"high\":81334.15,\"low\":78397.95,\"change\":-2.1065,\"amount\":1755.08263698,\"count\":24518,\"vol\":140150709.90312,\"volume\":140150709.90312,\"canvas\":[79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57,78530.56],\"usd\":\"78,603.890000\"},{\"market\":\"ethusdt\",\"open\":2493.5,\"close\":2478.4,\"high\":2532.7,\"low\":2466.9,\"change\":-1.6968,\"amount\":40596.80835941,\"count\":87876,\"vol\":101572122.01087,\"volume\":101572122.01087,\"canvas\":[2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43,2475.19],\"usd\":\"2,478.400000\"},{\"market\":\"xrpusdt\",\"open\":1.4493,\"close\":1.3929,\"high\":1.4722,\"low\":1.3875,\"change\":-5.1242,\"amount\":5986817.3686848,\"count\":7061,\"vol\":8612463.1710129,\"volume\":8612463.1710129,\"canvas\":[1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935,1.3898],\"usd\":\"1.392900\"},{\"market\":\"dogeusdt\",\"open\":0.0882,\"close\":0.0859,\"high\":0.0902,\"low\":0.0856,\"change\":-4.035,\"amount\":19371430.003588,\"count\":2331,\"vol\":1707564.32563,\"volume\":1707564.32563,\"canvas\":[0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859,0.0859],\"usd\":\"0.085904\"},{\"market\":\"etcusdt\",\"open\":7.7957,\"close\":7.5829,\"high\":7.9379,\"low\":7.5588,\"change\":-4.128,\"amount\":93746.5962597,\"count\":5790,\"vol\":728749.93000207,\"volume\":728749.93000207,\"canvas\":[7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623,7.5665],\"usd\":\"7.582900\"},{\"market\":\"wowusdt\",\"open\":1.5111,\"close\":1.4839,\"high\":1.6058,\"low\":1.5491,\"change\":-0.2755,\"amount\":47678810524.696,\"count\":47664556932,\"vol\":47672446488.204,\"volume\":47672446488.204,\"canvas\":[1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066,1.469],\"usd\":\"1.483900\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8585,\"high\":0.8933,\"low\":0.8555,\"change\":-2.8736,\"amount\":254485.10651207,\"count\":2320,\"vol\":222860.7958992,\"volume\":222860.7958992,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.858500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7186,\"close\":0.6963,\"high\":0.7307,\"low\":0.6923,\"change\":-4.0909,\"amount\":3413433.3222009,\"count\":14071,\"vol\":2420815.1137181,\"volume\":2420815.1137181,\"canvas\":[0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961,0.6966],\"usd\":\"0.696300\"},{\"market\":\"linkusdt\",\"open\":11.7772,\"close\":11.6153,\"high\":12.0479,\"low\":11.5615,\"change\":-2.2355,\"amount\":525968.43196148,\"count\":13598,\"vol\":6221598.0493032,\"volume\":6221598.0493032,\"canvas\":[11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093,11.6073],\"usd\":\"11.615300\"},{\"market\":\"ltcusdt\",\"open\":50.04,\"close\":48.58,\"high\":50.51,\"low\":48.41,\"change\":-3.2464,\"amount\":53318.61570833,\"count\":6599,\"vol\":2643150.1024723,\"volume\":2643150.1024723,\"canvas\":[48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5,48.56],\"usd\":\"48.580000\"},{\"market\":\"adausdt\",\"open\":0.2138,\"close\":0.2054,\"high\":0.2179,\"low\":0.2041,\"change\":-4.8856,\"amount\":7555553.3823015,\"count\":6127,\"vol\":1602058.6190054,\"volume\":1602058.6190054,\"canvas\":[0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049,0.2048],\"usd\":\"0.205429\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.3376,\"close\":0.3402,\"high\":0.342,\"low\":0.337,\"change\":0.7097,\"amount\":47834126.218339,\"count\":10611,\"vol\":16221274.784672,\"volume\":16221274.784672,\"canvas\":[0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402,0.3402],\"usd\":\"0.340163\"},{\"market\":\"bchusdt\",\"open\":269.28,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4663.70117441,\"count\":5553,\"vol\":1237788.7118785,\"volume\":1237788.7118785,\"canvas\":[257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91,253.59],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9217,\"close\":16.6488,\"high\":17.1978,\"low\":16.5306,\"change\":-2.4789,\"amount\":41038.10699822,\"count\":18394,\"vol\":693296.89069237,\"volume\":693296.89069237,\"canvas\":[16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311,16.531],\"usd\":\"16.648800\"},{\"market\":\"xmrusdt\",\"open\":458.4,\"close\":468.78,\"high\":476.07,\"low\":453.08,\"change\":0.7479,\"amount\":16265.73083351,\"count\":21360,\"vol\":7547600.9091158,\"volume\":7547600.9091158,\"canvas\":[469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67,468.74],\"usd\":\"468.780000\"},{\"market\":\"iotausdt\",\"open\":0.0425,\"close\":0.0406,\"high\":0.0447,\"low\":0.0399,\"change\":-7.0938,\"amount\":15370108.02656,\"count\":23924,\"vol\":647807.94673908,\"volume\":647807.94673908,\"canvas\":[0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404,0.0404],\"usd\":\"0.040600\"},{\"market\":\"dashusdt\",\"open\":39.33,\"close\":38.04,\"high\":40.62,\"low\":37.88,\"change\":-4.8524,\"amount\":67346.6848275,\"count\":12242,\"vol\":2648589.7025085,\"volume\":2648589.7025085,\"canvas\":[38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98,37.97],\"usd\":\"38.040000\"},{\"market\":\"zecusdt\",\"open\":728.44,\"close\":780.5,\"high\":807.24,\"low\":719.24,\"change\":4.2362,\"amount\":870.01840112,\"count\":20885,\"vol\":661516.64920711,\"volume\":661516.64920711,\"canvas\":[791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07,780.5],\"usd\":\"780.500000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj350 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj351 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj349 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj353 class:MessageEvent extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false currentTarget:map[actor:server1.conn0.watcher17.process7//obj357 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] data:{\"type\":\"allticker\",\"ticker\":[{\"market\":\"btcusdt\",\"open\":79494.31,\"close\":78610.6,\"high\":81334.15,\"low\":78397.95,\"change\":-2.0982,\"amount\":1755.33676053,\"count\":24524,\"vol\":140170685.47152,\"volume\":140170685.47152,\"canvas\":[79193.87,79224.48,79147.77,79193.86,79132.65,79171.86,79256.2,79359.51,79377.55,79333.68,79377.54,79483.29,79224.48,79286.13,79026.48,78941.73,78788.67,78744.97,78700.14,78612.25,78620.34,78913.41,78814.13,78729.53,78673.02,78596.1,78536.63,78520.52,78520.57,78530.56],\"usd\":\"78,610.600000\"},{\"market\":\"ethusdt\",\"open\":2493.5,\"close\":2478.57,\"high\":2532.7,\"low\":2466.9,\"change\":-1.6901,\"amount\":40596.81075941,\"count\":87879,\"vol\":101572127.95944,\"volume\":101572127.95944,\"canvas\":[2499.86,2503.51,2500.64,2501.54,2502.16,2503.76,2507.13,2511.42,2512.38,2510.99,2511.65,2516.67,2507.63,2509.86,2500.2,2496.21,2490.23,2488.09,2484.65,2481.21,2482.94,2490.31,2485.93,2483.22,2480.87,2476.49,2473.26,2475.98,2472.43,2475.19],\"usd\":\"2,478.570000\"},{\"market\":\"xrpusdt\",\"open\":1.4493,\"close\":1.3929,\"high\":1.4722,\"low\":1.3875,\"change\":-5.1242,\"amount\":5986817.3686848,\"count\":7061,\"vol\":8612463.1710129,\"volume\":8612463.1710129,\"canvas\":[1.416,1.416,1.416,1.4151,1.4151,1.4151,1.4151,1.417,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4185,1.4227,1.4156,1.4052,1.4033,1.3952,1.4023,1.3991,1.4029,1.4026,1.3961,1.3952,1.3908,1.3915,1.3935,1.3898],\"usd\":\"1.392900\"},{\"market\":\"dogeusdt\",\"open\":0.0882,\"close\":0.0861,\"high\":0.0902,\"low\":0.0856,\"change\":-3.8541,\"amount\":19371900.003588,\"count\":2333,\"vol\":1707604.77641,\"volume\":1707604.77641,\"canvas\":[0.0865,0.0866,0.0866,0.0865,0.0865,0.0865,0.0867,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0866,0.0871,0.0868,0.0867,0.0864,0.0862,0.086,0.0859,0.0857,0.0857,0.086,0.0861,0.086,0.086,0.086,0.0859,0.0859],\"usd\":\"0.086066\"},{\"market\":\"etcusdt\",\"open\":7.7957,\"close\":7.6002,\"high\":7.9379,\"low\":7.5588,\"change\":-3.9093,\"amount\":93754.5877597,\"count\":5791,\"vol\":728810.66700037,\"volume\":728810.66700037,\"canvas\":[7.6788,7.6788,7.6788,7.6581,7.6651,7.6651,7.6427,7.6778,7.677,7.6771,7.6759,7.6834,7.6834,7.6898,7.6772,7.6259,7.628,7.5985,7.6013,7.5775,7.5726,7.6049,7.6042,7.5851,7.5922,7.5638,7.5829,7.561,7.5623,7.5665],\"usd\":\"7.600200\"},{\"market\":\"wowusdt\",\"open\":1.4839,\"close\":1.4973,\"high\":1.6058,\"low\":1.5491,\"change\":0.625,\"amount\":47678810525.183,\"count\":47664556932,\"vol\":47672446488.69,\"volume\":47672446488.69,\"canvas\":[1.5314,1.5221,1.5641,1.4825,1.5277,1.5221,1.4656,1.5067,1.5094,1.5885,1.5333,1.5381,1.5361,1.5314,1.4933,1.5522,1.5004,1.495,1.5155,1.5661,1.4678,1.5155,1.4704,1.5221,1.5558,1.4664,1.5335,1.544,1.5066,1.469],\"usd\":\"1.497300\"},{\"market\":\"dotusdt\",\"open\":0.874,\"close\":0.8585,\"high\":0.8933,\"low\":0.8555,\"change\":-2.8736,\"amount\":254485.10651207,\"count\":2320,\"vol\":222860.7958992,\"volume\":222860.7958992,\"canvas\":[0.866,0.866,0.866,0.866,0.8661,0.8671,0.8677,0.8691,0.8691,0.8695,0.869,0.869,0.869,0.8699,0.8709,0.864,0.8611,0.859,0.8595,0.8585,0.8585,0.8565,0.8575,0.8605,0.8585,0.8575,0.8575,0.8574,0.8575,0.8575],\"usd\":\"0.858500\"},{\"market\":\"otgusdt\",\"open\":0.0107,\"close\":0.0107,\"high\":0.011,\"low\":0.011,\"change\":1.8251,\"amount\":1648398891.368,\"count\":1648257998,\"vol\":1641023520.9741,\"volume\":1641023520.9741,\"canvas\":[],\"usd\":\"0.010656\"},{\"market\":\"filusdt\",\"open\":0.7186,\"close\":0.6963,\"high\":0.7307,\"low\":0.6923,\"change\":-4.0909,\"amount\":3413433.3222009,\"count\":14071,\"vol\":2420815.1137181,\"volume\":2420815.1137181,\"canvas\":[0.7006,0.7007,0.7015,0.7015,0.7023,0.7023,0.7026,0.7026,0.7026,0.7026,0.7026,0.7026,0.7015,0.7029,0.7,0.6985,0.696,0.6962,0.6946,0.694,0.6945,0.698,0.6953,0.6955,0.6955,0.6946,0.6949,0.6953,0.6961,0.6966],\"usd\":\"0.696300\"},{\"market\":\"linkusdt\",\"open\":11.7772,\"close\":11.6223,\"high\":12.0479,\"low\":11.5615,\"change\":-2.1766,\"amount\":526035.10196148,\"count\":13599,\"vol\":6222372.9080442,\"volume\":6222372.9080442,\"canvas\":[11.7147,11.7348,11.7208,11.7146,11.7228,11.7288,11.7433,11.7785,11.7904,11.7823,11.7783,11.7972,11.7915,11.775,11.7311,11.6884,11.6674,11.6425,11.6377,11.6001,11.6081,11.6702,11.6566,11.6391,11.6232,11.6003,11.5842,11.5783,11.6093,11.6073],\"usd\":\"11.622300\"},{\"market\":\"ltcusdt\",\"open\":50.04,\"close\":48.58,\"high\":50.51,\"low\":48.41,\"change\":-3.2464,\"amount\":53318.61570833,\"count\":6599,\"vol\":2643150.1024723,\"volume\":2643150.1024723,\"canvas\":[48.88,48.97,48.91,48.9,48.78,48.94,48.91,48.86,48.96,48.98,48.94,48.97,49.1,49.01,48.88,48.8,48.59,48.55,48.61,48.55,48.53,48.72,48.68,48.68,48.61,48.58,48.47,48.57,48.5,48.56],\"usd\":\"48.580000\"},{\"market\":\"adausdt\",\"open\":0.2138,\"close\":0.2055,\"high\":0.2179,\"low\":0.2041,\"change\":-4.8453,\"amount\":7556727.3793015,\"count\":6128,\"vol\":1602299.8941728,\"volume\":1602299.8941728,\"canvas\":[0.2076,0.2077,0.2078,0.2077,0.2076,0.2074,0.2074,0.208,0.2084,0.2083,0.2083,0.2081,0.2084,0.2077,0.2084,0.2076,0.2064,0.2059,0.2052,0.2052,0.2041,0.2049,0.2058,0.2053,0.205,0.205,0.2049,0.2049,0.2049,0.2048],\"usd\":\"0.205516\"},{\"market\":\"eosusdt\",\"open\":0.7398,\"close\":0.7213,\"high\":0.7666,\"low\":0.7164,\"change\":-1.6767,\"amount\":555783.5373781,\"count\":13103,\"vol\":406855.55233564,\"volume\":406855.55233564,\"canvas\":[0.7212,0.7191,0.722,0.722,0.7226,0.7226,0.7226,0.7226,0.7202,0.7201,0.7203,0.7206,0.7185,0.7185,0.7185,0.7202,0.7202,0.7202,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213,0.7213],\"usd\":\"0.721300\"},{\"market\":\"trxusdt\",\"open\":0.3376,\"close\":0.3401,\"high\":0.342,\"low\":0.337,\"change\":0.6851,\"amount\":47835824.518339,\"count\":10612,\"vol\":16221852.342536,\"volume\":16221852.342536,\"canvas\":[0.3412,0.3413,0.3411,0.3412,0.3412,0.3412,0.3413,0.3414,0.3415,0.3415,0.3416,0.3416,0.3416,0.3414,0.3413,0.341,0.341,0.3407,0.3407,0.3406,0.3406,0.3406,0.3407,0.3406,0.3405,0.3405,0.3403,0.3403,0.3402,0.3402],\"usd\":\"0.340080\"},{\"market\":\"bchusdt\",\"open\":269.28,\"close\":253.59,\"high\":273.89,\"low\":251.79,\"change\":-6.8779,\"amount\":4663.70117441,\"count\":5553,\"vol\":1237788.7118785,\"volume\":1237788.7118785,\"canvas\":[257.14,257.14,257.22,257.17,257.58,257.58,257.38,257.86,258.19,258.3,258.5,258.3,257.91,257.82,257.45,257.32,256.84,256.4,255.52,253.55,253.04,254.29,254.29,254.2,254.4,253.91,253.71,253.5,253.91,253.59],\"usd\":\"253.590000\"},{\"market\":\"bsvusdt\",\"open\":16.9217,\"close\":16.6486,\"high\":17.1978,\"low\":16.5306,\"change\":-2.4801,\"amount\":41042.07029822,\"count\":18396,\"vol\":693362.87456789,\"volume\":693362.87456789,\"canvas\":[16.791,16.7908,16.6991,16.6979,16.6851,16.6904,16.7904,16.7915,16.7122,16.8118,16.8173,16.8168,16.8041,16.8054,16.7268,16.6999,16.6733,16.6516,16.5306,16.5877,16.5332,16.5618,16.5488,16.5466,16.6457,16.5326,16.5372,16.5353,16.5311,16.531],\"usd\":\"16.648600\"},{\"market\":\"xmrusdt\",\"open\":458.4,\"close\":468.85,\"high\":476.07,\"low\":453.08,\"change\":0.7629,\"amount\":16267.55283351,\"count\":21363,\"vol\":7548454.6597338,\"volume\":7548454.6597338,\"canvas\":[469.87,469.87,467.21,469.81,469.7,468.69,468.99,469.1,469.37,468.76,469.23,469.79,469.56,470.03,470.17,470.29,470.34,468.96,467.55,468.22,467.95,468.1,469.54,469.81,469.47,469.65,469.27,468.7,468.67,468.74],\"usd\":\"468.850000\"},{\"market\":\"iotausdt\",\"open\":0.0425,\"close\":0.0406,\"high\":0.0447,\"low\":0.0399,\"change\":-7.0938,\"amount\":15370108.02656,\"count\":23924,\"vol\":647807.94673908,\"volume\":647807.94673908,\"canvas\":[0.0411,0.041,0.041,0.041,0.041,0.041,0.0411,0.0412,0.0412,0.0412,0.0412,0.0412,0.0413,0.0413,0.0408,0.0408,0.0407,0.0407,0.0407,0.0405,0.0407,0.0406,0.0407,0.0406,0.0407,0.0405,0.0406,0.0404,0.0404,0.0404],\"usd\":\"0.040600\"},{\"market\":\"dashusdt\",\"open\":39.33,\"close\":37.99,\"high\":40.62,\"low\":37.88,\"change\":-4.9775,\"amount\":67394.2735275,\"count\":12252,\"vol\":2650399.3123875,\"volume\":2650399.3123875,\"canvas\":[38.68,38.71,38.71,38.66,38.69,38.69,38.68,38.79,38.81,38.8,38.74,38.81,38.76,38.9,38.7,38.53,38.65,38.25,38.16,38.08,38.08,38.19,38.08,38.16,38.07,37.98,37.97,38.06,37.98,37.97],\"usd\":\"37.990000\"},{\"market\":\"zecusdt\",\"open\":728.44,\"close\":780.52,\"high\":807.24,\"low\":719.24,\"change\":4.2389,\"amount\":870.04450112,\"count\":20886,\"vol\":661537.02077911,\"volume\":661537.02077911,\"canvas\":[791.56,792.34,791.43,791.61,791.6,791.87,792.57,792.54,792.57,793,793.01,792.98,793.05,794.93,792.42,785.01,779.8,774.32,777.63,775.01,778.51,786.23,781.87,782.04,783.85,780.99,778.27,782.01,779.07,780.5],\"usd\":\"780.520000\"},{\"market\":\"paxusdt\",\"open\":0.9992,\"close\":0.9991,\"high\":1.0002,\"low\":0.9983,\"change\":0,\"amount\":150941.94923459,\"count\":5852,\"vol\":150822.35179718,\"volume\":150822.35179718,\"canvas\":[],\"usd\":\"0.999100\"},{\"market\":\"wbtcusdt\",\"open\":21444.23,\"close\":21596.23,\"high\":21796.17,\"low\":20521.9,\"change\":0.7088,\"amount\":0.0975,\"count\":26,\"vol\":2096.9144,\"volume\":2096.9144,\"canvas\":[],\"usd\":\"21,596.230000\"}]} eventPhase:2 isTrusted:true lastEventId: origin:wss://mg.rp989.com ports:map[actor:server1.conn0.watcher17.process7//obj355 class:Restricted extensible:true frozen:false isError:false sealed:false type:object] srcElement:map[actor:server1.conn0.watcher17.process7//obj356 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]] target:map[actor:server1.conn0.watcher17.process7//obj354 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:message] sealed:false type:object]","filename":"https://bigebmora.com/static/mobile/js/websocket.js?v=1787926615","line_number":89,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"bigebmora.com/","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:53.508Z","timestamp":1787926613508,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: /mobile\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcbCw9rz9kmNxcXMl9mV3Mf3nK9qzfqjHVQe8%2BaIWrc%2F9OpDwVZWlwPzHzeO3vLYZgH%2B5UWyldObyClQB2qB1L%2BPt6dRnpFED6kGq9lPt7tB48gZmljysK1P%2B%2B8LaJ37\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a323efb6a99956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/index/d3.v4.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.389Z","timestamp":1787926615389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/index/d3.v4.min.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-36305\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sj%2F14%2BB1JzmCyyTAKZ5PD%2FLCYWNqHnkB0MVybsudWP%2BgggxEZWK6lzFq%2BAWS997%2BOWV0YAhxJz8Gra9hUf0SEWqQO5V4jXSMO10aBoXMguHLOyL2uAWQ8Hnj4LHVkuJY\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc22a2456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221957,"size_decoded":83261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-29T08:53:34.638441Z","times_seen":467,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-1.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.410Z","timestamp":1787926615410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-1.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-1b25\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WpwgMlUzNHtKfBIQcyGCAxyYKz08i%2B76CANQwYUXP6Yzu5hcZUnyLZuVeBtjhndoV3C7lHr55bbRLdVempxTnh82m9wG0eHdlNj4IzziJ7ZmHLnpwbfQBU96bvGFCUp\"}]}\r\ncf-ray: a323efc24a3256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6949\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6949,"size_decoded":7723,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"e42448179a7e4cfd76149fc4e340c190","sha1":"8c9bf373b329b7cbabb770586167fadc13c34fb6","sha256":"aad8f325c9108c1b4b9a5f5fd40bc6ad910e12a81b6014d4586f6f8e8131da19","sha512":"265b4ef947931ddd88d013c03c50a6546989ef54312ed83bff4dffcbf03588ac5a37ec62e2dfd38760fe8c34a911f5b14973249c06f7a1e2d06522e92b4b4e17","ssdeep":"192:MknihKLD6GjZm0AqoXmXXTEHuh3O4nG5rg2c1sQgl:fnihKtjZm0AqoX05h3O2Wg2ADgl","tlshash":"d5e18e0d78d15ca04e635781ffcd90a30b535581fee0b8427ca6ae5bae702b1ca2d9d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.826459Z","times_seen":256,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/css/dark.css?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.371Z","timestamp":1787926615371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/css/dark.css?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 02 Mar 2025 11:45:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c444bf-2198\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kc8Y%2BMM08BX8Xpt5Si6sKIbkv34W14vwxDhrgiKeCnWC37fQ9eEcGJp2h7R9LDi752ykTevQLNEzFUJYGxb16k2DwiTWW%2FL7Aw0fRuXwVZ%2FSddplrMYhuwiCZqJ2JqTW\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8600,"size_decoded":3518,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"555df577901f379e8f82c9a5cdafe68d","sha1":"db165f8d8a75a76efafda48654f930c6cd63c7be","sha256":"a6bb4e6f14544456d577208c9d17d765ca777322819318bb30790fc8b8d0a5a1","sha512":"ae6860e264e174ba550e555971aa65c10ccdb2679cc7ea33f52f90f5fa797ca5e322ffe93e6177d891c1fa010d0c64c8aa3f67bdd4c932de9b020cc9e8de3794","ssdeep":"96:66pDT4IZ1pGLPxckf674TwGtRh4KB5uH2HXHHUAXHQmCrWs+Xozh6/KkY:6QH7Zmo74btRh4x2HXHHUAXHQbrZ+OMO","tlshash":"ae024f13e2972c8b3027c0f55a2ea331a73c9027990e5f3dba59b1b66fc18d194b2d53","first_seen":"2025-10-15T23:11:01.023393Z","last_seen":"2026-08-28T14:17:30.827626Z","times_seen":5,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/index/images/de.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.407Z","timestamp":1787926615407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/index/images/de.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 04 Dec 2022 20:43:40 GMT\r\netag: \"638d067c-9a\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBZlnakeNHYoATwzCnTWYkFdhiwE%2By2R26vspTrMNxlo1pOBE%2Bg13E%2BMOVIjdiWv88c8kD%2FrwqkV43m9saCauige9lvaqwTeFzRNAnHVoKO7saUk1K2dRo4Q2r%2BB6qXw\"}]}\r\ncf-ray: a323efc24a2f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit colormap, non-interlaced","md5":"72a365a37b672f5a20da4f8f0880e857","sha1":"1d395668bd5404aa8b26e4d9586d1129798e5f21","sha256":"3da97ff56eb98940e046126ce7c727856df8722c833128141d15c640013675e6","sha512":"7b828444c21dcb95b151bca6b8d30a8466dee73019ec8096d04f85ebcacd6131480c2cf83885559d251be96da019f74a84260109760d3dc57643624281eea934","ssdeep":"","tlshash":"f1c08caeea8928a4c34aa1b21b781c349907a17ac1a49222a085981c1d1a1281486aa3","first_seen":"2024-08-20T10:15:14.338399Z","last_seen":"2026-08-28T14:17:30.828772Z","times_seen":73,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-6.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.423Z","timestamp":1787926615423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-6.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-f69\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQk48TrCAgST6mLf9OLwR0uZ%2FbxmS94T5CKXf7sg4tMgmUIQ%2F%2Bf6pNflExuwkHtbdth2xyKz859RkUpkSRl4hzMDjg3gAF0ZRPobB7Kc649beblY4UHNUydmG%2B2TlG1N\"}]}\r\ncf-ray: a323efc26a3e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3945\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3945,"size_decoded":4724,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"2d5b9a317f20174f750d5524ab61536b","sha1":"a17ac4797bb6584005694177000915727f98540b","sha256":"4fdd7d0112cc4d7c828747212b0eff8b681d07da84d3209a377ed54b67a37c1e","sha512":"9bfc4bc468a804a3bac5a9263161ee81036e7a41d11cdfab57911b8f3459d884e5591c5025146a5e1407d99584e6a53a3016085da7bac065825b709edfcb51d4","ssdeep":"","tlshash":"d0813a06fec178916a89d6c02fe911a64723a7c0ded0a1599ddec01b69b00b8c5df8cb","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.829899Z","times_seen":207,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.465Z","timestamp":1787926616465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/element.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1c60\"\r\nexpires: Sat, 29 Aug 2026 02:00:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 988\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgCSFSu2WUQL8xe13n9%2FyyI%2BqfNjBfrYyPt8TkEGfoV69BiBMvQCYVgchwI536A8Xdb2i9TqPlqprMq4UsrTZvWXTVnabVMpSXnToC8sqtseukVF%2F%2F0OWKPZ7abKbixi\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc8ea8256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7264,"size_decoded":3551,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7203)","md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-28T14:17:30.831602Z","times_seen":300,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/script.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.386Z","timestamp":1787926615386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/script.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Sep 2021 08:35:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6131de5a-10bd\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOtpw9cLYVAXpDCd6A64OzYGhlH6aJ2qsf%2F7D2fcDS9aj7wbTn%2B8yBWFSPuUTsJrXp%2BUzmc8CNKoW%2FvdERoNUjx28TeFOlydUZKrQ1TNdiPoFwmoexWko9WdYNYvbYdi\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc22a2056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4285,"size_decoded":2434,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7bd8dbda74fc465ae66adcc739addd22","sha1":"9a7cdadeeec394ca68f30ceeb4cd0a5a807008eb","sha256":"816e4ac149a00e91f7dcab8e6494abac7ea31f15d0ac667e117e48308eda79a8","sha512":"37a2fcb6dca3612a35d314448726fe71334d342fa9b9cf491e90ab13920b8cdfae8db3d5d333320e13c277e3e958b94f6367711132f2ba544926f5d981b7e47c","ssdeep":"96:z9+ApqIu5jK5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejqj6Ev1js23vh831GhECX/H","tlshash":"cc9163a87156362d83f233744cfe4425dc3ed665460b8960f0a1b9942d7463e4eebecd","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.832665Z","times_seen":33,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/share.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.412Z","timestamp":1787926615412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/share.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-e53\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46gIuxKRJqwlxg3xMMNhn727zC2dapglv22bM6BAtx82TFhO2vwdIofO1XEk0BZOhkBL0gHT3r%2FFlrAEHPe2mwnEA2Wqj372haYikiIW6UqfauQ86zjPx2rUhxFzjN4k\"}]}\r\ncf-ray: a323efc25a3456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3667,"size_decoded":4440,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"965ff25db2eeb355ac574f9f405398c1","sha1":"ca3d541851b92522f57d9f5779fafedb1e4a0fbb","sha256":"346419f3706f3a5a8e203d257c798d41e5ae13803fddc740fc1f9482a47babcd","sha512":"95a60dcca0181286ba95c5aac9f3d2a0753a5911617e4f35105f2da7c4a6e5e1d587cff98e8a44b93e7767881e986f6ac38a0d98917355a1df599d3a25c7a330","ssdeep":"","tlshash":"65711a44ea85bc032ed6fe8857fe61020a3b89809680c551dccad8179d715eddd5d8c7","first_seen":"2023-07-02T09:39:23Z","last_seen":"2026-08-28T14:17:30.833582Z","times_seen":7,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/nav-2.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.430Z","timestamp":1787926615430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/nav-2.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-163\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64RIMDlJnks4Q7CIGuatXtZdm1yw8XZuciPSFLlRlc9bitYK0qkONzj5rn63Eik0%2FKqxH2Pepa6WDUjYUjfZU2%2BKIBlIiId2%2B6Y87wjcilsk4WdQfnb41DMbhFbF7XaI\"}]}\r\ncf-ray: a323efc26a4656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1131,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"bba6863c9929a3858b0fb3c77201ae8d","sha1":"f6d7dfa984b3ccf6d38d9d9051c0462578bfe9fc","sha256":"7519ccca854d4151acb7e3ef7546148612fa8be43bc7af75d98e29d65d7463fa","sha512":"9faabc908c44d52e21e308b116394e8fb4c12e31f3446b4bd8a7f5c7c418d4c064309f6c841614d018649652286b08d4ee6ebd1bf97134eae8fe3b0d9a090591","ssdeep":"","tlshash":"04e0c0c5f7e774c0d39223bf413e08260433c1ad3d55069ca31bcc55592b00b80c00d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.83476Z","times_seen":270,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/layer_mobile/need/layer_mobile.css?2.0","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.288Z","timestamp":1787926616288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/need/layer_mobile.css?2.0 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7SG6Zi7JKMVcf9JSsLP9Frs9MPQ7rYKchD1L1aht4Bj3puejHqNtz7CDMbWSvZMgjngHdTjcJlXHyXH8n7Fr916zm0DGPHpBHJ7tQS2%2Fv%2BDk1uyw86K7cnBHdzNRe9k\"}]}\r\ncf-ray: a323efc7ca6d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":701,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-29T19:09:06.068057Z","times_seen":555088,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/fonts/DIN-Regular.ttf","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.362Z","timestamp":1787926616362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/fonts/DIN-Regular.ttf HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/static/mobile/css/mobile.css?v=178792661521\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 13:25:31 GMT\r\netag: \"6777e54b-6064\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 989\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPaH4sDkt5Ko90Zya0m0Sukl5bNkUUGGF%2B9voCSru5wgeW4IgiIUmqhJnTBNOVy5IBvCXzh2lY0ejbQezYt716eiZ85cjEKQ1F04USLRtZKjrRxDePiqqn9OWQs2DARS\"}]}\r\ncf-ray: a323efc84a7756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24676,"size_decoded":25427,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-08-28T14:17:30.83657Z","times_seen":561,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:54.490Z","timestamp":1787926614490,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /mobile/ HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:54 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 11 Mar 2023 15:55:44 GMT\r\npriority: u=0,i\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pK%2BMx3sFK44lwv4YpJ6L8UyWt5JPYvpb%2FOBKE3jze75ah51TwcRMGwPPHZZ1kLEu4kSo6RK9nBU0oHXPfiOUdtCeTXzTuoqsrDNw9S9qRp2vbJLNQ9xuTWqtrrPG1VYt\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a323efbc99f456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/imgn/Dark/topuser.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.397Z","timestamp":1787926615397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/topuser.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Mar 2023 06:21:50 GMT\r\netag: \"64097afe-54e\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXHhRNhRndc6o4aXGCrP1iM9aNmjWYCniF%2FuCStqhe1%2BPZRV47czMbzPYlvHMuW9917VzaXOGglb3KQ6mmhUwZd8JlbNDH2goFiclRNfW6vRCemKTkD4T0MuRI2LQHF0\"}]}\r\ncf-ray: a323efc23a2956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":2133,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced","md5":"798ee5b7c48089f973d2334698f394c3","sha1":"e33c49825cb86f1454b47790559731f1a4dacc5f","sha256":"76a3cebb81c441ab872f0649c21e064e0ceb32dad5a6500b9ec8342b5fdf3bbf","sha512":"adcf452d696b6ee76422020052a7c1ffd7b15914e292afc32c2fee0cbee6c438ec69936cd990bc7efabba6f5e5d8997e9dab66ed9faf894c0e5c71dd2be40546","ssdeep":"","tlshash":"5621834ce9c1a981446a658778e76023991a4c40a6e0e09b6cfbc0af08914f4d56b89f","first_seen":"2025-02-26T18:00:22.732774Z","last_seen":"2026-08-28T14:17:30.837428Z","times_seen":49,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/nav-4.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.433Z","timestamp":1787926615433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/nav-4.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-49b\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrgjBvFO90QYJeG2NVagZAxSp8oMtuo5wj%2FRCH7KLg4nQ9%2BNnH0jHDCFqDlYPXtu%2FztJ54xA%2FltzZ8AnFNREBLQSYQNLBdm%2BTR0%2B%2FYouYBeqc76lpZo4%2B1YkHYU36wqB\"}]}\r\ncf-ray: a323efc27a4856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1179\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1179,"size_decoded":1966,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"3b9bd6a518d868bfdf6bc671def3327d","sha1":"0002af2d238c42d44f95ffdecc0ee1957ead1e8e","sha256":"ba5a50079d685b02f29d59f5f4d16331b8c29fa2aff5eed2ffb116d1dfe572b4","sha512":"a17dc0cecdae39b67412c192887ed80d8295ed87c71d29227b916b4f7a0aa9f382677d226091e185b3a503cc5f57140c38277191a84ac2135efd6eaa085c2ab8","ssdeep":"","tlshash":"f021d7efb1c21012c729e2be1c0e9779b62da302a7b8444225c5f892fd890c33354f4e","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.838266Z","times_seen":220,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/nav-5.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.434Z","timestamp":1787926615434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/nav-5.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-2fa\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCAOvi2A%2F%2BZQP65cuG2XYltkECljEzC0uRSb9gmpGksBg1FCU9jWmhm2ECngzapBt%2BjdTIo75EzR12OAyQUD0kNEZ7RK81ytkT3c0ON%2Be6fBiNeTU%2BMok%2FC5szECPIA9\"}]}\r\ncf-ray: a323efc27a4956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":1544,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"214aee318b1921c9d0a518e7236f6798","sha1":"80344471faf6fbd958fa82f20128e004b71845f3","sha256":"f4d884cc4ffdaeed56d30b53ce28453c401a187591cc6ed20700b98e5e9fcbd9","sha512":"f8316fa75057752ff636710dd30eca9b9c360bcfa1a28e1fd0659b4da48d530f13e81afb14f28a38f941f0aaca142b04afdbad0052a7621835c7904c3a10af5a","ssdeep":"","tlshash":"6601b54d4520e4699a3612a3b87ac2f10c1eb01462b79dde8532e31f3432704f0842c3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.839281Z","times_seen":275,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/lang/id-id.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.374Z","timestamp":1787926615374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/lang/id-id.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=La7I73xo3lK%2FYOmWLE6A3Cq3%2F%2BJ%2BqMiPoM70YcfKnF4odD5haVpBMxYMF2DPUqcCn7fUd90dnpwVxap3XYk9HLV71VQYyAJzC4IrnDyrVF5QrLPkJTpOtBt3j2eo0Ysh\"}]}\r\nlast-modified: Sun, 02 Mar 2025 13:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"67c458c5-359\"\r\ncf-ray: a323efc21a1b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":1301,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"b0830794652be840903e66f12655f586","sha1":"be262a53a29ed6bbc60caf662a5c4a320bdcae1b","sha256":"27829e29d238cd1570fa53dfa3ee87f38d820b7d2263dc77e9db659aa5b6cceb","sha512":"1afafc034d6c4c03ba9b1dc23f630ca44d571f16348d5d47a7b31382bddac2ad5aa266bff9ffd43fd263555a4a53e7aa69d66103957b82a41af07bc1ee16eb96","ssdeep":"","tlshash":"1411f6545b09a40da51126af17e401c9e5ed40770627760c77b7a981df3fd1f40ed60f","first_seen":"2026-08-28T14:01:08.267489Z","last_seen":"2026-08-28T14:17:30.840183Z","times_seen":4,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/jquery.cookies.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.391Z","timestamp":1787926615391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/jquery.cookies.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jun 2021 06:32:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c1b1ea-c43\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUGxofIsFeEMWmHqaeiw%2FmHJ1VPhgwzOUq4QqlLEaoJeDQQlhV9tEeIBIfQe%2FNwQtN6yoSJlledRPh1jx7MQy0RKe4fExx1TknT5LAfytMepCnOQ5GYESXpVLjHpDv8s\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc23a2656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3139,"size_decoded":2225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-28T23:33:57.579786Z","times_seen":3124,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-2.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.411Z","timestamp":1787926615411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-2.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-17be\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Abdz0%2BkUcJqLOzx3ni2XSZPoRPdiYbHylU2wzwaUUuRxYvMCgGGcpwURiQu1QwabqIvO4e%2FMbkW0XWnBAfNo6rzbg0MerpcHv%2Bp7zls2UZ%2FhkoAGrArvNH56Z%2BmViLCs\"}]}\r\ncf-ray: a323efc25a3356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6078,"size_decoded":6860,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"8edb61a43ebbac5b1c00c183530722fe","sha1":"602712cb46dbce14c871f2ca1ebd29acf6136368","sha256":"b53157f804ec5e41faf0213dfcf9f05a00d55ec3390266848735d3e62275829c","sha512":"2edb5e4f1ac0068c4225b411d622a9c06162cfa2db87e6658df5b4cb14bc4670a6f64537d25471c27295a05549b89f9c3d5d688738591fd26989506019e6fb78","ssdeep":"96:MknmWIHF/KENGWGMHOzH5ogs4rpHggsBRC70n4wj7isQwtJDvv1Wm1VKUi8s528l:MknEj4+X2bsBsANjmsTDVnbfM5Gy3","tlshash":"cfc15c56d8b059751215e6592add30227f3603c08751ea84ecfedc7ab6600bd9dbcdc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.842024Z","times_seen":259,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/card.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.414Z","timestamp":1787926615414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/card.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-cda\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHvGs06GsMr0Fv2Kgss31OLmbk%2FCkLaqk9MibdDB4CxtORY5%2B2WwMGsVjWSbbS3amScMCiexuY7c8%2FYbm0j8RHrfBqXzMEMxvBaIKMRCb64RRXfVguisZKT1dPRRZCeJ\"}]}\r\ncf-ray: a323efc25a3656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":4069,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9a54e187f7e754c5ec818ef7617de1b7","sha1":"a7c6322cc6da0b08ef31fad2a910374b6b48513e","sha256":"c04b8e8d9075edb320d501396bf4987585144b9ec6ffa239a5bc9ee78d27e127","sha512":"00112f8689e5d203b695b1c0206a482a1e4ab07faa2bde82a065a41e8ae71fc91f662cba0fd6bb8d073f848c44b856d0c48d1a3baac315b1183b13b47af6b0d3","ssdeep":"","tlshash":"d861b74aed626d025706ee46edca90130b2f06d0d6829581fcdadd036d615b8cc9eec3","first_seen":"2025-10-15T23:11:01.373313Z","last_seen":"2026-08-28T14:17:30.842929Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/guanyu.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.416Z","timestamp":1787926615416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/guanyu.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jan 2025 20:29:04 GMT\r\netag: \"67799a10-cd2\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCN7W3miy6tNLTyEhcl9rEqog%2BoarX2gPXFcciIsPeXwNwl2kaRIfiRtAb0EckjYorO5KOwq2XGKqVuds9sKNFIx7ipDx0TfIoaWBkG4nlyVFEzb4%2FNgeHDthx4Muncg\"}]}\r\ncf-ray: a323efc25a3856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282,"size_decoded":4057,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"dd80f60b6da54d9b573e9c6101908ec2","sha1":"fa68479c6120b767c2cd9d2b7bd25bbae9161284","sha256":"64a9e32b694ae63e9133c8236965cbd93c1636ae39da24fc7c06c9e05503db2a","sha512":"975086f3f6ecc0f87b036e1ea9ad3a9d32de56302491668d1393a1c2de536af73233c00f2f330ab20a1950b5a3594965e9fc8e962bbaf24576713c26fdf91ad3","ssdeep":"","tlshash":"2b614bc8ec30a4618688ad81aded435b5d1f0184abc0ac51bcebda121d30af7818c5d6","first_seen":"2023-07-02T09:39:23Z","last_seen":"2026-08-28T14:17:30.843818Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home.gif","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.427Z","timestamp":1787926615427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home.gif HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 15:27:10 GMT\r\netag: \"6a6cbece-870be0\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yRkf0Iswsx8ZMOIDUvZc%2BxTkTJvs5AdVra5H55i%2FPCy%2B0g%2B73M7NVFdWWhkUjxiwSL3w4X%2FHtSN1VX6Hmcwo2vJkb6dS0iYhFtDjf2jyAAx%2FYyjMScpqiNo9Bddb58f\"}]}\r\ncf-ray: a323efc26a4356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8850400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8850400,"size_decoded":8851189,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 540","md5":"5ae90424f39f247b122233748bfd5e4b","sha1":"8304eb26eef8d434fb140094d3f809b87dff2386","sha256":"7f10d3a9acab6f1dc65184eb6b624f888c970c040bd25057b140cdd0ed947dfb","sha512":"4abc6b3bb4313c3d6736155424a8f195aaa1b202bdf56d6130066b4e21f11951c09bcbf683d5af65ae8256635942391b67cbedfe2142f83bad515a71aa8d7a61","ssdeep":"24576:r7OsVIfadntgSPu5i4T74B46oqAk8Vd+Dg8nUF18CiKCzlSxggR0:rjVISdPutnyDg8nwf/CzwSgm","tlshash":"0c25233bd7a4d1914e3317ac8efc49236f533cb93a091a307832195774bc9a598b1eb9","first_seen":"2026-08-28T14:01:08.25561Z","last_seen":"2026-08-28T14:17:30.845083Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-08-28","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"bigebmora.com/static/mobile/img/home.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-bg.png?t=46","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.331Z","timestamp":1787926616331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-bg.png?t=46 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/static/mobile/css/mobile.css?v=178792661521\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 21 Dec 2025 13:29:43 GMT\r\netag: \"6947f647-118af\"\r\nexpires: Sun, 27 Sep 2026 14:00:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFTM2TbWp6WG4bER7oLUYV51zGQp894XcSoS2iEpE54g1MZBsz6OvUuBadosSr8WQZ%2BJJHKg19MPSe6H9ADTrHsc9rzi%2FglAjmvb2%2BO5ikHNNA8IcFsK6uVHZK5eWPh6\"}]}\r\ncf-ray: a323efc81a7256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71855\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71855,"size_decoded":72635,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 750x400, components 3","md5":"a0a85ce08ea4727b4b2041eee846993f","sha1":"899c76ae54968c4e219be51ffca0b7d4cd308556","sha256":"49ca173a012d4aba099242cfdc0e8c69099c1b22d7ed5ccf38dc8c451df75344","sha512":"8133e73b1d4eeed47e6825be59dc3a57d2f9efa0f81ea81e00600ee1c9c044906dea457a745d598e05721c7666a1c7c8d4e09386ab98428a71890182afcaf229","ssdeep":"1536:NpNauITNH78MT2dxLWy360MejR4IAaakZWxyc8z1amdAb+y75:TNauwo5dxi50MlIAlkOycu1AbD","tlshash":"bc63128373b7d4bbc4e6483c34ed9a97870c770b51a2fab93a71d0e96927256dd88081","first_seen":"2026-08-28T14:01:08.294931Z","last_seen":"2026-08-28T14:17:30.847389Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-9.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.409Z","timestamp":1787926615409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-9.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-1016\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZfoiFG7BSKZfYWjq9W64yQcBoFxELirBLLx%2BuvC6IHPP9raH9tJIiHGkQX33WZRbQGqSqnQF3cZOJG19X%2Fj8EUN44GjNqOlm9nCBJmQb877jnx3Un2QTrio8jNBzwol\"}]}\r\ncf-ray: a323efc24a3156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4118,"size_decoded":4894,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"96c006351f3bb1ed5a7236df6973d412","sha1":"21e63fd42a6940bbdf4caa8c84080df20716e4dd","sha256":"964df4170b2a82ff0a89d2f8cbd51da5c5ec91058609cf4b067413e182a90ee7","sha512":"fbff1d8e41b9d90a5de270acc44574c0f71acebd75991fc227c10082f4aec543e9c6206d36f9083f0f07405d287685e0448b0e378a37c3601f9dd7c5fca9e3f2","ssdeep":"96:PSTknmWIrD/+NGdGDHCnH5o+U3PfNdIhD1xHQbJDY0bIIzFiEtNg:PSTkn5HinO+UffuDHQBY0bfzUMg","tlshash":"5a815ecee4722e0b4ad9e3865ad562b7a7128b419f949402fccc8c473820479cdcd6e3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.848351Z","times_seen":101,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-icon-6.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.425Z","timestamp":1787926615425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-icon-6.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:23:05 GMT\r\netag: \"6777d6a9-aba\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7jue0K6jJj5aRfyLWKwlw0WAptgn%2FTMvpmQgl3YxDfAZeY%2FeseWQF9%2FtHWp8VEwwTeX7u3qUkEXblUzDPFIV4vP%2FzknjTUnCAspS3JIGKZPAR9abxr%2FA5kkzsYFIrzi\"}]}\r\ncf-ray: a323efc26a4156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":3527,"mime_type":"image/png","magic":"PNG image data, 81 x 59, 8-bit/color RGBA, non-interlaced","md5":"425470dd8a1e29c0f15eff66021ddb09","sha1":"6b6d04f134dbe6802d250058a232e7411b306916","sha256":"059f4c1b20b74cef836207419e99301aeedc4784a90aca388a0ee21ab5bc2a87","sha512":"31faab5ead30a5b61f9767379916f61b28ff3ad796840ec1f58894b1cad851e1121ab1b8474342b48c7ce8bfcb04fba47f84e892a4ef92709ab6252755fbcb0f","ssdeep":"","tlshash":"d2512aae32e6eb0ef2994103e4bf3143d2a34a441125ba8c84e43cee07842b3a995131","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.849215Z","times_seen":177,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/nav-3.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.431Z","timestamp":1787926615431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/nav-3.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-4d0\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FowN1uOxzbGZOugo66WXBLfydyz6Nc7elEH1RPouypCVBgFRxZJdUi18BmXflZJ9e3nM5LtJRNAW%2Bh%2F4q9nNXRbFHje%2BLMZ5uhqEeOd0vdVFFnoEizXVuqLL5HfeaAd\"}]}\r\ncf-ray: a323efc27a4756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":2011,"mime_type":"image/png","magic":"PNG image data, 44 x 45, 8-bit/color RGBA, non-interlaced","md5":"fd57dd6dbb1f72619420449aafe1d852","sha1":"bb99e3ba6404a1c00482576775530a0bcbf1d254","sha256":"67989dd943d26961cb26b505d15c64cb24c3ed0aacb607d32ef5d864ec1af3ef","sha512":"dbf4768c4a3c8eb9b84cf98a6086eb518d4c6cd56b57848466b8eb600191eb08c4086f19de41e62d9566ea7ba0fdf857b405108649fce438320f6f8371539181","ssdeep":"","tlshash":"f821b4d98b6c15e3c8e40c8fc53cac1b822ab45a189e2f0a46b999a70453319cf5d280","first_seen":"2023-05-20T12:09:28Z","last_seen":"2026-08-28T14:17:30.850089Z","times_seen":270,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.370Z","timestamp":1787926615370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Aug 2021 08:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbe-7918\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RY1%2FTCF%2FstCRHIcn9VYF%2FdZ%2F%2FdWTzHFtLhZC27rPcW%2FtIoPUA6TWaiQu8oodOyDmFPARxpKIv7TcE3NEYvZcJ%2BskeOoL4HUkEKpkfUS4pckIWfrAjn1NqJzuJXamDJg\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":8589,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-29T19:22:29.036212Z","times_seen":312512,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/i5scroll.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.393Z","timestamp":1787926615393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/i5scroll.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 06:40:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125e5d2-6f3\"\r\nexpires: Sat, 29 Aug 2026 02:00:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCsCFye4JLxPn6KzP1jreGb9YL7gvTCvUwiwxVstXCSz5AF9shx6PbgXvWiZTLApE10Agh2y1AgN19ECs96Z4bzYb2lr3TDfDTHjBXKHjW2po1xN0M%2FQ9uY6IyiQ41%2BA\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc23a2856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1779,"size_decoded":1738,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (762)","md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-28T14:17:30.853136Z","times_seen":56,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.463Z","timestamp":1787926616463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-3859\"\r\nexpires: Sat, 29 Aug 2026 02:00:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 989\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OezAOFNhSXkLH5mq7KKin2rQBaQ6SCqNEtOGDlZB6R4Lt%2FMh2xBPdPDyRSDK9%2B5WKRQRa9E%2BwlHzgiHiQwiBaBeEuHjS9InwKU7dWavSJY31iTQAMndtJULN%2B9aa15rV\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc8ea8156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14425,"size_decoded":4054,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368)","md5":"cdf467c11d77287b09cec22297aa06b2","sha1":"57e147ee3cf8a1ea2194bdfbad5e69083fa578bd","sha256":"ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b","sha512":"9c24a7c4d5d151652e246375c42f4ef2eb29a33dd9b4bad8c19ac2dd52086db91988d0f87c5d547f377499649f02e6ac4dbe4ee7a06d8a65cb2b445482104ab5","ssdeep":"96:Jp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:KWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"f55231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6647","first_seen":"2023-04-16T09:58:27Z","last_seen":"2026-08-28T14:17:30.854817Z","times_seen":630,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.771Z","timestamp":1787926616771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/slider.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 29 Aug 2021 07:25:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"612b365e-1bb3\"\r\nexpires: Sat, 29 Aug 2026 02:00:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 988\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBlCQbh7IRTbLrLUml0Fl%2F%2B6fRhx6OBGAIrYVjl3vT2fy2B68bEfIos4jjoMZs20VqgZCvnKzTKr2%2Bdbkfz%2Bvx7byd1SoBRLcY9uzqYLVDEqt4n8bfdVvmBURsqnJoaU\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efcada9d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7091,"size_decoded":3475,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6929)","md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.856727Z","times_seen":135,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-4.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.421Z","timestamp":1787926615421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-4.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-1c9e\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGWUFjeKSURxuwi9GRyR9eOhQfYlRj%2FY4ydN1jFPXHZLSVCxbg%2BbiloSMIjncAZQcE8D9EaeADlggyAVkUHgxt7oBJGrY45rWRXwT1pJuM47m4F%2FxPX%2F8cYISpGx%2Ffv%2B\"}]}\r\ncf-ray: a323efc26a3c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7326,"size_decoded":8110,"mime_type":"image/png","magic":"PNG image data, 85 x 91, 8-bit/color RGBA, non-interlaced","md5":"51931449f7f1add2f1b23c1d3fb0c50d","sha1":"2472606e33ee28b6d1b24adaa15c2cc2e3f2e3a5","sha256":"115a31c73bb313b73626ce78e057499e508d55d8208315a1590c473dd47030a4","sha512":"2ee2fa2fdd8c200b57884f31fc1ef92115683646bec270d2736fde25ab5f1e5c952a66018efde827acffe759ae84198ccb39fb52a6b85047eecbd0947a7d30e2","ssdeep":"192:MknvFTRsSsJfpk4hEfHtdgcV73LJ6vRrhPnD:fnvFTRsSsBpfEfDlJe7nD","tlshash":"dee18e01ec61bc50a6258a85a4edd14b8f17d3d0ad9858ebbde5d55280d34f8576ccc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.859214Z","times_seen":206,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/imgn/serve_ico.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.428Z","timestamp":1787926615428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/imgn/serve_ico.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Mar 2025 09:30:13 GMT\r\netag: \"67c819a5-592\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gTCQZbRN%2FZWy3vRM6XzjwFpBZT%2FSw5ZaS8rQ7mU4Cg%2FlxqG8MiWsjizBlIUhJN%2FqEaRuSw54su9cKcoFUgSDAGVeTLQxVhyzdi4lMdyS%2BJlEDUBj%2B4fzbSif6S3Ivod\"}]}\r\ncf-ray: a323efc26a4456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":2209,"mime_type":"image/png","magic":"PNG image data, 36 x 41, 8-bit/color RGBA, non-interlaced","md5":"4680a234754b2c0f6d9eaa22acebe5fb","sha1":"0a53ea350b4c48b6e0824f3093f653b5dac76b3f","sha256":"5aea45e956feaa3442b14b1edf550ecc2f825179428c3d55d031803a0d9077a4","sha512":"2cb9b22e32fe8d3d4bf9380d77a8ab8c489a280df1867b2d88dd90b2c6d64a5579d61f41a8d0c3bf6364091a2afa3f550ba333a8579fd3722365c7e66f10a027","ssdeep":"","tlshash":"a021e992120fcb4eab2b83b055199a35ad700500ac8472b4cf4454290dc586b86f054f","first_seen":"2023-06-06T10:11:01Z","last_seen":"2026-08-28T14:17:30.861219Z","times_seen":19,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.366Z","timestamp":1787926616366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/layer.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-5619\"\r\nexpires: Sat, 29 Aug 2026 02:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 989\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rr7%2F%2BykNy9f26cToO5LxlgfcPQTdb8D19TIEQT1aIK2Mf6S1fCgz%2BkFB6tGcKXCt3djVSGl1z0abBizwugR0a223B0D%2BuTUdCfhYm%2F7LD6OGPCh4oKaN7F2zpGo9J8Gk\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc84a7a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22041,"size_decoded":9149,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21984)","md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-28T14:17:30.864344Z","times_seen":472,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.373Z","timestamp":1787926615373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-15851\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbg3fP%2F%2F95E9Dp5SsE7685%2BCLj0uChEiXWWfYNu4mK3vLDt2V56OAk9MplzuVVCURA5nduY0SclJf5%2FyqzrV7ssnTM%2FQQ6ITNeYT97TKcbRA2TdUbWFgAK5fmGvEVTL6\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":35282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-29T17:22:25.810621Z","times_seen":140023,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/clipboard.min.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.387Z","timestamp":1787926615387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/clipboard.min.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-2780\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJYxELeXNyitRNxXGywvu6kC6ihz3%2FVWVhcYHMFpXZJjRIYgRGzdXRJyAclSj8GcHP9V7quMwUDlAL8ugoyuO5iVRqNYvQgOBhMxMc5s%2FnrxcQEW1F6q01%2FVZrVq96Tp\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc22a2156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10112,"size_decoded":4394,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10002)","md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-28T14:17:30.86776Z","times_seen":2278,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/index/images/id.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.405Z","timestamp":1787926615405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/index/images/id.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 02 Mar 2025 09:39:08 GMT\r\netag: \"67c4273c-102\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF47frlbBKJxBlxngakaxTNELVkRozUOyQ8W9KV2boT%2BuqS3e3PGcPIeu7vaBX7q8w5zzOGt9aXNQq5A1xTnWSgf%2FS6SnwS90e5p%2Fb0X6ZU2Hq%2BvsQ2dqlzKOZo1S8Af\"}]}\r\ncf-ray: a323efc24a2d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":1036,"mime_type":"image/png","magic":"PNG image data, 260 x 173, 8-bit colormap, non-interlaced","md5":"4976b5b7690d619b3d346985732df90d","sha1":"25cbc137b24cf53b466c2d7a3f30c7bc67ac292d","sha256":"6e12dc6a059c2fa1946743f8b9cd9d163c375d9f9c4ade85c13bf81d5a332e49","sha512":"6bd8cb9c8698c4fa0dfdf53116682c4a4877a448bc83d3bca5df8344e525808f1d135ee010fb1736f1483794835aa3681c16f80273b72feadc995f0a3905b1b1","ssdeep":"","tlshash":"f5d09bf5775d5cb4cb570473c29501d0ab1951540755dd3b404df479b15616270865d1","first_seen":"2025-03-17T02:34:15.662028Z","last_seen":"2026-08-28T14:17:30.869987Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/server_ico.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.415Z","timestamp":1787926615415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/server_ico.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:42:42 GMT\r\netag: \"6776b3f2-592\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjtB9O9JXAJCEg9Py24r1%2FpQuHZrPj1Ago5UT1HnfMP0ATsDr9rdyKHmEDZqtS3V4LlS9BPcy3inxB3kzGtozTxeZ%2FIq4pS9OeU4U3vBknmpa6dqxtENc1jNslvg6A3r\"}]}\r\ncf-ray: a323efc25a3756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":2201,"mime_type":"image/png","magic":"PNG image data, 36 x 41, 8-bit/color RGBA, non-interlaced","md5":"4680a234754b2c0f6d9eaa22acebe5fb","sha1":"0a53ea350b4c48b6e0824f3093f653b5dac76b3f","sha256":"5aea45e956feaa3442b14b1edf550ecc2f825179428c3d55d031803a0d9077a4","sha512":"2cb9b22e32fe8d3d4bf9380d77a8ab8c489a280df1867b2d88dd90b2c6d64a5579d61f41a8d0c3bf6364091a2afa3f550ba333a8579fd3722365c7e66f10a027","ssdeep":"","tlshash":"a021e992120fcb4eab2b83b055199a35ad700500ac8472b4cf4454290dc586b86f054f","first_seen":"2023-06-06T10:11:01Z","last_seen":"2026-08-28T14:17:30.861219Z","times_seen":19,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/hb.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.417Z","timestamp":1787926615417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/hb.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:51:51 GMT\r\netag: \"6776b617-eb3\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyZDQzugyii2hb%2FR4514tX%2FIWM6vbCBqL%2BSd0gtfvPWyEgXEYByqN%2FyRoDJhYUYGxi%2Bik6o4OboaLoTEWafwB0bWBbfMv84v2KXI1D505EggGThtMAhw3keH1I%2BvLvDu\"}]}\r\ncf-ray: a323efc25a3956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3763,"size_decoded":4546,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c454aba9549cb9f2b9ca007d8f53c3a2","sha1":"bf7862ca79ea29f19716654bbd25f2a8841d8543","sha256":"3e7461ff49d213eb87b1d1fa77c80cb563381c6b3917982ec41dfacd3e9807de","sha512":"8cc2a5a62cd2ba734c432d0952a5fcf7c1dc4d401d8b82b89c749a2ba28563f75cb7c44667865bbc5a72d13e8240995aa55bdb6722e923ff904d2be295020bb5","ssdeep":"","tlshash":"00714b08ec86ec02da66f78057eef0974b27494086d084f2bedbd80749304b95d5fad3","first_seen":"2026-08-28T14:01:08.257868Z","last_seen":"2026-08-28T14:17:30.870727Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home.jpg","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.426Z","timestamp":1787926615426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home.jpg HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 15:20:43 GMT\r\netag: \"6a6cbd4b-9920\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDZO4i2lVPCAiXJH%2B2VwMa%2BiPnJ3xH91zTzj%2FnTjZ5dZJS7MFzN%2BWC7Tnx7tpv0tucD5ckGdmj2sGcQRQACYFP6ePCOwAMwzYQogShPxkJNw49CIogQMIsANYknWI0nc\"}]}\r\ncf-ray: a323efc26a4256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39200,"size_decoded":39982,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 666x407, components 3","md5":"ee30e7d4b1890c30c38a89772ddb4754","sha1":"ce165489e44c42fa179fbe6525c95c194c0abd83","sha256":"1b3e9ae2a850cbd88e2fb5896aeb4116c706937a8712d6c3f77868e9e11c4af6","sha512":"e5e4b7d065c96833c11497bbe7b9f390440f19e96ed363440121ceb640e07b289991c830fda61a4dddb47c3f226986272394d7a0d94f1e359e1018615d5648e4","ssdeep":"768:CaEIYV2y+60njWbhy9J7OQq/QvpDcEHXvpjKYjcRPHGtPkr003E:LE/V2yTcUe7OZ/w17uYjcRPHCg0OE","tlshash":"0103f1862f751633cf96b33490eb86a7c543627ba2d52279750d8fc99ace702863930c","first_seen":"2026-08-28T14:01:08.25246Z","last_seen":"2026-08-28T14:17:30.87191Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.525Z","timestamp":1787926616525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/form.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Aug 2021 08:56:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610904aa-2577\"\r\nexpires: Sat, 29 Aug 2026 02:00:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 989\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSJbXFUomsEcJj0%2FvQWtk0msiVfBEURc8HEQsnxyQQKk90M%2FHy5R2OxCSa%2B0bytxPpHDKLDBFL%2BqCw4AkqM8hHtvg3xKQRED4pgRQbue5Kkc2O39JJ158NDprY0R2gUl\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc94a8756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9591,"size_decoded":4961,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9284)","md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-28T14:17:30.873695Z","times_seen":131,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/layui/css/layui.css?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.366Z","timestamp":1787926615366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/layui/css/layui.css?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Nov 2021 07:39:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61960328-1224e\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLrB5OaQg7o36IPGmApA7xXP53%2B1uLssk9GLe%2B7iVSvxHJ%2BC6qmfbUCUkZiG9vm0mkO519wFdlMEJvznkveOrGRVdZhDW4T5RhX8P3nALU8yn0YbRKUD5SYXgBSAs19f\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc20a1556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74318,"size_decoded":17346,"mime_type":"text/css","magic":"ASCII text, with very long lines (65504)","md5":"6490be49e910a3e2ccac0cd63ac5be57","sha1":"bc1b9e3070e5e051a9132a27f9a5ac494d4ded1e","sha256":"4d891687db5cd12b3f5fb777a151efcdc0a94bae9e4231d719d0b3f7716f8f2b","sha512":"09083b4fd7802d880b94aa6fe674f8c5ec5b7fb63b550251fa2ae04b622d6164e1551998e4d7c8aaa152e303da70b9dce2c94747655a32b7000fbad8c11efc9b","ssdeep":"768:4/nEWwcY/8zYbRzycl81JpZlwyQaIYKsR3zdVhlu9Tr1BpRBtfKa6G6nr4wdV7np:tWwcY/8fG68wjHmavq8","tlshash":"59739632e6012ca5762bd215b1dcbdfda0789512ea634e6df3823b1b87848471077f6b","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.875495Z","times_seen":62,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/web3.min.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.377Z","timestamp":1787926615377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/web3.min.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Apr 2023 06:09:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644228a2-152100\"\r\nexpires: Sat, 29 Aug 2026 02:00:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ilgZU9b99EqTo3vARIvnDz9fIy4cRCbacNz3GYuQAvSjTXkxt%2BD37LFYC1cPLdyQoAV5OAkDbrDp53phMR8mWiVWpTWu9LROEAlOY56F%2BkRQe7CRj%2F9d9ZBDrQQUmZm\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384704,"size_decoded":438521,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43607)","md5":"3dc3d8cf48a40af775c23b6e13e80fb6","sha1":"81c654f0d85665cf39e5b6358db7fc4c659cbcc9","sha256":"7ca86cf23873b463ae5620892d2bf3f7adc23e74754bf3b97edb5b9a9a26ba0d","sha512":"97d0e32150fe2f71b9a8a74f5df2cb7ec7c2e052f599a50dce6f6cd0af342a941e95410f813a8baa2034b9deca27e650ff67cc06291e4b333d1956e06d816ff9","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KLO:QZoQjxAO","tlshash":"9f25a6c4b6507051c3a56e90442f900ae33efd693c4e0169fb57ecf76cb8a89552af3a","first_seen":"2025-09-06T18:04:03.23715Z","last_seen":"2026-08-28T14:17:30.877336Z","times_seen":47,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/websocket.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.392Z","timestamp":1787926615392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/websocket.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Mar 2025 17:28:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c5e6d2-4029\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ROdaHTVJz%2BaQb3rz24OWmiFp5G8wiQQU5qyE8H7wvEdR7xohK2pyRNLiOfdWjrrolDME4RAOLhrvxbNijrBggswVvCt5sYFtz3pORcK%2F0%2FnfTYVqSJ4x7G57ApAn1J%2B\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc23a2756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16425,"size_decoded":5374,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bd143f09d154c1c9ca348c559d53ee80","sha1":"34860721cf753765b16fe526cd7a5618326a3b1a","sha256":"83938f0bdc966fd9a7b7ec3d757eccd7d990a7ae12bef7406e528e9c22a9015b","sha512":"5733bbd345d8fafe9cd76e218d9adba741106fd630aa8be303f0e2d0091f3ab83cf1a63eecbcfc6b92c09d7a94eec161bdb2e4f5dcb53068d30b818598737735","ssdeep":"192:EHjrXg7hWXwiQRdUFUMeajJiMF0Cl3Loa5fFwy4HrwIIgUdjAN:EDrQ0XRQLM1iMF0Cl3LoaILEWNN","tlshash":"167252a0fbac151f50f6102d84ac55c86bdc8571c7a849e7babca6d00748f1e146bdbf","first_seen":"2025-10-15T23:11:00.714426Z","last_seen":"2026-08-28T14:17:30.883186Z","times_seen":5,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/imgn/Dark/notice.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.408Z","timestamp":1787926615408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/notice.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 19 Feb 2023 16:24:56 GMT\r\netag: \"63f24d58-21b\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms79XS%2BD6uKPCM7sDtiURfXOW9Hem%2FVPus2BIXIecfmqQs4IMOyCsCeZxaL9mk7tpIC%2BMhmv3SDvbhTHCC%2FIYucbf7Xj3Lrdp6QRAwy%2BlgEZf3p4hDQxALGhDcxeyZrD\"}]}\r\ncf-ray: a323efc24a3056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 539\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539,"size_decoded":1319,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7891a0219f54f843fd5d8d8a33426825","sha1":"fcd8d245752e3c7c9ce5ab8cf1deb5e1aef29682","sha256":"660da6387b18b407a644cc8586b438d93d5843a3463442cb489c67543cd297b4","sha512":"818d564fe544d35dab7e644dbf67395690fbbb800b480935c20a3582e19b71fea357de54dc5bd4c724e6fc96485b1626b1ece0388e584c9c2aa748d5f9e1ae89","ssdeep":"","tlshash":"d9f075432548513697afa07feae336a1bf26373a7f01c4aabd44c1042f6f1664cd0b29","first_seen":"2025-02-26T18:00:22.730452Z","last_seen":"2026-08-28T14:17:30.893943Z","times_seen":49,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mg.rp989.com/wss","fqdn":"mg.rp989.com","domain":"rp989.com","tld":"com"},"ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:17:00.761Z","timestamp":1787926620761,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rp989.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 02:59:26 GMT","end":"Thu, 12 Nov 2026 03:56:01 GMT"},"fingerprint":{"sha1":"C5:61:B2:53:7F:60:A2:97:54:A4:E5:58:18:C0:13:DD:9B:32:DB:90","sha256":"C5:9A:71:0C:A3:E3:1B:78:4E:1E:82:41:55:D2:5F:6B:79:36:1C:3F:3E:0D:2D:F4:52:67:5E:68:1D:57:15:13"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: mg.rp989.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bigebmora.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fcZNVEP7oEK59sDgAC4FSw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 28 Aug 2026 14:17:01 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 4paR9/iRlOolvunfAt1boyl16sg=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pu8w9E%2FHPwZ6UWarEHh5WzYzUVgqFABs4vGHGa3ASlDRsp0cnwUMoCQCV%2BT0aE2p6LD0%2B4iX3IO6uzJpgDGmy6V2VAjmX1blqxRFlyhMi7zfucZhL8tcxNrCqpX%2B3Q%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a323efe3f8be5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":620,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":221,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/index/index","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:54.948Z","timestamp":1787926614948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /mobile/index/index HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: lang=id-id; path=/\nPHPSESSID=965ce8120b12a9a6dea741900a971582; path=/\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hhf1X7bBWwlFqpnPlqCM5BuJNx5%2FHMCevVTE8WSiYH0TYGY5BzVLx5SfxGjv%2FjZSPB2g2LRyge9K55qLNTr2V0IZvpBaVPa5tVt46CBich9AkBi5scbBV4VJoTdX1mFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323efbf6a0656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"id-id","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=id-id; path=/"},{"name":"PHPSESSID","value":"965ce8120b12a9a6dea741900a971582","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=965ce8120b12a9a6dea741900a971582; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}],"data":{"size":57789,"size_decoded":10977,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"02eceabda08f08ebc574e3b5f38a9da7","sha1":"c04764dd547a928097c7a63da171c5d3519b4d9a","sha256":"a90d42675b56fd567d52c689474204c939f02b6c1c1ec7f1ebcaf2ee71d2e71a","sha512":"88416aa1344f052f4354cd40e5f2aecc172254743811fe6dbdbb6a9402aa8ca7d993284479109c664a800ebd61fbb683bf7e0bdda12ba34a2c762b8d1c0de40c","ssdeep":"768:LP5c9MxqOTk7plr02clNH7jhyjqfrcj2xP:pkjQ2clNH7jhyjqfrcjQP","tlshash":"d9432110c7dd191720a290c26aa45e1ebcfe9f32e25e4508f3af4e95bf83f45ae13549","first_seen":"2026-08-28T14:17:30.898857Z","last_seen":"2026-08-28T14:17:30.898857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/index/images/vn.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.398Z","timestamp":1787926615398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/index/images/vn.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Jul 2023 08:56:10 GMT\r\netag: \"64bceb2a-2359\"\r\nexpires: Sun, 27 Sep 2026 14:00:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZjYxUbypL%2FSzzOks1XjBIr0MfYzq%2BIBgaD2Asuai1hJSPS689%2FQc5zFpTxSbIMGzE4dwgOiaJurBbKhxZwrb%2Bn%2B5JxR%2B0YGm4%2B6C37HlRqVt2pyde4kYvUnFPleeyAg\"}]}\r\ncf-ray: a323efc23a2a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9049\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9049,"size_decoded":9835,"mime_type":"image/png","magic":"PNG image data, 800 x 533, 8-bit/color RGB, non-interlaced","md5":"45255c9ccaa2aa5fc3742baee93ecfb9","sha1":"7b1eb5e5db500d3e72e488de1724788b638a676b","sha256":"3fa711c64741497358c7ec7cd79a020752246df8dcbec0dfc5aa2be0fee1e1e1","sha512":"89b771ffba7a2755edb4cc534ab7bcc25a37815df90673fac8ef13ec66d5d727a8c8ee35e344d9f594cbb077fc7bc3636b4f43ae81cf56e8fc67c9d4f6e164b9","ssdeep":"192:scI8xibfamfU5b+9VadMmKpD6z5T3mxmAutu1C+XTs3pYb:y8xibymfUlmSMmKpu5TmYAutcC+EpYb","tlshash":"2c122889f8dc1f924a548a369dc4b7b2615b4339068d0e56bc3f0291794a2c7a6ff343","first_seen":"2025-03-15T23:28:02.080267Z","last_seen":"2026-08-28T14:17:30.909904Z","times_seen":27,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/index/images/ru.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.406Z","timestamp":1787926615406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/index/images/ru.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-b07\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5GDw5Z6az1BvL0UI%2BTXX%2BVaEH2CpiWPesdIGh984pbt3QcPi%2BPl54KcRVsRNLc2NYL4M61V%2FxIBl%2BfNzh5Y6icBf3lN%2BnW60E%2F2MXY%2BXaTa84Ge%2B%2Bup%2BCBlQ0iz0CtE\"}]}\r\ncf-ray: a323efc24a2e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2823\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2823,"size_decoded":3616,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"bf6ba80ad73b1536ca1eaadcf1e6d7ee","sha1":"3655aa6557d155cb171cf75181ff885d7024561e","sha256":"1ba143597a6f749bd4bd2234bf37a6290df1adff1efe8cee9907b7233c6a8b26","sha512":"fb74f5dc8d38d00af7e869a264279a5137b482a65b011f9cdd9d3d3a59acd46fc9913cb9194feff203b147e6ff536af8eab15a16c88c78809df5bf123ef7f1d9","ssdeep":"","tlshash":"be51256eddc17f89db60ae382079a402b2c745ef8d53679c70466e04ee17ab7140ef82","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-28T14:17:30.912615Z","times_seen":77,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-14.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.420Z","timestamp":1787926615420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-14.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-b32\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnJxWFZ0bCZQJ1F9kF4Yn%2Fv%2BhLTdGg8U6kk0IVaXX3N575p4iE9xoClhGre5aMdwc1c0RvpzsGVuNs72cfeKa%2BQzmbzfQ2YgFtuVXzhJFW2vvd5lj5lnNkbZPno1%2FBOO\"}]}\r\ncf-ray: a323efc25a3b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2866,"size_decoded":3645,"mime_type":"image/png","magic":"PNG image data, 73 x 68, 8-bit/color RGBA, non-interlaced","md5":"4995ca21a0ade71688096c4fa4a63950","sha1":"9d19ed16847bbfcbe9072c9c1976e50e563f6250","sha256":"626c8f05fbac681a11b10bb17af81a041010c906bbb6dfefe995a040e67d63a5","sha512":"0359bdc6189af8993a908b48a12488833517af660514bd30984b9d5381e388ce1e68d3957badc5534d1977a61adb54814be72158fffc48a641fb850bb47715ff","ssdeep":"","tlshash":"4b513b3eb7ea845ebb48cc31224a93c9fce01e552e06b50e2117ae133751916d0b6503","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.915336Z","times_seen":68,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home_ai.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.424Z","timestamp":1787926615424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home_ai.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Aug 2023 14:14:27 GMT\r\netag: \"64d0fc43-11822\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRlDEqD3tbtiePkiwyiiCyaeWHvfcwZJlRwqawow2W7zEJpGEBDixAi0SCXixhe9TeTz2V6pZblYbDMlKRAbrxGaMHBJX7Vr31rtnDt6HeV%2BUcp5UroePIJ9ICC5PKQw\"}]}\r\ncf-ray: a323efc26a3f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71714,"size_decoded":72490,"mime_type":"image/png","magic":"PNG image data, 1812 x 1416, 8-bit colormap, non-interlaced","md5":"28bce220642938bda0b1f1ceeed917b6","sha1":"f410cb905315be47ccf2a253a33a06364baf61bf","sha256":"36cdf7bfdc67ddbad9fc935951170c25f8ed46af03abea5165680fecfc45f84e","sha512":"7de3aa48b67b4dd1b02dc05fa43ceac4eefac3fe791d0cd3feb952312a4e94cb4cbe0f880e98190b7130fae81eb63fdde6202813651dd11626fc361fe04f0c9e","ssdeep":"1536:GsAF8yM/DHE2T/MQp5lwOKCAhlbWbbX4HROUnAaeMGZMake:GbF8fVoSabWYYaAGGhke","tlshash":"5663f17a80196dd0f64227b10cf85405f5aa4683b6838fdd0bba1693df276cc872394b","first_seen":"2025-03-15T23:28:02.074885Z","last_seen":"2026-08-28T14:17:30.917726Z","times_seen":27,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/nav-1-active.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.429Z","timestamp":1787926615429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/nav-1-active.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:48:05 GMT\r\netag: \"6776b535-700\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cq%2BW5%2B9sfLg%2BOEbouYUOOhgUKAiMfNZDIcKfiLp7%2FDuiiSIw51htqBtargKO0eAo%2FaiYo8e6vDlLpAB7RF068TRG6HrC2%2FlLsmXHqdbi%2BO40WFaiSfjNoiVKYqQW813Y\"}]}\r\ncf-ray: a323efc26a4556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1792,"size_decoded":2577,"mime_type":"image/png","magic":"PNG image data, 39 x 43, 8-bit/color RGBA, non-interlaced","md5":"6e2baf8ad92bb13eccce1b784be6f4de","sha1":"56195bc729f562359e7a5de5d0db813017971b68","sha256":"155295d2342170ff1b32d8bf029e9b1cd79ab884b6014fef2bc2990bf57cb44d","sha512":"ec2ecc8a420b474996700a8f7177985e1d512ede1d5fda6285ac995175c51899c90014654e5b440cfe83006d87d087f4783a729bf462be683b2936ec3ee504a5","ssdeep":"","tlshash":"39312bdb974664088db27c5113441d4c1f290b666ef7ae0c14c4f8cf31be0ca5624a38","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.91962Z","times_seen":268,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile/ajax/findcpm.html","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.521Z","timestamp":1787926616521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"POST /mobile/ajax/findcpm.html HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 16\r\nOrigin: https://bigebmora.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"type=2\u0026site=home"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: lang=id-id; path=/\nPHPSESSID=965ce8120b12a9a6dea741900a971582; path=/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95jg6qPmI7BCJj2Y%2BOUlkjdeyijArM08M88RUY%2BGfsuJ4baw94d4bS8IAgh7x91gqESYZfcIuuXaFttwwh5zsnpDHkyrauOLpjo8mg3VlU75Hc%2ButoiS8EIZ2Gb0T8G0\"}]}\r\ncf-ray: a323efc94a8656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"id-id","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=id-id; path=/"},{"name":"PHPSESSID","value":"965ce8120b12a9a6dea741900a971582","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=965ce8120b12a9a6dea741900a971582; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df6c9a371eba46d75c2d23716da14f68","sha1":"7f1f8085bf1dde2c9bb145d781ba10d0d7562120","sha256":"8d7ceda7cfa31d9ab87b8670866615c34bd4d40b8219d30a82700fa122e6f39d","sha512":"94bab95251edfb282ab0cbca1c5fc5f57633b3eadc79ae32fdfc1dd058034db5e7dfbd3d39f162aa8352ee68abc6e8d1148bc2c109b4944ab67e971e82bd8832","ssdeep":"","tlshash":"ba500030303c000300030000000c0000c33f00000f0300000c0c033000000000000030","first_seen":"2025-02-07T16:57:45.843996Z","last_seen":"2026-08-28T14:17:30.921608Z","times_seen":16,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/css/style.css?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.368Z","timestamp":1787926615368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/css/style.css?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jan 2025 17:22:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677c113c-5bba\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzzrmKfmgPrqoLgkG7tObucI%2Fn7F0boAxMU0Z3RfqHt%2F75m2fz%2FRNqmNYgcapQgkVyljxyK8E89%2B99RGR4KCMioSFiO1JrJBcI98JeQ7wZzpiGphMN3Xctu2ZHh7ldAa\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc20a1656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23482,"size_decoded":7035,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"4a2e781e6f87aeeb3e397e02f0c78776","sha1":"57ec85f454bffdecad6db7412cb8041914537255","sha256":"02403f5ea30f7dc322e91ce0c2817a072af7f117482d99297f1e41318abeb9d4","sha512":"92b6e0f138bf0e23d17a5aad1791fb5537b737f355be34edc28189c43eef027f69e4f5ceed64c6c7f99ed2fe801a6d5406a1c334299ad3bbc4a6071465200502","ssdeep":"192:MI8pnCzLGbV81/uGzsYyh4OKImsk9Lz7Po7fKaucG5ljo4CUY4o+hnMD6rFd1Vdq:MfC681/bzsVKFHo7IcG/DfFpax/F5R9","tlshash":"13b2852b77421c46b116d0b6ee6da7b2b33d5413a94f9db4f588312dcbc089190b7b8b","first_seen":"2025-10-15T23:11:00.949727Z","last_seen":"2026-08-28T14:17:30.923848Z","times_seen":5,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/iosapp.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.388Z","timestamp":1787926615388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/iosapp.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Nov 2021 13:32:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61950462-806\"\r\nexpires: Sat, 29 Aug 2026 02:00:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bym6x0WpihQAai9kNlYBgi2hn%2FMy0y2fnhjLNIxYQg%2Bg1XR0dI9FL1voMHLByLbaZtRI5L%2Fz52XYDC1yK0sT4CFvziw9XZYeiBgQNk1PbpJ0cimMFPVpTZFC%2BIj08F0n\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc22a2356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":1688,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CR line terminators","md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-28T14:17:30.925679Z","times_seen":62,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/index/index.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.390Z","timestamp":1787926615390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/index/index.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 08:26:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125feaa-1211\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJAKTY7JltNSrNyw9%2BOKf01qBEAqG7Btaivuxvm1dRlnR2SRYcttiYR6QBwrAL0%2FTyebqhDwQn%2BU4cstLgad7h4S4X%2Frtbc83QzbGNZKplZT0WHnBmY7MGvPNL7FZqon\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efc22a2556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4625,"size_decoded":2486,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-28T14:17:30.929942Z","times_seen":56,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/layui.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.375Z","timestamp":1787926615375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/layui.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1ce3\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yw%2FFcI6H4Xuf%2FtA6TC5NVAlBkiNAsiNJKIQFK5W%2B%2BiRddtRM1S3jpbC7j9uhcL9k64aVZArMvVFJQoSYiXfZurx0gjyN0CERKp41YwCEypotA%2Br6hsuq0fYI%2BPVqOOMg\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7395,"size_decoded":4067,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7324)","md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-29T01:32:11.479743Z","times_seen":596,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/layer_mobile/layer.js?v=1787926615","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.379Z","timestamp":1787926615379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/layer.js?v=1787926615 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Apr 2023 07:22:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644239a0-d02\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1ONpbAbTnX5BLZekD5dblyL7oDxwjX1zxlsQd4jllLPLTZrUj%2BFw2GoJTwDgRK4i4kxhMVo5vzcYasBbx8UEfeA0ZfG48YljHDOPmJ0xiwl71fBwatE8Mo0T2jzSl7w\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330,"size_decoded":2362,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3267)","md5":"b779281d1bc48453207fe2cfe0fc269f","sha1":"9d7a4f3faaa85d8abf62bb8f450146a5920144eb","sha256":"27751e247667cc06cc4985515759153864421aab1f2f5a660a79ea82548c7ed4","sha512":"92553de96e3388f4ac94924f577f72cd1cb4b2c3ecef7dbc8a86eac66d4b51ee24292d8d39d0d22c495842a30b99a622d08dafb9fbec890e4f7f24bc417e5bc9","ssdeep":"","tlshash":"8361b876f1013677662321c4e06f590f7a736591b100c802e0e4d1ada9fec4ca8bbf6d","first_seen":"2025-03-15T23:28:02.133651Z","last_seen":"2026-08-28T14:17:30.932174Z","times_seen":27,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/index/images/en.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.404Z","timestamp":1787926615404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/index/images/en.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-740\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FaZPPinrs%2F%2FtxhdiRl4Qc7cHzyvRFsFALvqduaPLZu%2BxVu%2B%2FhaVsv7NSSz3HVogCGKoJu2i6Xbdkg0BXLO2hGSejyT9Bkb3CS%2BgheU11ieDTBH7DQwK6zEzlMmrjwqk7\"}]}\r\ncf-ray: a323efc24a2b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1856,"size_decoded":2639,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e8aa640b1d129c94e299dfd580f210","sha1":"ccfa030c16120a11d224fa1ba72afd55f0776523","sha256":"7385aee2de7d89a525b33e6ff1e8c1246de9234fcc7346f5877ee7d3301f8ca1","sha512":"6ca9e3f44d4ce8a0f7734c8f814138fe54c3224f08905a6e0634f36f1c4de6ecef43281df8a7b29f473300a1096565b148ced5e51fb23b050457c63714af11c3","ssdeep":"","tlshash":"e4311bb469a26052fa5e2ad4be1045df4ef89c0605d89251e60645e13c9eef19f0c437","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-28T14:17:30.936125Z","times_seen":473,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/hegui.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.413Z","timestamp":1787926615413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/hegui.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jan 2025 16:39:51 GMT\r\netag: \"677d58d7-d07\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0b%2F5t9U3g%2By%2BpXoTEPGzH06RRknMVx%2BdchBo3hX%2BlEddEYfcqf2Krq0%2BaH4YnN5F77c4aU0y5ngvBOP2IvfmTaJfn4rXILqRqD3yd1vi2dDp5v9szp4x%2FHk2jPLhJmsX\"}]}\r\ncf-ray: a323efc25a3556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3335,"size_decoded":4120,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c1b348618f9a967f0b21ea4a90cd75ba","sha1":"914b4252df536a02e91b2db8a72398ab078f3b2f","sha256":"d91c3bc13cc9a1b790056e35a16fbac5436707506a1d3238e6946e9cd35e09ac","sha512":"101a2885f30b1125f68b362ba5e2c60c4887ce14dd8eaf17724294ed88f1523d98685108f926f5d334eb2965dc64959883e5726d4224ad49ec33bc2e8dada712","ssdeep":"","tlshash":"d6610884e9406c124a04f844b8fba13b2b174bd099c08466ecefd95299b07fad88a9c3","first_seen":"2025-10-15T23:11:00.723067Z","last_seen":"2026-08-28T14:17:30.943104Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-3.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.419Z","timestamp":1787926615419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-3.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jan 2025 15:45:25 GMT\r\netag: \"6776b495-f02\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQVi5EWrOTe5wVcuu8kqMZvSbC%2F1fInP%2FQG4Y%2FYCOm3EIBs%2FUw%2FtZSkDZT%2F%2BFxgMml8IZRq5k8kIfilma5vVb%2Ba%2FTr0EbRk5Mw9H1z1uVyzyKcG7KzPRM855d3rlm1SO\"}]}\r\ncf-ray: a323efc25a3a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3842,"size_decoded":4631,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"af1e80bff113a7687e542d4fca416239","sha1":"83ce6e6d1881f6fa0d2a64873cde529d2fc14055","sha256":"dc41ff7881c27712a7a16d402346b6af5d3de0eda8b78b07a5a537df095393a0","sha512":"cce7ce1bf1894630112a56ba27699ea9a63c436e552cd4b5f052b7d8f40370a6833a37a4ac2ac34e776cf941d3337c831929b7c41be9fa436a1329e2858b57e2","ssdeep":"","tlshash":"29814c89f1c2a81121469c84eae6d1b72b3757e086e0e4a5dcdbc42bd8745fcc8de9d3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.945659Z","times_seen":207,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/imgn/table-bg.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.329Z","timestamp":1787926616329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/imgn/table-bg.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/static/mobile/css/mobile.css?v=178792661521\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWOgFFoiyCOryWVjtH4encimF7Bhugl9AsB5VnW2WsWAot4C6C%2BaHYZwToMzgh7QwfqDRJeEWRmQdgiQtadIM9WGuw4325TtN%2BNX8ogJm8fFe44lebRv0Is6GRYuFNFt\"}]}\r\ncf-ray: a323efc80a7156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":698,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-29T19:09:06.068057Z","times_seen":555088,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/layui/font/iconfont.woff2?v=256","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.364Z","timestamp":1787926616364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/layui/font/iconfont.woff2?v=256 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/static/mobile/layui/css/layui.css?v=1787926615\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\netag: \"611b6cbc-656c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 989\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJyB3briX5QrT5rx51yo72b0sZTF5tYtBpWmo%2FM%2FMuvd2ek0u5ULawnPIae7qi3agKVZJQ0DoP176OGQf2JbpLAyq6y%2BDHo23yaPDKKwkTeM53%2BCYHHDX63Rc%2BhLxmUq\"}]}\r\ncf-ray: a323efc84a7856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25964,"size_decoded":26709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 1.0","md5":"d8c214c89e33a7bea93d656bd865e869","sha1":"c188dbfc6951b7c305940ac3a279227aeb5617f4","sha256":"bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09","sha512":"0e5897c1b874a714fbab221e97717c5bd8b6c525b539a24eca76391206f931abf5cad2441743c441239ca2830f3fb33c34d207e13ee4d1eb3eeba806763f8405","ssdeep":"768:4kZIXl8feK5HavVh7VQB+l9yDbzKu1eNxECo:4kZIV8fqxQB+l03zdeNq3","tlshash":"fbc2e1c340bb8ab8b077783c6a9e96b9d51134261dde919427cc096043feb49eace701","first_seen":"2023-04-14T13:17:16Z","last_seen":"2026-08-28T23:24:10.959065Z","times_seen":1068,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mg.rp989.com/wss","fqdn":"mg.rp989.com","domain":"rp989.com","tld":"com"},"ip":{"addr":"172.67.204.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.764Z","timestamp":1787926616764,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /wss HTTP/1.1\r\nHost: mg.rp989.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bigebmora.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HISGmYKP/XPFIQcFNG5D7Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 28 Aug 2026 14:17:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6387\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a323efde68860b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/js/layer_mobile/need/layer.css","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.376Z","timestamp":1787926615376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/js/layer_mobile/need/layer.css HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Aug 2016 09:35:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57c00d68-148c\"\r\nexpires: Sat, 29 Aug 2026 02:00:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db%2By%2BGobMaL%2B99yZDMO%2Ffu6xwvFmKBWeJ6R%2FNURduUXGrkHRagBy1qEeSqEFMddxluVYL%2BHiYv29ys%2FBPP2GtibzQdLbZMfti1UfB8MkAsrv2htNv0VysS40s5Qd%2BM5o\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc21a1d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5260,"size_decoded":2221,"mime_type":"text/css","magic":"ASCII text, with very long lines (5260), with no line terminators","md5":"633915e62d14a714594b95b974ee0836","sha1":"e11ebb64a70272c4f35b92fea064f27c4b87efad","sha256":"eecc7effcae5f246e6212c30c525cee9e11cadedc7d32aa6def213f1a90d98f6","sha512":"3a0f469c32521c0fe51838b099650f055410cbdabf64659856e009c8d5e1f3a32fed568832282a92892f1398c8557fe1f64a6a34881f711ecd55b41b054d243a","ssdeep":"96:tJA7fs72Cyf26B6ZtbXBh+Bcw0iZRfcSNHIFSf:J72b5YZtbXucwlrESNoa","tlshash":"9cb1c796989303e8b027c51796dc5efe70388d43915209aef157382fc74bdd9b1b260b","first_seen":"2023-04-07T00:16:00Z","last_seen":"2026-08-28T14:17:30.950185Z","times_seen":5136,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/mobile","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:16:54.258Z","timestamp":1787926614258,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /mobile HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:54 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkMMh3rCL2YosjbHFFI6aRiK0TEox3VhsS2But84avAqNgK7llyARQvMFkzM45dFsA2Zxp2XAr1KONZ03YdSmLZH01AWcsLOXxnkhXLgTfZSQ9k38RdrM8dWTvjKFc5M\"}]}\r\nlocation: https://bigebmora.com/mobile/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a323efbb19d756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/img/home-nav-12.png","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.422Z","timestamp":1787926615422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/img/home-nav-12.png HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jan 2025 12:20:56 GMT\r\netag: \"6777d628-19c5\"\r\nexpires: Sun, 27 Sep 2026 14:00:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5yZSUhxxgA8Wm%2BMxUeUm7DrO2kACNPlC8NY3Wb%2Bg%2Fi0v6P7JuvmWZZl0t1DwE7D8BTtanmGXa1mt7SL99GwGFIbmCnaYpgIKiZJkVKTmXwChQhUYXWsGY7vp9uplrq%2F\"}]}\r\ncf-ray: a323efc26a3d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6597,"size_decoded":7377,"mime_type":"image/png","magic":"PNG image data, 86 x 87, 8-bit/color RGBA, non-interlaced","md5":"f65bbf6247b64ab0aa4d192730f5bc62","sha1":"58f64d34c30d0efbe91b2ecfd6cd1d1eedefb592","sha256":"11812f741ae3c78eb8840fb986f6b2b65c8f580d2db6be4d58d40d0567b12e1e","sha512":"f3ec7c165a0845bb40fb39f3d3acf66a3aa1e8258f6f892f76e71db09783dd04bf60db6905d6a6042c32e6e133f3013a70442fd114fbfcadb9c8ffa0ff9c274b","ssdeep":"96:xknmWIHh/TsyNGjmGg37HuH5/M1WVSX2RzBFe5qVqS+nISx/e1MCx5hyncMGyC+/:xkn27O5M1BGR9Fv1a//C9yncFyC+xwi","tlshash":"32d17e01ff6d0db84a9f59a046d9e16a1b310bd48fc134967ccdc5230e216f9ce1d5d6","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-08-28T14:17:30.952122Z","times_seen":76,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:56.775Z","timestamp":1787926616775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/carousel.js HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-f16\"\r\nexpires: Sat, 29 Aug 2026 02:00:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 988\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgZ5Y3vOC6FJRxc%2BSx%2BelEQp7GPpL4Q1MAy0Y5pZGNkTCTjU0iVjfRyCZlbHxC3%2FmsAzKoqzH3vStg7wSvoVnIrXaphk0W4FTmL2NHZIaYaFXBODYm923BvxmLFrw%2BfB\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323efcada9e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3862,"size_decoded":2280,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3805)","md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-28T14:17:30.953888Z","times_seen":98,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/favicon.ico","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:57.012Z","timestamp":1787926617012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:57 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juyZIW6NogC%2BYzQ3%2BPhiWhymC1lGLSjBXoosbnIW4%2F2Z0CjGTxE%2BmPdqe7WSf4R8f1K0TJU1Nam%2FF0nu97DZZ5AmXYdiEHOmT59fw7qQuQvSfmt8W%2BcycrcCFpLg0Q7G\"}]}\r\nlast-modified: Fri, 28 Feb 2025 09:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\nage: 989\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"67c17e69-10be\"\r\ncf-ray: a323efcc5ab056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1774,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f7d872bed7b9ce6f1c5769df3ef3d650","sha1":"82ae3e4d5372a441031bfc73790473d1bc3f821b","sha256":"94c2c861c94e0803f436f87f681149796bf00ffd219cb4e2e8d54bda1f173248","sha512":"781c9ede05b7dcb77033b9bfe131c2a5150c1f0229a055bdcc4c473aa93fdf2cb154004489608d32690bd0039b08fb3bfb926af51b5dcfd03d2bcabb0c8842f1","ssdeep":"48:dVwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwl:dKcfQWywTHcjaMl9M","tlshash":"a29142ee306fd086f2307e79b4aaf81a70702c0835ab97421d347c591af2e7620564c8","first_seen":"2026-08-28T14:01:08.291463Z","last_seen":"2026-08-28T14:17:30.957075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigebmora.com/static/mobile/css/mobile.css?v=178792661521","fqdn":"bigebmora.com","domain":"bigebmora.com","tld":"com"},"ip":{"addr":"172.67.172.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigebmora.com/mobile/index/index","date":"2026-08-28T14:16:55.369Z","timestamp":1787926615369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigebmora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 15:16:12 GMT","end":"Tue, 24 Nov 2026 16:14:46 GMT"},"fingerprint":{"sha1":"58:36:D6:DC:5B:B1:15:94:03:C2:5F:70:B4:E8:55:88:B2:41:F6:D7","sha256":"98:3C:1A:67:49:66:C2:D1:18:5F:99:FE:4F:CA:44:9F:1C:8E:69:B1:70:81:EB:59:42:33:5E:88:AE:D0:12:31"}}},"request":{"raw":"GET /static/mobile/css/mobile.css?v=178792661521 HTTP/1.1\r\nHost: bigebmora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigebmora.com/mobile/index/index\r\nCookie: lang=id-id; PHPSESSID=965ce8120b12a9a6dea741900a971582\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Dec 2025 13:30:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6947f663-109d7\"\r\nexpires: Sat, 29 Aug 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upceUDZox%2BPKzdPFsPdWUpeZ46%2Fbd%2FBdjw4t6lVNDEinewyjJa5f4zAW%2FtmMAhiJuKhge57%2B0n%2BtVSj8qe22mkofpTu2XNReaLPWs7fgSRQObDT6yCXwd28pfBo6IFbb\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323efc20a1756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68055,"size_decoded":18910,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (2654)","md5":"4aa9e500fa8a7b0299986407d3b3418c","sha1":"8055cd48c91b0dfae22407f93d6e798ac0ce4612","sha256":"fea9628dfd9a77299ed7115e4c9f078022fbdf46ed3ee48a2b23fa0edaa11a95","sha512":"3e1cab8920d1b4a877ec28a6e884fc8deaf5af0fdc2c8c96cfcdcad4c2765bc569f2ecefdaee7b3a2913d42ffa64c1628e3a841afb82a4544cdb448e7dbf9664","ssdeep":"1536:mTCAWq81brdQdGtGDdRkBWAnSvyHQrYH++t90am+FOP:GCAY1XdrtG/Hywr2++t90Ak","tlshash":"f5639827a7631c06b01bd4546f6d7ba6632c8413910fdaf97ac5726c8fc29d184f2b4e","first_seen":"2026-08-28T14:01:08.250766Z","last_seen":"2026-08-28T14:17:30.9619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"bigebmora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}